lib/libadmsslutil/admsslutil.c | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-)

New commits: commit 29e069f8efeb8b4a3ceb51371939f82c9df104ab Author: Mark Reynolds mreynolds@redhat.com Date: Wed Jan 30 16:05:45 2013 -0500

Ticket 497 - Console logins fail intermittenly

Bug Description: When there is a connection failure the admin server clears out the "Users & Groups" data, and tries to rebuild it binding as the SIE entry from o=netscaperoot. This bind fails with an error 53, and then we don't update the "Users & Groups" info.

Fix Description: If we geti an autentication failure, don't close the connection but inext try to bind anonymously. There must be aci's in place to allow anonymous searches of the "cn=server group" entries.

https://fedorahosted.org/389/ticket/479

Reviewed by: ?

diff --git a/lib/libadmsslutil/admsslutil.c b/lib/libadmsslutil/admsslutil.c index ae3d1bb..7ea9eb0 100644 --- a/lib/libadmsslutil/admsslutil.c +++ b/lib/libadmsslutil/admsslutil.c @@ -115,10 +115,9 @@ admldapBuildInfoSSL(AdmldapInfo info, int *errorcode) case LDAP_INAPPROPRIATE_AUTH: case LDAP_INVALID_CREDENTIALS: case LDAP_INSUFFICIENT_ACCESS: + case LDAP_UNWILLING_TO_PERFORM: /* authenticate failed: Should not continue */ - ldap_unbind_ext(ld, NULL, NULL); - *errorcode = ADMUTIL_LDAP_ERR; - return 0; + break; case LDAP_NO_SUCH_OBJECT: case LDAP_ALIAS_PROBLEM: case LDAP_INVALID_DN_SYNTAX: