[Pkg-openldap-devel] Bug#428468: Bug#428468: Two bugs

[Brian May]

>>>>> "Russ" == Russ Allbery <rra at debian.org> writes:

    Russ> We know that at least some problems with slapd crashing can
    Russ> be worked around by making sure that you either don't use
    Russ> nss-ldap on the system with slapd or you run slapd as root.
    Russ> The problem is the library conflicts between the libraries
    Russ> with which nss-ldap is compiled and the libraries slapd
    Russ> uses, and is therefore just another consequence of the
    Russ> GnuTLS issues.

Hmmm.

Let me hazard a guess:

slapd uses libldap 2.3 which uses openssl
libnss-ldap uses libldap 2.1 which uses GNU TLS libraries

Either the ldap libaries conflict or the TLS libraries conflict (or
all of the above).

Unless any of the above uses versioned symbols...

Still I am puzzled, why would running it as root help?

    >> 2. brokenness in old version of libldap2 that looks like it is
    >> fixed in the latest version of the library used by ldapsearch.

    Russ> Right.

Another theory I have had is that something is broken in GNU TLS.

Is it possible to rebuild the Debian package of openldap 2.1 against
openssl instead or is this likely to be complicated?

    Russ> Basically, we're in a holding pattern waiting for the
    Russ> OpenLDAP 2.4 release.  Unfortunately, it doesn't even have a
    Russ> beta yet.  I'm desperately hoping that we can move to it
    Russ> before the next stable release.

:-(

-- 
Brian May <bam at snoopy.debian.net>