Luke Howard wrote:
* fix for
BUG#378: MAP_H_ERRNO() should map NSS_TRYAGAIN
to
NETDB_INTERNAL not TRY_AGAIN
* fix for
BUG#379: ldaps:// URIs only work if "ssl on"
is set
* fix for
BUG#248: nss_ldap exposes malformed entries
to the
system
* fix for
BUG#374: nss_ldap returns success from
setnetgrent() when the requested netgroup doesn't
exist
* fix for
BUG#376: getXXent() only returns NULL once
before
implicitly calling setXXent(), whereas other
backends
continue to return NULL (Red Hat BUG#466794)
Luke,
it looks like my kerberos patches have still not made it into the main
line. Any chance you could schedule them for the next release. I know
they work, apart from an occasional segfault in nscd which I think is
an issue in the use of the LDAP libraries (and their interaction with
the kerberos libraries possibly) but have been unable to track down
yet. I could do with this being tested in a wider audience as the
current code is badly borked and needs stripping out if not replaced.
Regards, Howard.