Pierangelo Masarati wrote:
Michael Ströder wrote:
Pierangelo Masarati wrote:
Moreover, ldap_initialize can record that StartTLS was already requested because of the extension, and avoid requesting it twice.
What does "avoid requesting it twice" mean? Return an error code or simply ignore it? Note that a client might wanna take note of whether ldap_start_tls() was successfully called by itself or not.
Correct. Here the choice is:
- just ignore the second call, as it would violate RFC 4513
More specific: IMO the error code of the first call should be returned.
Ciao, Michael.