nss_ldap-264

[Lukeh-3]

264     Luke Howard <lukeh@...>

        * fix for BUG#378: MAP_H_ERRNO() should map NSS_TRYAGAIN

          to NETDB_INTERNAL not TRY_AGAIN

        * fix for BUG#379: ldaps:// URIs only work if "ssl on"

          is set

        * fix for BUG#248: nss_ldap exposes malformed entries

          to the system

263     Luke Howard <lukeh@...>

        * fix for BUG#374: nss_ldap returns success from

          setnetgrent() when the requested netgroup doesn't

          exist

        * fix for BUG#376: getXXent() only returns NULL once

          before implicitly calling setXXent(), whereas other

          backends continue to return NULL (Red Hat BUG#466794)

--

www.padl.com | www.fghr.net

[Howard Wilkinson]

Luke Howard wrote:

264     Luke Howard <lukeh@...>

        * fix for BUG#378: MAP_H_ERRNO() should map NSS_TRYAGAIN

          to NETDB_INTERNAL not TRY_AGAIN

        * fix for BUG#379: ldaps:// URIs only work if "ssl on"

          is set

        * fix for BUG#248: nss_ldap exposes malformed entries

          to the system

263     Luke Howard <lukeh@...>

        * fix for BUG#374: nss_ldap returns success from

          setnetgrent() when the requested netgroup doesn't

          exist

        * fix for BUG#376: getXXent() only returns NULL once

          before implicitly calling setXXent(), whereas other

          backends continue to return NULL (Red Hat BUG#466794)

--

www.padl.com | www.fghr.net

Luke,

it looks like my kerberos patches have still not made it into the main line. Any chance you could schedule them for the next release. I know they work, apart from an occasional segfault in nscd which I think is an issue in the use of the LDAP libraries (and their interaction with the kerberos libraries possibly) but have been unable to track down yet. I could do with this being tested in a wider audience as the current code is badly borked and needs stripping out if not replaced.

Regards, Howard.