PAM modules

Xin LI delphij at delphij.net
Fri Sep 23 10:07:11 UTC 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 09/22/11 19:19, Benjamin Kaduk wrote:
> On Tue, 20 Sep 2011, Xin LI wrote:
> 
>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
>> 
>> On 09/20/11 15:51, Kostik Belousov wrote: [...]
>>> Yes, the question of maintanence of the OpenLDAP code in the
>>> base is not trivial by any means. I remember that openldap once
>>> broke the ABI on its stable-like branch.
>> 
>> That happen a few times however these are either not essential
>> client library (libldap and liblber) API or it's not changing
>> parameters or removing interfaces.  Moreover, like the base
>> libbsdxml.so, it's only intended to be used by base system only
>> so it's relatively easier to maintain ABI stability, e.g. we can
>> probably just expose only symbols that we use, etc.
> 
> This is not without its own failures.  For example, I sometimes
> find myself wanting a kgetcred(1) from heimdal, but we do not build
> it as part of our base heimdal.  As a separate utility, this is not
> so bad; for a library, things can get much more annoying. Only
> exposing a limited set of symbols can make third-party tools that 
> want extra symbols very sad, unless it is easy to drop in a full
> version from ports and still have all of base "just work".  I do
> not quite think that the current state of ports for ldap would
> "just work" without some extra configuration (though, nor have I
> tried something like it).

Third party utilities should use symbols provided by port OpenLDAP
library because base system symbols are namespaced and third party
application have no chance to reference them (e.g. no header
installed, etc) unless they are part of base system and be built with it.

Cheers,
- -- 
Xin LI <delphij at delphij.net>	https://www.delphij.net/
FreeBSD - The Power to Serve!		Live free or die
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (FreeBSD)

iQEcBAEBCAAGBQJOfFpHAAoJEATO+BI/yjfBjxwH/iKLFZkvzkowW50FyuxnesmQ
r4f9bvOLAH8iRva8GJEJDJaTqQHKWVJ8yIkT49WC8VgoNAcpkvzkOXm2Xe658yuz
Ca5TNIFvJccw6MtH6nicE4REy+YEOwcnSQTLHqcPBKiSLH3RFrklOZ3YjGrR8qgX
9WmVI6rZ9CbHwUVsWyJUOUYrCsAPsLpraqyfhwM1/ZXnr3mGNKayb8KMjgmy0gGI
V2J9bIjPd2E6vDLl8vYJxQZ+pPrUcuPJ06v+SFN9vmbC7UadRWZr37DsX1Kba4pN
3qRKemze61qMPi39Xd8Wt7Og6+GAIKnMV2cX2+a+3gExO0haMl4E/V9BU6UpVUA=
=t3Ti
-----END PGP SIGNATURE-----


More information about the freebsd-security mailing list