[HEADS UP]: OpenLDAP+nss_ldap+nss_modules separated patch and more (SoC)

Kostik Belousov kostikbel at gmail.com
Wed Aug 23 11:03:32 UTC 2006


On Wed, Aug 23, 2006 at 06:49:55PM +0800, ?????? (LI Xin) wrote:
> ??? 2006-08-23?????? 13:36 +0300???Kostik Belousov?????????
> [snip]
> > > An idea which wasn't suggested yet is to install a renamed version (I  
> > > would suggest libbaseldap instead of libbsdldap or libldap_i, but I  
> > > don't really care about the name) and a link from the original name  
> > > (only the .so and .a, but not the .so.X) to the new name. This link  
> > > can be protected with a WITHOUT_LIBLDAP_LINK switch (or the other way  
> > > around... depending on what we want to achieve). This way it is  
> > > possible to link with the renamed lib in the base system, to use the  
> > > base system version of the lib in ports, and to use the lib from ports  
> > > if desired (a recompile of ports may be needed in the last case, yes).
> > 
> > This will not work. bsdxml is used inside the system binaries. No binary
> > links again expat and bsdxml simultaneously. Would such binary exists,
> > it could experience problems.
> > 
> > On the other hand, application using openldap from the ports has high chance
> > loading nss_ldap (e.g., due to nsswitch.conf). If nss_ldap linked against
> > renamed library, this would cause the crash.
> > 
> > In fact, similar problem was fixed not so long time ago by Dag-Erling
> > in the pam_ssh (duplicating existing symbols by the pam).
> 
> Maybe we can help him to extract some necessary routines out of the lber
> and ldap libraries, and make it an internal library (say, put into the
> nss module rather than installing a separate .so file)?

May be. Moreover, this module (and any nss module) shall export only symbols
needed by nss interface, not polluting the global namespace of process.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-current/attachments/20060823/d2fd585f/attachment.pgp


More information about the freebsd-current mailing list