Bug#368297: About the libgcrypt and OpenLDAP issue

Howard Chu hyc at symas.com
Fri Apr 19 09:12:20 UTC 2013


Werner Koch wrote:
> On Fri, 19 Apr 2013 09:22, hyc at symas.com said:
>> Frankly, speaking for the OpenLDAP Project, what we want is to delete
>> all support for GnuTLS. It is, like Mozilla NSS, a poorly designed API
>
> Split OpenLDAP into a daemon and a simple access library and things
> would be more robust.  This also avoids the hard library dependencies
> and the need for applications to runtime link to several versions of the
> same library.

You're absolutely right. That's why nss-pam-ldapd exists, and why OpenLDAP has 
supported it (using either nssov or nslcd) since June 2008. We've spent enough 
time on this, it's past time to move on.

-- 
   -- Howard Chu
   CTO, Symas Corp.           http://www.symas.com
   Director, Highland Sun     http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP  http://www.openldap.org/project/



More information about the Pkg-gnutls-maint mailing list