https://bugs.openldap.org/show_bug.cgi?id=8047

--- Comment #8 from Allen Zhang allen.zhang@audiocodes.com --- We have some new findings as below. We tested two scenarios:

The first test has a setup as below: 1. the server's IP is accessible. 2. server listens on the port but no response to any incoming data (so no ssl)

Test result: ldapsearch will not timeout whatever timeout value we set.

The second test has a setup below: 1. the server's IP is NOT accessible.

Test result:

ldapsearch will timeout only after TCP timeout (about 120 seconds) but not timeout at the timeout value we set.

With our "fix version", ldapsearch will timeout according to our timeout value.

So we believe there are two issues in the implementation. 1. No timeout for TCP connection(when startTLS is used) -- this is a bug. 2. No timeout for ssl connection. this is an openssl lib limitation.