#4692 FreeBSD 10.2 LDAP Client does not use ldaps:// when ssl_type = 2

[John Keeler]

With the ldap-server module, I am unable to connect to local slapd daemon when it is configured to use TLS.

Found that in file : ldap-client/ldap-client-lib.pl
~ line 239:

$ldap = Net::LDAP->new($h, port => $port,
                                scheme => $use_ssl == 1 ? 'ldaps' : 'ldap',
                                inet6 => &should_use_inet6($h));

checked that $use_ssl is correctly evaluating to 2
Should this read ?:

                                scheme => $use_ssl >= 1 ? 'ldaps' : 'ldap',

This worked for me

Operating system FreeBSD 10.2
Webmin version 1.770
Kernel and CPU FreeBSD 10.2-RELEASE-p7 on i386
package installed from pkg install webmin did NOT use ports
openssl version : 1.0.1p-freebsd 9 Jul 2015

[Jamie Cameron]

I don't think that is correct, because when the local LDAP client config file has the "ssl" directive set to "start_tls", it means that the connection should only be switched to TLS mode after the initial negotiation. Is your LDAP server in TLS-only mode?

[John Keeler]

I see now what you are saying, I think I misunderstood what the use TLS flag meant.
So the settings mean
**Use encryption with LDAP server **
Yes = port 636 , ldaps:, full SSL/TLS
Yes TLS = port 389 , ldap: , initiate with STARTTLS protocol on the old port

Sorry for the confusion
Yeah my server was only listenting on 636 for the full SSL

[Jamie Cameron]

Ok, sounds like webmin is working as expected then