Fixed critical control handling in SimpleLDAPRequestHandler.handle_search

ldapserver/server.py

@@ -395,6 +395,7 @@ class SimpleLDAPRequestHandler(BaseLDAPRequestHandler):
 		raise exceptions.LDAPAuthMethodNotSupported()
 
 	def handle_search(self, op, controls=None):
+		reject_critical_controls(controls)
 		for dn, attributes in self.do_search(op.baseObject, op.scope, op.filter):
 			pattributes = [ldap.PartialAttribute(name, values) for name, values in attributes.items()]
 			if 'subschemaSubentry' not in attributes and self.subschema is not None: