diff --git a/cluster/kube/lib/prodvider.libsonnet b/cluster/kube/lib/prodvider.libsonnet
index 5b75c79..88e4776 100644
--- a/cluster/kube/lib/prodvider.libsonnet
+++ b/cluster/kube/lib/prodvider.libsonnet
@@ -9,7 +9,7 @@
 
         cfg:: {
             namespace: "prodvider",
-            image: "registry.k0.hswaw.net/cluster/prodvider:1567199084-2e1c08fa7a41faac2ef3f79a1bb82f8841a68016",
+            image: "registry.k0.hswaw.net/cluster/prodvider:1567256363-71a21c769369d013972d8dd0a71b83bee3e6848e",
 
             pki: {
                 intermediate: {
diff --git a/cluster/prodvider/service.go b/cluster/prodvider/service.go
index 5635ac2..0409884 100644
--- a/cluster/prodvider/service.go
+++ b/cluster/prodvider/service.go
@@ -38,6 +38,7 @@
 		glog.Errorf("ldap.DialTLS: %v", err)
 		return nil, status.Error(codes.Unavailable, "could not context LDAP")
 	}
+	defer lconn.Close()
 
 	dn := fmt.Sprintf(flagLDAPBindDN, username)
 	err = lconn.Bind(dn, password)