[Pkg-openldap-devel] Bug#628237: Bug#628237: OpenLDAP vs. SASL - what happened

[Dan White]

On 14/07/11 11:37 -0700, Quanah Gibson-Mount wrote:
>--On Thursday, July 14, 2011 7:45 PM +0200 Ralph Rößner 
><roessner at capcom.de> wrote:
>
>
>>Now you could argue that Cyrus upstream should not do that, i.e. breaking
>>the plugin ABI for a "step" release but that argument is two years late
>>(which is how long the .24 has been around).
>
>There is no cyrus-sasl 2.1.24 release.  There is a release candidate, 
>which when I tested it, had a series of serious flaws.  Why anyone 
>would add that to a distribution is beyond me.  The latest release of 
>cyrus-sasl is 2.1.23.  I find it significant that after 2 years there 
>still remains no official 2.1.24 release after the numerous issue 
>reports that were filtered back to the project.

There's been quite a bit of new work even since the 2.1.24rc1 tarball,
including work corresponding to the newer IETF SASL standards (GS2, SCRAM,
and channel binding), so I wouldn't be surprised to see another version
bump before the next release. The package in Debian is actually based on
CVS HEAD, and should be in much better shape than 2.1.24rc1 was.

Please file any outstanding issues against the sasl packages, and I'll try
to filter those to upstream developers as appropriate.

-- 
Dan White