[csw-users] PHP - Solaris LDAP libraries vs. OpenLDAP libraries

[Luke Youngblood]

I appreciate your opinion on this, but is there any reason why the Sun LDAP
libraries wouldn't work just as well as the OpenLDAP libraries?  Using the
Sun LDAP libraries on a client doesn't prevent you from running OpenLDAP as
a server.  Also, because the Sun LDAP libraries are part of the core
architecture now, you should get them with any Solaris install (except
Solaris 7 and below).

In addition, the Sun LDAP libraries provide some superior functionality to
OpenLDAP, like properly enforcing password expiration requirements, which
are critical to a lot of business implementing Sarbanes Oxley and other
security requirements.

-----Original Message-----
From: users-bounces at lists.blastwave.org
[mailto:users-bounces at lists.blastwave.org] On Behalf Of Jeremy O'Leary
Sent: Thursday, February 17, 2005 7:30 PM
To: questions and discussions
Subject: Re: [csw-users] PHP - Solaris LDAP libraries vs. OpenLDAP libraries

Luke Youngblood wrote:

> I'm having a little bit of difficulty using the Blastwave version of 
> modphp. You see, it's compiled and linked against the OpenLDAP 
> libraries. We are using Sun's native LDAP client on our servers to 
> provide authentication, and if I try to start Apache on a server that 
> is using the Sun Native LDAP client, it core dumps. I spent weeks 
> troubleshooting this case with Sun support and they finally said 
> "you're using the OpenLDAP libraries, stop linking against them if you 
> want it to work." So, my options are basically this:
>
> 1. I can compile PHP on my own, linking against the Sun LDAP 
> libraries, and not use CSWmod_php. This works fine.
>
> 2. I can humbly request that the package maintainer link against the 
> Sun LDAP libraries instead of OpenLDAP.
>
> I'd like to make that humble request. OpenLDAP used to be the only 
> source of decent LDAP libraries on Solaris, but now that Sun has 
> gotten their act together with Solaris 9 and the secure native LDAP 
> client (which is also backported to Solaris 8 in patch 108993), why 
> don't we link against their libraries?
>
> It would also remove the need to install OpenLDAP as a dependency 
> during the pkg-get phase.
>

We are going to be implmenting OpenLDAP were I work so please don't make 
everything dependant on Sun LDAP libraries.

thanks,

Jeremy
_______________________________________________
users mailing list
users at lists.blastwave.org
https://lists.blastwave.org/mailman/listinfo/users