[Pkg-openldap-devel] Bug#613663: Bug#613663: slapd: Upgrade Lenny -> Squeeze: failed to migrate tls_cacert

[Steve Langasek]

Hi there,

On Wed, Feb 16, 2011 at 03:22:07PM +0100, Rainer Ruprechtsberger wrote:
> OpenLdap version 2.3 syncreplication client used /etc/ldap/ldap.conf for
> TLS settings. Upstream version 2.4 now use settings in the syncrepl
> statement of slapd.conf and ignores  /etc/ldap/ldap.conf.
> The configuration conversion fails to migrate a TLS_CACERT from
> ldap.conf to slapd.conf syncrepl.

How were you using OpenLDAP 2.3 with lenny?  The OpenLDAP that shipped with
lenny was 2.4.11.  Is this actually a behavior difference between 2.4.11 and
2.4.23?

Also, /etc/ldap/ldap.conf is not a config file for slapd, it's a config file
for the libldap library.  Maybe it's a bug that the values in
/etc/ldap/ldap.conf aren't *read* by slapd, but it's definitely not a bug in
any config migration code.

Thanks,
-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
slangasek at ubuntu.com                                     vorlon at debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 828 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-openldap-devel/attachments/20110218/819ab8da/attachment.pgp>