On Mon, Mar 24, 2008 at 10:19:11AM +0100, Arthur de Jong wrote:
> 
> On Mon, 2008-03-24 at 17:35 +1100, Alex Samad wrote:
> > Arthur, is there anything missing in libnss-ldapd, that is in
> > libnss-ldap (apart from bugs :) ). Is it a simple drop in replacement?
> 
> nss-ldapd should be a drop-in replacement for nss_ldap in most
> situations. If you install the package it should automatically pick up
> the configuration options from nss_ldap as defaults.
> 
> There are a number of differences from nss_ldap:
> - different architecture (running deamon to do all lookups)
> - configuration file syntax is slightly different and does not silently
>   ignore unrecognised options
> 
> Also, nss-ldapd is missing some features:
> - no attribute defaults and overrides
> - SSL/TLS support is not thoroughly tested (starttls is reported to not
>   work)
> - no support for nested groups
> - SASL and Kerberos configuration is untested
> - rootbinddn/rootbindpw support is disabled
Hi Arthur

sent you a reply via email, not sure if this is the venue to discuss
this.

basically was wondering where is the best place to discus libnss-ldapd,
should I just raise bug reports ?

for example I had an issue with 

myldap_has_objectclass(): myldap_get_values() returned NULL

which tracked down to myldap_has_objectclass in myldap.c and it uses a
search of the attributes received from the initial search, instead of
doing another lookup (less expensive), but I don't allow reads of
objectlass, I do allow search ( I have since changed)

 
> 
> -- 
> -- arthur - [EMAIL PROTECTED] - http://people.debian.org/~adejong --



-- 
"Border relations between Canada and Mexico have never been better."

        - George W. Bush
09/24/2001
in a press conference with Canadian Prime Minister Jean Chretien

Attachment: signature.asc
Description: Digital signature

Reply via email to