[Pkg-openldap-devel] Bug#428385: Bug#428385: Bug#428385: GPLv3 and OpenSSL

[Russ Allbery]

James Andrewartha <trs80 at ucc.gu.uwa.edu.au> writes:
> On Mon, 13 Aug 2007, Russ Allbery wrote:

>> I think there are packages in Debian that are GPLv2 only, unless we
>> want to try to track all of those down and somehow confirm that they're
>> not using OpenLDAP.

> Yeah, I did a apt-cache rdepends libldap2 and had a look through some
> copyright files. Unfortunately the copyright files often say "GPLv2"
> when the actual source says "GPLv2 or later", or in the case of pdns,
> just "GNU General Public License" although it comes with GPLv2 in
> COPYING. OTOH there's quite a few apps that have the OpenSSL exception,
> but those are generally v2 or later anyway.

Life gets even more complicated if we have to care about programs that use
PAM and hence pull in OpenLDAP via pam_ldap, or programs that call
getpwnam and hence pull in OpenLDAP via nss-ldap.  It's never been clear
to me if we have to care or not and different people say different things.

-- 
Russ Allbery (rra at debian.org)               <http://www.eyrie.org/~eagle/>