nss_ldap and openldap importing

[Brooks Davis]

On Fri, Jul 07, 2006 at 02:39:53PM -0600, M. Warner Losh wrote:
> In message: <20060707015458.GC500 at odin.ac.hmc.edu>
>             Brooks Davis <brooks at one-eyed-alien.net> writes:
> : On Thu, Jul 06, 2006 at 10:49:27AM -0700, Doug Barton wrote:
> : > Michael Bushkov wrote:
> : > > Hi,
> : > > I'm a FreeBSD SoC 2006 student, I work on the nsswitch/ldap/caching
> : > > daemon stuff this summer. One of the tasks, that I have to do is to
> : > > import nss_ldap into the source tree. I just want to check the situation
> : > > with licenses.
> : > > 
> : > > nss_ldap uses OpenLDAP library, which uses OpenLDAP license
> : > > (http://www.openldap.org/software/release/license.html). OpenLDAP
> : > > license seems to be BSD-compatible - so there seems to be no problems
> : > > with importing it into the source tree.
> : > > 
> : > > nss_ldap itself uses LGPL. As we use nss_ldap only as dynamic library,
> : > > which is used in the "larger work" (which FreeBSD is), it can be also
> : > > included into the source tree. So, we can import nss_ldap, by directly
> : > > importing (with some specific changes, though) it and OpenLDAP into the
> : > > source tree, can we? Just want to be sure that I understand licensing
> : > > situation correctly.
> : > 
> : > My understanding is that we are generally trying to avoid importing any new
> : > code that has any sort of GPL license. That would certainly be my (personal)
> : > preference in any case.
> : 
> : Unless we have someone crediably committed to rewritting nss_ldap I
> : think this is a good place to make an exception.  We can always remove
> : it later if an implementation exists, but we could really use better
> : integration with ldap.
> 
> Especially if this is integrated into the system such that it is easy
> to disable..

It should be pretty easy to have a WITH/WITHOUT_LDAP and _NSS_LDAP
options.  We're only talking about two directories at this point.

-- Brooks

-- 
Any statement of the form "X is the one, true Y" is FALSE.
PGP fingerprint 655D 519C 26A7 82E7 2529  9BF0 5D8E 8BE9 F238 1AD4
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-current/attachments/20060707/39a8078b/attachment.pgp