OpenLDAP and libnss conflict

[Alain Spineux]

On Thu, May 22, 2008 at 12:00 PM, Bernhard Reiter
<bernhard at intevation.de> wrote:
> Neil,
>
> On Wednesday 21 May 2008 19:54, Neil Joseph Schelly wrote:
>> A function like ldap_bind() in libldap_r.  It is part of the
>> system /usr/lib/libldap_r.so (and loaded when a process is started, if LDAP
>> NSS is used).   It is also part of the openpkg version of libldap_r that is
>> compiled into the binaries under /kolab.
>
> did you try compiling the Kolab Server/OpenPKG from sources completely
> while NSS ldap being enabled? With my limited understanding of the problem
> this has a chance of the symbol issues to be resolved because they might
> always come from the "host" system in this case.
>
> Thinking further, I am not sure if this works, but it would be something
> I would try when running out of options.
>
>> slapd, all the cyrus binaries, php, etc. Any package that has ldap compiled
>> into it rather than loading from dynamic libraries.
>
> Another idea would be to give OpenPKG's openldap another
> copy of glibc without nss enabled. Might be archievable at least with chroot,
> but maybe with other options. Sounds like a hardcore solution , though.

Maybe just start ldap and change the NSS configuration after that :-)

>
>> Nobody has tried to run Kolab on a
>> server with LDAP logins though?  I find that hard to believe.  I figured
>> someone would have run into this before.
>
> Recommendation is to not have local users on the Kolab Server machine
> for security reason.
> Once it serves a significant number of users,
> having a single machine for this is advisable.
>
> Bernhard
>
>
> --
> Managing Director - Owner: www.intevation.net       (Free Software Company)
> Germany Coordinator: fsfeurope.org. Coordinator: www.Kolab-Konsortium.com.
> Intevation GmbH, Osnabrück, DE; Amtsgericht Osnabrück, HRB 18998
> Geschäftsführer Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner
>
> _______________________________________________
> Kolab-users mailing list
> Kolab-users at kolab.org
> https://kolab.org/mailman/listinfo/kolab-users
>
>



-- 
Alain Spineux
aspineux gmail com
May the sources be with you