Go to file
Jan Vcelak 331465716f fix: libldap does not load PEM certificate if certdb is used as TLS_CACERTDIR
Resolves: #857455
2012-09-14 16:14:43 +02:00
.gitignore new upstream release (2.4.32) 2012-08-01 13:39:25 +02:00
README.evolution - spell out explicitly that the evo-openldap stuff shouldn't be used for any 2005-02-02 23:44:13 +00:00
ldap.conf certificates management improvements 2012-02-14 17:22:50 +01:00
libexec-check-config.sh temporarily disable certificates checking in check-config.sh 2012-02-15 13:15:07 +01:00
libexec-convert-config.sh move maintainance scripts from libexec/slapd to libexec/openldap 2012-02-14 13:42:07 +01:00
libexec-create-certdb.sh certificates management improvements 2012-02-14 17:22:50 +01:00
libexec-functions fix: check-config.sh get stuck when executing command as a ldap user 2012-02-15 14:26:49 +01:00
libexec-generate-server-cert.sh certificates management improvements 2012-02-14 17:22:50 +01:00
libexec-upgrade-db.sh move maintainance scripts from libexec/slapd to libexec/openldap 2012-02-14 13:42:07 +01:00
openldap-ai-addrconfig.patch fix: querying for IPv6 DNS records when IPv6 is disabled on the host 2012-07-19 11:00:43 +02:00
openldap-autoconf-pkgconfig-nss.patch clean the package build process 2012-07-18 19:02:28 +02:00
openldap-constraint-count.patch update fix: count constraint broken when using multiple modifications 2012-06-27 13:26:24 +02:00
openldap-dns-priority.patch new feature update: honor priority/weight with ldap_domain2hostlist 2011-09-21 11:05:39 +02:00
openldap-evolution-ntlm.patch reapplied all patches 2011-02-14 14:30:30 +01:00
openldap-fedora-systemd.patch patch slapd to skip empty arguments 2011-11-01 13:34:30 +01:00
openldap-ldaprc-currentdir.patch reapplied all patches 2011-02-14 14:30:30 +01:00
openldap-man-sasl-nocanon.patch fix: SASL_NOCANON option missing in ldap.conf manual page 2012-02-22 15:46:23 +01:00
openldap-manpages.patch reapplied all patches 2011-02-14 14:30:30 +01:00
openldap-nss-allow-certname-with-token-name.patch prefer key from authenticated slot, allow certificate name with token 2012-08-20 20:34:34 +02:00
openldap-nss-certs-from-certdb-fallback-pem.patch fix: libldap does not load PEM certificate if certdb is used as TLS_CACERTDIR 2012-09-14 16:14:43 +02:00
openldap-nss-default-cipher-suite-always-selected.patch fix: default cipher suite is always selected 2012-06-27 14:10:28 +02:00
openldap-nss-ignore-certdb-sql-prefix.patch fix: MozNSS certificate database in SQL format cannot be used 2012-09-14 16:14:21 +02:00
openldap-nss-multiple-tls-contexts.patch fix: less influence between individual TLS contexts 2012-06-27 14:40:59 +02:00
openldap-nss-prefer-unlocked-key.patch prefer key from authenticated slot, allow certificate name with token 2012-08-20 20:34:34 +02:00
openldap-nss-regex-search-hashed-cacert-dir.patch fix: not all certificates in OpenSSL compatible CA certificate directory format are loaded 2012-09-14 16:13:59 +02:00
openldap-nss-update-list-of-ciphers.patch fix: some TLS ciphers cannot be enabled 2012-09-14 16:13:12 +02:00
openldap-reentrant-gethostby.patch reapplied all patches 2011-02-14 14:30:30 +01:00
openldap-security-pie.patch new upstream release (2.4.28) 2011-11-30 16:51:05 +01:00
openldap-smbk5pwd-overlay.patch new upstream release (2.4.32) 2012-08-01 13:39:25 +02:00
openldap-sql-linking.patch reapplied all patches 2011-02-14 14:30:30 +01:00
openldap-syncrepl-unset-tls-options.patch fix: allow unsetting of tls_* syncrepl options 2011-09-12 18:42:53 +02:00
openldap-tls-no-reuse-of-tls_session.patch fix: connection hangs after fallback to second server when certificate hostname verification fails 2012-09-14 16:13:39 +02:00
openldap-userconfig-setgid.patch reapplied all patches 2011-02-14 14:30:30 +01:00
openldap.spec fix: libldap does not load PEM certificate if certdb is used as TLS_CACERTDIR 2012-09-14 16:14:43 +02:00
slapd.ldif certificates management improvements 2012-02-14 17:22:50 +01:00
slapd.service fix: slapd fails to start on reboot 2012-06-27 14:05:10 +02:00
slapd.sysconfig add KRB5_KTNAME to /etc/sysconfig/slapd 2012-08-09 10:39:07 +02:00
slapd.tmpfiles provide new sysconfig file, rename ldap to slapd 2011-10-27 17:27:43 +02:00
sources new upstream release (2.4.32) 2012-08-01 13:39:25 +02:00

README.evolution

These files are here specifically for use in building the evolution-connector
package, and should not be used for any other purpose.

In order to authenticate to older servers, an LDAP client must perform an
ntlm_bind operation instead of a simple or SASL bind.  The ntlm_bind is not the
same thing as performing SASL authentication using NTLM as the mechanism, which
wouldn't require any patching.  Newer servers properly support DIGEST-MD5, so
this requirement only applies to clients which want to authenticate to older
servers, and this requirement will hopefully go away at some point.

Because the changes involved both modify the libldap ABI and add
non-standardized messages to the protocol, changed libraries are built
statically and stashed in a directory where they will not be found by a
compiler using the default search paths.

The openldap-devel package provides "openldap-evolution-devel" if it includes a
patched version of these libraries in such a directory.  Packages which depend
on these libraries should BuildRequire this virtual provision so that they
don't fail to compile or get miscompiled if the libraries are not present.

If/when the evolution-connector package stops requiring these changes, the
changed libraries will simply disappear.