[HEADS UP]: OpenLDAP+nss_ldap+nss_modules separated patch and more (SoC)

[Robert Watson]

On Thu, 24 Aug 2006, Brooks Davis wrote:

>> Well, maybe more compromise solution will be to have OpenLDAP and nss_ldap 
>> in the base, but to have them turned off by default, so the user would need 
>> to specify WITH_LDAP and WITH_NSS_LDAP in the make.conf to build them. 
>> More, if the user don't want to have OpenLDAP built with the base, but 
>> wants nss_ldap there, he'd have the ability to link nss_ldap against the 
>> ports. And we should also have rewritten nss_ldap in ports (call it 
>> nss_ldap_bsd, for example). IMHO, It's quite a flexible scheme that should 
>> satisfy most number of users. My main concern with such solution is: will 
>> it affect the capability of installing OpenLDAP and nss_ldap out of the 
>> box?
>
> I really think we need it on the install CD which realisticly means it needs 
> to build by default.  We could potentially pack it up like kerberos in the 
> install process, but I'm not sure that's really necessicary.

We actually don't even do that anymore -- we build Kerbreros5 support by 
default now.

Robert N M Watson
Computer Laboratory
University of Cambridge