Re: [gentoo-dev] Retirement plans for =net-nds/openldap-2.{1,2}*

[Robin H. Johnson]

On Sat, Feb 24, 2007 at 03:23:28AM -0800, Josh Saddler wrote:
> Er. Granted, they're out of date, because we don't have anyone who knows
> ldap (and gongloo never showed up with a promised rewrite), but all of
> our documentation seems to be geared toward openldap-2.1 or so.
>
> http://www.gentoo.org/doc/en/ldapdns-guide.xml --> is still considered
> "valid"
There is nothing in that document that limits it to openldap-2.1. It
should work perfectly fine with 2.2/2.3 and the upcoming 2.4.

> http://www.gentoo.org/doc/en/ldap-howto.xml --> is considered
> unmaintained and "invalid", since none of the GDP knows ldap. wouldn't
> mind reinstating it if we can get users to help out with the updates.
At a quick glance:
- The ebuild handles the SSL certs now
- migrationtools is no longer used, need to provide a bootstrap.ldif and
  point users to a suitable tool for creating their entries (I have a
  vested interest in diradm, and really need to get the next release of
  diradm out the door, but do NOT use it yet).
- Well migrationtools can still be used, but it's something that you
  grab from a tarball, run exactly once, and throw away.
- The pam/nss configuration and /etc/ldap.conf need a lot of work.

So again, there is NOTHING that is specific to any version of OpenLDAP
there. There's plenty that can be done better/slightly differently in
2.2/2.3, but nothing that would fail anywhere other than 2.1.

-- 
Robin Hugh Johnson
Gentoo Linux Developer
E-Mail     : robbat2@g.o
GnuPG FP   : 11AC BA4F 4778 E3F6 E4ED  F38E B27B 944E 3488 4E85