mulitple URI for failed TLS connection

To: "openldap-technical@openldap.org" <openldap-technical@openldap.org>
Subject: mulitple URI for failed TLS connection
From: Daniel Jung <mimianddaniel@gmail.com>
Date: Mon, 22 Jun 2015 14:24:06 -0700
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=tCU3ul+tFI/HuLo5HUTcgNyFC8c38m29PGyHpfc7htE=; b=sYWhXs6U9jJV1+mMqDE45Q5IpfZVL8CMN+UL1wLmeNjky8jZiuaZYUx1rd4wR1Urzh N002ozWENnfAucNJ0IfQ6qCN/eot9FueifzwHsIsi1MW3bru8MqRSVwEAFE37xhLFYRf 0fOXxc7ODs+7nTAeVGKFiF0y6z8TtUzc1C9JPlH1oDPYreOAsmh72mLh4BolQpvAnpgt tqp8oEtlVQK4cdSzTzef1kiKAKzHt70hbCtaqfUcppLMBaop4nDUT4y6ECibQ1T2dTP5 KA4DqtjMJVSSTOhUtaNQ0PeOyqBxY3UGXmbj+ASD9ZNK8k3nKWP033pXMv9a39/Igs7S 5IYQ==

Hi,

Using openldap-2.4.39.

Just want to confirm that its normal behaviour for ldapsearch(CLI) to fail on the first attempt and not to use the next server in URI setting?

I can see the SSSD handles TLS failure better by querying the next server in the URI.

Cheers,