X-Git-Url: https://git.proxmox.com/?p=pve-access-control.git;a=blobdiff_plain;f=PVE%2FAuth%2FAD.pm;fp=PVE%2FAuth%2FAD.pm;h=42eb79d0a386e2127fc5e94ece5c26925b58b494;hp=a877a7657d7b2ba2a344f77956a344d83bd3a2e1;hb=3b7eaef10fe48e0180c3bc89be4bbf31c7dfd47c;hpb=07dd90d73194f1732bdba6b36fb168266c920b0a

diff --git a/PVE/Auth/AD.pm b/PVE/Auth/AD.pm
index a877a76..42eb79d 100755
--- a/PVE/Auth/AD.pm
+++ b/PVE/Auth/AD.pm
@@ -34,9 +34,9 @@ sub properties {
 
 	},
 	sslversion => {
-	    description => "LDAPS ssl version.",
+	    description => "LDAPS TLS/SSL version. It's not recommended to use version older than 1.2!",
 	    type => 'string',
-	    enum => [qw(tlsv1 tlsv1_1 tlsv1_2)],
+	    enum => [qw(tlsv1 tlsv1_1 tlsv1_2 tlsv1_3)],
 	    optional => 1,
 	},
 	default => {
@@ -116,7 +116,7 @@ my $authenticate_user_ad = sub {
     }
 
     if ($config->{secure}) {
-	$ad_args{sslversion} = $config->{sslversion} ? $config->{sslversion} : 'tlsv1_2';
+	$ad_args{sslversion} = $config->{sslversion} || 'tlsv1_2';
     }
 
     my $ldap = Net::LDAP->new($conn_string, %ad_args) || die "$@\n";