diff -Nru pam_ldap-169.orig/pam_ldap.c pam_ldap-169/pam_ldap.c

--- pam_ldap-169.orig/pam_ldap.c	2005-06-30 17:24:24 +0300

+++ pam_ldap-169/pam_ldap.c	2005-06-30 17:25:05 +0300

@@ -1555,6 +1555,7 @@

   pam_ldap_session_t *session = global_session;

 #endif

   char *who, *cred;

+  int rc;

   if (session->info != NULL && session->info->bound_as_user == 1)

     {

@@ -1575,6 +1576,17 @@

 	}

     }

+  if (session->conf->ssl_on == SSL_START_TLS)

+    {

+      rc = ldap_start_tls_s (session->ld, NULL, NULL);

+      if (rc != LDAP_SUCCESS)

+        {

+          syslog (LOG_ERR, "pam_ldap: ldap_starttls_s: %s",

+                  ldap_err2string (rc));

+          return PAM_SERVICE_ERR;

+        }

+    }

+

   return ldap_simple_bind_s (ld, who, cred);

 }

 #else