From d3cb8a357faab96f60f8c2425347aa64dda5e312 Mon Sep 17 00:00:00 2001
From: Kurt Zeilenga <kurt@openldap.org>
Date: Fri, 31 Aug 2001 00:14:04 +0000
Subject: [PATCH] Move Cyrus SASL initializing forward

---
 libraries/libldap/open.c | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/libraries/libldap/open.c b/libraries/libldap/open.c
index 451d3a0b76..fcfd80ddaa 100644
--- a/libraries/libldap/open.c
+++ b/libraries/libldap/open.c
@@ -321,6 +321,14 @@ ldap_int_open_connection(
 		INT_MAX, (void *)"ldap_" );
 #endif
 
+#ifdef HAVE_CYRUS_SASL
+	/* establish Cyrus SASL context prior to starting TLS so
+		that SASL EXTERNAL might be used */
+	if( sasl_host != NULL ) {
+		ldap_int_sasl_open( ld, conn, sasl_host, sasl_ssf );
+	}
+#endif
+
 #ifdef HAVE_TLS
 	if (ld->ld_options.ldo_tls_mode == LDAP_OPT_X_TLS_HARD ||
 		strcmp( srv->lud_scheme, "ldaps" ) == 0 )
@@ -337,12 +345,6 @@ ldap_int_open_connection(
 	}
 #endif
 
-#ifdef HAVE_CYRUS_SASL
-	if( sasl_host != NULL ) {
-		ldap_int_sasl_open( ld, conn, sasl_host, sasl_ssf );
-	}
-#endif
-
 #ifdef LDAP_API_FEATURE_X_OPENLDAP_V2_KBIND
 	if ( conn->lconn_krbinstance == NULL ) {
 		char *c;
-- 
2.39.5