Re: (ITS#6302) second-guessing of libsasl ABI is incorrect for Linux distributions

[hyc@symas.com]

vorlon@debian.org wrote:
> Full_Name: Steve Langasek
> Version: 2.4.17
> OS: Debian
> URL: http://bugs.debian.org/546885
> Submission from: (NULL) (66.93.39.86)
>
>
> Debian bug #546885 reports a problem with the Debian package of slapd aborting
> because it's running against an older version of libsasl than the one it was
> built against.  Distribution packaging systems have provisions for declaring
> versioned dependencies when necessary, slapd should not have a blanket rule that
> assumes preceding versions of libsasl are incompatible:

Maybe that's true for Debian today, but if there was a blanket rule that this 
is always safe on all OS distros, we would not have needed to write this code 
in the first place.

> - if two versions of libsasl are incompatible but this has not been declared by
> way of an soname change, this is a bug in the library that should be forwarded
> to the libsasl upstream, not papered over in slapd

And we have done so, but we still have to defend against people running older 
versions of libsasl that haven't been corrected.

> - the version check assumes that running against an *older* libsasl than the one
> built against is a problem, but running against a *newer* libsasl is not, when I
> don't see any reason that should be the case.

> patch to remove this version check follows; it has been applied to the Debian
> openldap package.

Though it goes against our usual desire to minimize distro-specific patch 
maintenance, I think in this case I have to recommend that you continue to 
carry this patch on your side.

-- 
   -- Howard Chu
   CTO, Symas Corp.           http://www.symas.com
   Director, Highland Sun     http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP  http://www.openldap.org/project/