Skip to Content.
Sympa Menu

sm-grimoire-bugs - [SM-Grimoire-Bugs] [Bug 14127] openldap : patch for context security does not apply to 2.4.6 version

sm-grimoire-bugs AT lists.ibiblio.org

Subject: SourceMage Grimoire Bug List

List archive

Chronological Thread  
  • From: bugzilla-daemon AT bugs.sourcemage.org
  • To: sm-grimoire-bugs AT lists.ibiblio.org
  • Subject: [SM-Grimoire-Bugs] [Bug 14127] openldap : patch for context security does not apply to 2.4.6 version
  • Date: 4 Feb 2008 10:55:17 -0000

http://bugs.sourcemage.org/show_bug.cgi?id=14127





------- Additional Comments From sobukus AT sourcemage.org 2008-02-04 04:55
-------
Ok, it doesn't seem likely that Timo gets the time to adapt the patch for
openldap 2.4 soon. Also it doesn't seem likely that openldap upstream will
incorporate the necessary security soon.
Thing is, his LDAP + PAM setup is something Timo wants to rely on and, based
on past experience with new openldap versions, he is... careful.

I am wondering about forking off a spell for Timo's openldap (considering his
patched openldap a different upstream distribution).
Perhaps naming it openldap-context or such.
We'd need an openldap provider, then... and pam_ldap would depend on
openldap-context if the context patch is enabled there, on normal openldap if
not.

So, would such a setup be acceptable or is it considered personal hacking?
What do other people, who actually use openldap for security-sensitive stuff,
think about this?

--
Configure bugmail: http://bugs.sourcemage.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.




Archive powered by MHonArc 2.6.24.

Top of Page