[Pkg-openldap-devel] Status of openldap 2.3.19

[Torsten Landschoff]

On Sun, Feb 19, 2006 at 12:31:22PM -0800, Quanah Gibson-Mount wrote:
 
> The problems with the current existing GnuTLS patch that I see are:
> 
> (a) It will take a bit of rework to allow it to work with OpenLDAP 2.3.
> (b) Its license is too restrictive for inclusion in OpenLDAP
> (c) It only appears to handle TLS encryption.  Other functionality (such as 
> SASL/External) do not seem to be included.
> (d) The patch uses pthread functions, meaning that libldap (the 
> non-threaded LDAP library) gets incorrectly linked.  Torsten may have fixed 
> this at a later point on the Debian side (See 
> <http://www.openldap.org/its/index.cgi/Incoming?id=3290>)
 
In fact the later Debian packages of 2.2.x only included the threaded
version of libldap because of bad PAM interactions IIRC. From the slapd 
changelog of 2.2.23-6:

  Steve Langasek <vorlon at debian.org>:
  * libraries/libldap_r/Makefile.in: make sure the ximian-connector ntlm
    patch is applied to libldap_r, not just to libldap
  * debian/move_files: make libldap a symlink to libldap_r, as carrying
    two versions of this library around is more trouble than it's worth,
    and can cause glorious segfaults down the line

Steve probably can tell you more about this.

Greetings

	Torsten
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-openldap-devel/attachments/20060220/5ce44f53/attachment.pgp