[HEADS UP]: OpenLDAP+nss_ldap+nss_modules separated patch and more (SoC)

Andre Oppermann andre at freebsd.org
Wed Aug 23 11:59:51 UTC 2006


Dag-Erling Smørgrav wrote:
> Kostik Belousov <kostikbel at gmail.com> writes:
> 
>>LI Xin <delphij at delphij.net> writes:
>>
>>>Kostik Belousov <kostikbel at gmail.com> writes:
>>>
>>>>In fact, similar problem was fixed not so long time ago by Dag-Erling
>>>>in the pam_ssh (duplicating existing symbols by the pam).
> 
> 
> No, that was not a comparable scenario.
> 
> 
>>>Maybe we can help him to extract some necessary routines out of the lber
>>>and ldap libraries, and make it an internal library (say, put into the
>>>nss module rather than installing a separate .so file)?
>>
>>May be. Moreover, this module (and any nss module) shall export only symbols
>>needed by nss interface, not polluting the global namespace of process.
> 
> 
> Please stop the madness.  The simplest solution is to import OpenLDAP
> unmodified, and if someone is unhappy with the base system's libldap,
> they can build world WITHOUT_OPENLDAP.

OpenLDAP is really big and has different parts.  We should certainly not
import the OpenLDAP serve stuff into base.  But then the problem comes up
how to install just the server from ports and have the library already in
the base system.  As someone else said OpenLDAP moves pretty fast and does
a lot of releases and fixes.

-- 
Andre



More information about the freebsd-current mailing list