after looking at out code it seems we ditched that stuff completely.
if you undef LDAP_TOOL_ARGPIN and FORTEZZA in your code during the
build that would be about the same. i dunno if anybody still needs
that stuff as i havent seen any customer requests related to argpin
stuff. why you still wanna have that ? i dont think anybody deals
with svrcore or cares about it anymore so if you wanna incorporate
parts of it inside your code i would assume no one would object tho
it can be a legal problem as i have no idea if its pure Netscape
thing from scratch or there some code borrowed from third parties.
Anton Bobrov wrote:
hmm...i'll have a closer look and get back to you on this one.
Rich Megginson wrote:
Anton Bobrov wrote:
well, basically you dont need svrcore anymore,
under mozilla/directory/c-sdk/ldap/clients/tools/
you have :
argpin.c argpin.h ntuserpin.c ntuserpin.h
these are ripped off svrcore and contain all the
code you need out of it for ldap csdk/tools use.
Hm - doesn't work for me. If I remove #include <svrcore.h> from
argpin.h and ntuserpin.h I get compilation errors:
argpin.h:44: error: syntax error before ‘SVRCORE_CreateArgPinObj’
argpin.h:44: error: syntax error before ‘SVRCOREPinObj’
argpin.h:44: warning: type defaults to ‘int’ in declaration of
‘SVRCORE_CreateArgPinObj’
....
svrcore.h defines a few types needed by argpin.c and ntuserpin.c
probably the build scripts you've inherited still
trying to fetch svrcore so just ditch related
import lines there and you are sorted.
regarding Fortezza i dont think anybody needs it
anymore and even if somebody does NSS>=3.10 does
not include any Fortezza support anymore so there
isnt whole lot we can do about it.
We've dropped Fortezza support in the code.
Rich Megginson wrote:
mozilla/security/svrcore - from the README:
"Terry Hayes wrote the Netscape svrcore library in 1998.
Valerie Chu wrote the ntgetpin.c and related files.
svrcore used to contain two major parts.
The first part is what we released on mozilla. It is a kind of
object-oriented package for handling PIN requests from NSS. The
idea was to provide a standard way for servers to allow PIN input
from a file or from the terminal. There is also a PIN handler
that caches the PIN in memory after encrypting it with a key on
a device (such as a Fortezza card). This allowed a server to
restart without having to reenter the PIN. However since the PIN
is encrypted, a core dump would not expose it. In addition,
removing the device would also make the PIN inaccessible."
I think the directory server and other servers that handle PINs have
their own PIN storage mechanisms. So it would seem that the ldap
sdk is the only component that uses svrcore, and then only the
command line programs, not the shared libraries. In looking at the
RPM packaging, there are 3 alternatives:
1) Have the nss-devel package include svrcore. The NSS team is
against this idea.
2) Create a svrcore-devel package. I don't relish the idea of
having to maintain this package along with the ldap sdk. But it
would be worth it if there are other components/programs that do or
would use it.
3) Just fold svrcore into the ldap sdk. Simple and effective.
I'm leaning towards 3. What do other people think? Anton, what did
you guys do with the Sun version of the ldap sdk? Do you use
svrcore? Did you open source it along with the other OpenSolaris code?
_______________________________________________
mozilla-directory mailing list
mozilla-directory@mozilla.org
http://mail.mozilla.org/listinfo/mozilla-directory
_______________________________________________
mozilla-directory mailing list
mozilla-directory@mozilla.org
http://mail.mozilla.org/listinfo/mozilla-directory
_______________________________________________
mozilla-directory mailing list
mozilla-directory@mozilla.org
http://mail.mozilla.org/listinfo/mozilla-directory
_______________________________________________
mozilla-directory mailing list
mozilla-directory@mozilla.org
http://mail.mozilla.org/listinfo/mozilla-directory
