[Pkg-openldap-devel] Is there a better way to handle Kerberos ldap configuration

Sam Hartman hartmans at debian.org
Mon Jul 16 22:02:34 BST 2018



Hi.

Mostly for the slapd maintainer.
Currently krb5-kdc-ldap ships an OpenLDAP schema file for the Kerberos
schema.
I just noticed that we don't ship the ldif file for the newer format
slapd config and will be fixing that in my next upload.

Currently in order to take advantage of either, the administrator needs
to grab the schema or ldif out of /usr/share/doc/krb5-kdc-ldap and
manually process it.

Is there some way we could do better than this?  How do we handle
optional schemas in Debian?  If we don't have a better way, would you
consider a patch to support the Kerberos schema in the Debian slapd
package?



More information about the Pkg-openldap-devel mailing list