Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 79864

Summary: compile the ldapdb auxprop plugin from openldap contrib if ldap is in USE
Product: Gentoo Linux Reporter: paul <paul>
Component: Current packagesAssignee: Net-Mail Packages <net-mail+disabled>
Status: RESOLVED TEST-REQUEST    
Severity: enhancement Keywords: Inclusion
Priority: High    
Version: unspecified   
Hardware: x86   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---
Attachments: new ebuild (should be -r2, at least)
README.ldap goes into ${FILESDIR}
Makefile patch, goes into ${FILESDIR}
the plugin, goes into ${FILESDIR}

Description paul 2005-01-28 09:23:34 UTC
The openldap distribution includes a ldapdb auxprop plugin enabling SASL to fetch it's passwords from an LDAP directory. The plugin is licensed like openldap itself. There will be 2 new files in the files dir, ldapdb.c and README.ldapdb and a new ebuild based on cyrus-sasl-2.1.20-r1.

Reproducible: Always
Steps to Reproduce:
1.
2.
3.
Comment 1 paul 2005-01-28 09:26:29 UTC
Created attachment 49750 [details]
new ebuild (should be -r2, at least)
Comment 2 paul 2005-01-28 09:27:17 UTC
Created attachment 49751 [details]
README.ldap goes into ${FILESDIR}
Comment 3 paul 2005-01-28 09:28:22 UTC
Created attachment 49752 [details, diff]
Makefile patch, goes into ${FILESDIR}
Comment 4 paul 2005-01-28 09:29:00 UTC
Created attachment 49753 [details]
the plugin, goes into ${FILESDIR}
Comment 5 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2005-02-14 04:42:08 UTC
While I am the LDAP guy, I don't do SASL.
Comment 6 paul 2005-02-15 04:09:26 UTC
Sorry, I do not understand your comment. I doubt you compile Openldap without SASL and if so I'd be interested how do you provide the authentifications methods mandated by RFC 2829. I note that the sasldb plugin is only pulled in if ldap is in USE (same goes for saslauthd). Currently sasldb is the only way to provide shared secret MECHS for MTAs or cyrus if you have passwords in LDAP. IMO it's of great use WRT SSO and I haven't got the point yet why the fact that you don't need it should prevent others from using it. If I can do something in the LDAP/SASL area (e.g.getting 2.2 out the door) please contact me.
Comment 7 Tuan Van (RETIRED) gentoo-dev 2005-02-15 08:59:24 UTC
@comment#6,
this bug assigned to Robin but he doesn't maintain cyrus-sasl, so he reassign back to net-mail.
Comment 8 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2005-02-15 12:50:19 UTC
As for getting OpenLDAP 2.2 out the door, I'm working on it, trust me (see 2.2.23 in CVS now, with a possible migration system).
Comment 9 paul 2005-03-12 15:23:34 UTC
There is a note in openldap CVS that ldapdb has been included upstream, will close this bug as soon as the plugin emerges in cyrus-sasl.  
Comment 10 Fernando J. Pereda (RETIRED) gentoo-dev 2005-05-24 23:58:49 UTC
cyrus-sasl-2.1.21 is in CVS (will touch mirrors in a while). Please test and see
if it fixes your problem.

Cheers,
Ferdy