[Kolab-devel] martin: server/kolabd/kolabd kolab2.schema, 1.36, 1.37

[Richard Bos]

Hi Martin,

what about this:
https://www.intevation.de/roundup/kolab/issue3705
 (Last update to kolab2.schema prevents openldap to start)??


Op maandag 22 juni 2009 15:18:44 schreef cvs at kolab.org:
> Author: martin
>
> Update of /kolabrepository/server/kolabd/kolabd
> In directory doto:/tmp/cvs-serv4267
>
> Modified Files:
> 	kolab2.schema
> Log Message:
> Martin Konold: Added new attribute which contains a comma separated list of
> secure ciphers. (Required for SSL/TLS)
>
>
> Index: kolab2.schema
> ===================================================================
> RCS file: /kolabrepository/server/kolabd/kolabd/kolab2.schema,v
> retrieving revision 1.36
> retrieving revision 1.37
> diff -u -d -r1.36 -r1.37
> --- kolab2.schema	5 Jun 2009 14:14:05 -0000	1.36
> +++ kolab2.schema	22 Jun 2009 13:18:42 -0000	1.37
> @@ -1,7 +1,7 @@
>  # $Id$
> -# (c) 2003, 2004 Tassilo Erlewein <tassilo.erlewein at erfrakon.de>
> -# (c) 2003-2009  Martin Konold <martin.konold at erfrakon.de>
> -# (c) 2003 Achim Frank <achim.frank at erfrakon.de>
> +# (c) 2003-2004 Tassilo Erlewein <tassilo.erlewein at erfrakon.de>
> +# (c) 2003-2009 Martin Konold <martin.konold at erfrakon.de>
> +# (c) 2003      Achim Frank <achim.frank at erfrakon.de>
>  #
>  # Redistribution and use in source and binary forms, with or without
>  # modification, are permitted provided that the following conditions are
> met: @@ -705,6 +705,17 @@
>    EQUALITY booleanMatch
>    SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 )
>
> +# Configurable list of ciphers considered to be secure enough for our
> purposes. +# E.g. TLS 1.0 and SSL 3.0
> +attributetype ( 1.3.6.1.4.1.19414.2.1.801
> +  NAME 'kolabSecureCiphers'
> +  DESC 'comma separated list of ciphers considered to be secure'
> +  EQUALITY caseIgnoreIA5Match
> +  SUBSTR caseIgnoreIA5SubstringsMatch
> +  SINGLE-VALUE
> +  SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )
> +
> +
>  ######################################################
>  # proftpd attributes (unused since Kolab Server 2.2) #
>  ######################################################
> @@ -840,6 +851,7 @@
>          kolabfilter-allow-sender-header $
>          kolabfilter-reject-forged-from-header $
>          kolabPolicyDaemon $
> +        kolabSecureCiphers $
>          proftpd-ftp $
>          proftpd-defaultquota $
>          kolabFreeBusyFuture $
>
>
> _______________________________________________
> Kolab-commits mailing list
> Kolab-commits at kolab.org
> https://kolab.org/mailman/listinfo/kolab-commits

-- 
Richard