diff --git a/cluster/prodvider/service.go b/cluster/prodvider/service.go
index 5635ac2..0409884 100644
--- a/cluster/prodvider/service.go
+++ b/cluster/prodvider/service.go
@@ -38,6 +38,7 @@
 		glog.Errorf("ldap.DialTLS: %v", err)
 		return nil, status.Error(codes.Unavailable, "could not context LDAP")
 	}
+	defer lconn.Close()
 
 	dn := fmt.Sprintf(flagLDAPBindDN, username)
 	err = lconn.Bind(dn, password)