Fixes #3397 Refuses users if ppolicy is activated and they can’t search the base

include/functions.inc

@@ -709,6 +709,12 @@ function ldap_login_user ($username, $password)
   if (!$ldap->success()) {
     return NULL;
   }
+  if (class_available('ppolicyAccount')) {
+    $ldap->ls('(objectClass=*)', $config->current['BASE']);
+    if (!$ldap->success()) {
+      return NULL;
+    }
+  }
 
   /* Username is set, load subtreeACL's now */
   $ui->loadACL();