From c258ae96896898d90b57d8da9b58e23ff6b499f0 Mon Sep 17 00:00:00 2001
From: Roland Gruber <post@rolandgruber.de>
Date: Mon, 24 Oct 2011 15:24:35 +0000
Subject: [PATCH] better log TLS errors

---
 lam/lib/ldap.inc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lam/lib/ldap.inc b/lam/lib/ldap.inc
index 3960324b..beb22f17 100644
--- a/lam/lib/ldap.inc
+++ b/lam/lib/ldap.inc
@@ -102,8 +102,8 @@ class Ldap{
 			$useTLS = $this->conf->getUseTLS();
 			if (isset($useTLS) && ($useTLS == "yes")) {
 				@ldap_start_tls($this->server);
-				// connect without TLS if it failed
 				if (ldap_errno($this->server) != 0) {
+					logNewMessage(LOG_ERR, 'Unable to start TLS encryption. Please check if your server certificate is valid and if the LDAP server supports TLS at all.');
 					return ldap_errno($this->server);
 				}
 			}