Do not attempt to use START_TLS on SSL connections

Not all LDAP servers are capable of handling dual-encryption with
both TLS and SSL.

https://fedorahosted.org/sssd/ticket/795

1 files changed, 10 insertions, 0 deletions

diff --git a/src/providers/ldap/ldap_common.c b/src/providers/ldap/ldap_common.c
index b99291c9..4ee1e059 100644
--- a/src/providers/ldap/ldap_common.c
+++ b/src/providers/ldap/ldap_common.c
@@ -701,3 +701,13 @@ void sdap_gsh_disconnect_callback(void *pvt)
         ctx->gsh->connected = false;
     }
 }
+
+bool sdap_is_secure_uri(const char *uri)
+{
+    /* LDAPS and LDAPI URI's are secure channels */
+    if ((strncasecmp(uri, LDAP_SSL_URI, strlen(LDAP_SSL_URI)) == 0) ||
+        (strncasecmp(uri, LDAP_LDAPI_URI, strlen(LDAP_LDAPI_URI)) == 0)) {
+        return true;
+    }
+    return false;
+}