Bug#803197: [Pkg-openldap-devel] Bug#803197: SOGo isn't the only victim, cups breaks as well

2018-11-23 Thread Lukas Kramer
On Sun, 10 Jun 2018 08:51:47 -0700 Ryan Tandy  wrote:

> Thanks for the followup. Yes, fixing it as a Debian patch is probably 
> the best path for now, and maybe trying upstream again at a later date. 
> To a certain extent it's easier here because we have a more homogeneous 
> platform than upstream does.

*bump* What are the chances of this patch landing in debian buster?



Bug#803197: [Pkg-openldap-devel] Bug#803197: SOGo isn't the only victim, cups breaks as well

2018-06-11 Thread Lukas Kramer
On 10.06.2018 17:51, Ryan Tandy wrote:
> I never did get around to re-asking GnuTLS upstream about adding a
> workaround on their end, but I suspect there's no point; after all
> libldap is doing the very things their documentation explicitly says a
> library should never do.

GnuTLS upstream really isn't at fault, they'll most likely tell us that
libldap is doing the wrong thing.
Maybe debian and other distros patching this convinces openldap upstream
to fix this or add a compile-time option to turn off this behaviour.



Bug#803197: [Pkg-openldap-devel] Bug#803197: SOGo isn't the only victim, cups breaks as well

2018-06-10 Thread Ryan Tandy

On Tue, Jun 05, 2018 at 10:25:35PM +0200, Lukas Kramer wrote:

Openldap calling gnutls_global_set_mutex also breaks cups when using
pam_ldap: http://www.openldap.org/its/index.cgi?findid=8797

As upstream is unwilling to fix this and the calling
gnutls_global_set_mutex isn't really necessary, how about patching this
in the debian package?


Thanks for the followup. Yes, fixing it as a Debian patch is probably 
the best path for now, and maybe trying upstream again at a later date. 
To a certain extent it's easier here because we have a more homogeneous 
platform than upstream does.


I never did get around to re-asking GnuTLS upstream about adding a 
workaround on their end, but I suspect there's no point; after all 
libldap is doing the very things their documentation explicitly says a 
library should never do.