Viewing Contrib/6488
Full headers

Major security issue: yes  no

Notes:
applied to HEAD applied to RE24
Notification:

Date: Sun, 07 Mar 2010 01:24:07 +0000
From: crispy@cluenet.org
To: openldap-its@OpenLDAP.org
Subject: Nssov updates for new versions of nss-pam-ldapd

Full_Name: Chris Breneman
Version: 2.4.21
OS: Debian Lenny
URL: http://scalar.cluenet.org/~crispy/nssov-nsspamldapd-update.patch
Submission from: (NULL) (98.212.227.43)


The nssov overlay currently includes a very old version of the nss-ldapd (now
nss-pam-ldapd) source.  It's not necessary to keep a source tree of
nss-pam-ldapd within openldap now, as the patches for pam_ldap support in the
stub library were integrated upstream.  This patch removes the nss-ldapd source
tree from nssov, except for a few files which are unlikely to change, and on
which nssov depends.

This patch also updates nssov to support the newer versions of nss-pam-ldapd. 
There were some organizational changes, header changes, and changes of the names
of constants since the version of nss-ldapd that is currently in the source.

This patch also removes the dependence on the configure script of nss-ldapd. 
Currently, the configure script has to be run in the nss-ldapd subdirectory to
generate a few constants which are needed by the parts of nss-ldapd that nssov
depends on.  These same constants are generated by the openldap configure
script, and this patch changes the include path to include the relevant header
from the openldap configure script, instead of requiring a separate configure
script from nss-ldapd.

This patch also updates the nssov Makefile to use the new nss-pam-ldapd files
location and to create an install target that is separate from the all target.

The README and man page are updated to reflect that nss-ldapd is no longer
included in the source, and point to where to get it.  They are also changed to
reflect the new name of nss-ldapd: nss-pam-ldapd

The patch is at: http://scalar.cluenet.org/~crispy/nssov-nsspamldapd-update.patch
It applies on the nssov directory.

Followup 1

Subject: Re: (ITS#6488) Nssov updates for new versions of nss-pam-ldapd
From: Chris Breneman <crispy@cluenet.org>
To: openldap-its@openldap.org
Cc: crispy@cluenet.org
Date: Mon, 08 Mar 2010 15:28:57 -0600

The original patch compiled but didn't run correctly due to a function
that was removed.  A new patch that fixes this issue is at:
http://hawking.cluenet.org/~crispy/nssov-nsspamldapd-update.patch

Followup 2

Subject: Re: (ITS#6488) Nssov updates for new versions of nss-pam-ldapd
From: Chris Breneman <crispy@cluenet.org>
To: openldap-its@openldap.org
Date: Wed, 31 Mar 2010 13:25:27 -0500

Hi, any word on if this can be incorporated?

Thanks.

On Sun, 2010-03-07 at 01:24 +0000, openldap-its@OpenLDAP.org wrote:
> *** THIS IS AN AUTOMATICALLY GENERATED REPLY ***
> 
> Thanks for your report to the OpenLDAP Issue Tracking System.  Your
> report has been assigned the tracking number ITS#6488.
> 
> One of our support engineers will look at your report in due course.
> Note that this may take some time because our support engineers
> are volunteers.  They only work on OpenLDAP when they have spare
> time.
> 
> If you need to provide additional information in regards to your
> issue report, you may do so by replying to this message.  Note that
> any mail sent to openldap-its@openldap.org with (ITS#6488)
> in the subject will automatically be attached to the issue report.
> 
> 	mailto:openldap-its@openldap.org?subject=(ITS#6488)
> 
> You may follow the progress of this report by loading the following
> URL in a web browser:
>     http://www.OpenLDAP.org/its/index.cgi?findid=6488
> 
> Please remember to retain your issue tracking number (ITS#6488)
> on any further messages you send to us regarding this report.  If
> you don't then you'll just waste our time and yours because we
> won't be able to properly track the report.
> 
> Please note that the Issue Tracking System is not intended to
> be used to seek help in the proper use of OpenLDAP Software.
> Such requests will be closed.
> 
> OpenLDAP Software is user supported.
> 	http://www.OpenLDAP.org/support/
> 
> --------------
> Copyright 1998-2007 The OpenLDAP Foundation, All Rights Reserved.
> 

Followup 3

Date: Sun, 11 Apr 2010 18:04:45 -0700
From: Howard Chu <hyc@symas.com>
To: crispy@cluenet.org
CC: openldap-its@openldap.org
Subject: Re: (ITS#6488) Nssov updates for new versions of nss-pam-ldapd

crispy@cluenet.org wrote:
> Hi, any word on if this can be incorporated?

Committed in HEAD, thanks for the patch.

-- 
   -- Howard Chu
   CTO, Symas Corp.           http://www.symas.com
   Director, Highland Sun     http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP  http://www.openldap.org/project/