Pierangelo Masarati wrote: > Michael Ströder wrote: >> Pierangelo Masarati wrote: >>> Moreover, >>> ldap_initialize can record that StartTLS was already requested because >>> of the extension, and avoid requesting it twice. >> >> What does "avoid requesting it twice" mean? Return an error code or >> simply ignore it? Note that a client might wanna take note of whether >> ldap_start_tls() was successfully called by itself or not. > > Correct. Here the choice is: > > 1) just ignore the second call, as it would violate RFC 4513
More specific: IMO the error code of the first call should be returned. Ciao, Michael.