On Sun Jul 21, 2002 at 10:36:29AM -0700, David Walser wrote: > Ok, sorry Gwenole for all the useless messages > yesterday, I tracked the crashing down to nss_ldap. > > Funny thing is it works almost perfectly on my 8.x > box, all that doesn't is TLS.
What about TLS doesn't work? Is it configured correctly? I've got nss_ldap working just peachy on a few 8.2 boxes, no problems whatsoever. > On Cooker, passwd/shadow/group just don't work (they > don't seem to even contact the server), and once hosts > is enabled it just segfaults/coredumps everything. I'll have to try cooker, but I know that on 8.2 nss_ldap/pam_ldap work as good as they can for authentication (see my Authentication with OpenLDAP article on MandrakeSecure; the entire thing was done on an 8.2 box). Of course, you keep saying 8.x but I find it odd that 8.0, 8.1, and 8.2 are all broken. I can't say for 100% certain about 8.[01] but I do know that 8.2 works. Which "8.x" are you using, specifically? > My suggestion is: > 1) track down the 8.x TLS problem and fix it Unless you can give me something to indicate that TLS is broken in "8.x", I have to assume that it works. I've done it, on 8.2 and 8.2/ppc, others have done it, and this is the first I've heard that TLS isn't working with nss_ldap. You have to give me something to work with because I can't track down a problem that, for me, doesn't exist. > 2) put out an official update for 8.x If and when such a problem exists, sure. Right now I can only think misconfiguration of some sort for the reasons I've already outlined. > 3) Make a new RPM that actually works on Cooker Expect -2mdk shortly, with the fixes to the spec from your previous messages (thank you for that). But you indicate that TLS is not working on "8.x" but you say nothing about cooker... is TLS also not working in cooker? > 4) Feed it to us hungry Cookers :o) Well, you can try -2mdk shortly for some other fixes to the spec only. -- MandrakeSoft Security; http://www.mandrakesecure.net/ "lynx -source http://www.freezer-burn.org/bios/vdanen.gpg | gpg --import" {GnuPG: 1024D/FE6F2AFD : 88D8 0D23 8D4B 3407 5BD7 66F9 2043 D0E5 FE6F 2AFD}
msg68153/pgp00000.pgp
Description: PGP signature
