Re: [gentoo-dev] Re: [gentoo-commits] gentoo-x86 commit in net-nds/openldap/files: openldap-2.4.40-db-6.patch

[Robin H. Johnson]

On Wed, Oct 29, 2014 at 05:42:57AM -0400, Rich Freeman wrote:
> On Tue, Oct 28, 2014 at 11:37 PM, Vadim A. Misbakh-Soloviov
> <mva@×××.name> wrote:
> > Btw, since Gentoo do not (mostly) provide packages itself, but only build
> > instructions (ebuild), can't we just ship ebuild that "patches" openldap
> > violates to force to use db6>=19 with "bindist" USE?
> Can we do it legally?  Sure.
>
> Will we do it?  I think that depends on whether the maintainer or
> somebody else wants to keep up with the necessary work if upstream has
> dropped it.
>
> It is really up to the maintainer.  Generally we try to follow
> upstream because we don't have the manpower to do otherwise most of
> the time.
Upstream openldap notes that Oracle's lawyers has pursued anybody found
using the AGPL3 BDB & OpenLDAP together.

So unless you have a commercial license [1] for BDB to escape AGPL3 in
that case, you'll find yourself in a sticky situation quickly.

Upstream asked me to make it harder for users to get burnt like this,
and I agreed. See my comments in the original bug (bug 525110#c16), if
there is a user that DOES have that Oracle license [2], I'll find a way
to support them via useflag.

[1] https://en.wikipedia.org/wiki/Berkeley_DB#Licensing
As of July 2011, Oracle's list price for non-copyleft Berkeley DB
licenses varies between 900 and 13,800 USD per processor.

[2] This puts it in the same camp as the original Oracle OCI8 support we
put in PHP; before oracle-instantclient-* packages were in the tree.
There was demand, just non-trivial to support, as we as devs could not
easily test it.

-- 
Robin Hugh Johnson
Gentoo Linux: Developer, Infrastructure Lead
E-Mail     : robbat2@g.o
GnuPG FP   : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85