PAM modules

Dag-Erling Smørgrav des at des.no
Tue Sep 20 21:19:14 UTC 2011


Xin LI <delphij at delphij.net> writes:
> The main concern I have is that users might want to stay on an older
> FreeBSD release, while wanting features of a new OpenLDAP.  That's why
> I would prefer a libxml style import -- users always have choice to
> install a new OpenLDAP without any concern of breaking their system
> and we can always deliver security fixes with freebsd-update.  Would
> that make the trimmed down and renamed OpenLDAP import sound sensible?

Yes, you have a point.  So you're saying:

 - client side only (for nss_ldap, pam_ldap etc)
 - namespace hacks to avoid colliding with the port

right?  I would definitely support that.

DES
-- 
Dag-Erling Smørgrav - des at des.no


More information about the freebsd-security mailing list