<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Tue, Jan 6, 2015 at 5:13 PM, Wessel, Keith <span dir="ltr"><<a href="mailto:kwessel@illinois.edu" target="_blank">kwessel@illinois.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">Absolutely. I had our AD admin look and, sure enough, we're seeing a simple auth over an unencrypted channel just after the initial query. The initial query is working properly, doing a simple auth over the StartTLS-encrypted channel.<br>
<br>
Seems like a bug, probably in the edu.vt.ldap library. Where should I report it?<br></blockquote><div><br></div><div>It's more of a feature request. You can file it here: <a href="https://github.com/vt-middleware/ldaptive">https://github.com/vt-middleware/ldaptive</a></div><div>The problem is that startTLS isn't something that is communicated in the continuation reference, so you'd have to follow the referral manually to do what you want.</div><div>There is no functionality in vt-ldap to do that and it's more likely to get added for IDP 3.x.</div><div><br></div><div>--Daniel Fisher<br></div><div><br></div></div></div></div>