diff --git a/internal/auth/ldap.go b/internal/auth/ldap.go
index 69a60f6..e96e732 100644
--- a/internal/auth/ldap.go
+++ b/internal/auth/ldap.go
@@ -71,6 +71,7 @@ func (la *LdapAuthenticator) CanLogin(
 			l, err := la.getLdapConnection(true)
 			if err != nil {
 				cclog.Error("LDAP connection error")
+				return nil, false
 			}
 			defer l.Close()