Description of problem:

I have configured passthrough plugin to do Starttls:


nsslapd-pluginarg0: ldap://nslcd.parente.local:1389/dc=parente,dc=local 3,5,30,3,300,1


I have added plugin debug logs. To have that login, I had to define this in
source code and re-build:

#define    PASSTHRU_VERBOSE_LOGGING

Then I see clearly:

passthru-plugin - PTA server host: "nslcd.parente.local", port: 1389, secure:
2, maxconnections: 3, maxconcurrency: 5, timeout: 300, ldversion: 3,
connlifetime: 300

secure: 2 means starttls:



bind as:

ldapsearch -D "uid=omc,ou=people,dc=parente,dc=local" -w secret12 -b
"dc=parente,dc=local" -s base


But in the access logs, we see clearly:

[23/May/2018:10:07:20.883924603 -0400] conn=1 fd=64 slot=64 connection from
10.10.178.222 to 10.10.178.222
[23/May/2018:10:07:20.884685945 -0400] conn=1 op=0 BIND
dn="uid=omc,ou=people,dc=parente,dc=local" method=128 version=3
[23/May/2018:10:07:20.886823710 -0400] conn=1 op=0 RESULT err=0 tag=97
nentries=0 etime=0.0002572394 dn="uid=omc,ou=people,dc=parente,dc=local"

No startls.


Version-Release number of selected component (if applicable):

389-ds-base-1.3.7.5-21.el7_5