Re: Ldap security?

2001-03-21 Thread Jeff Coppock
A colleague of mine successfully setup OpenLDAP and has interfaced several server applications to it that were originally designed for Netscape Directory Server. It's running fast and stable so far. jc On Sat, Mar 17, 2001 at 09:25:40AM -0700, Moe Harley wrote: I'm playing with the idea of

Re: Ldap security?

2001-03-21 Thread Jeff Coppock
A colleague of mine successfully setup OpenLDAP and has interfaced several server applications to it that were originally designed for Netscape Directory Server. It's running fast and stable so far. jc On Sat, Mar 17, 2001 at 09:25:40AM -0700, Moe Harley wrote: I'm playing with the idea of

Ldap security?

2001-03-17 Thread Moe Harley
I'm playing with the idea of adding an ldap service/daemon to my debian machine. But before running one, I wanted to get a good idea of what the general opinion of ldap servers is as far as security is concerned. I also was wondering if anyone had any opinions on which one I should use? The only

Ldap security?

2001-03-17 Thread Moe Harley
I'm playing with the idea of adding an ldap service/daemon to my debian machine. But before running one, I wanted to get a good idea of what the general opinion of ldap servers is as far as security is concerned. I also was wondering if anyone had any opinions on which one I should use? The only

Re: nss-ldap security bug

2000-11-23 Thread Jamie Heilman
The libnns-ldap 122-1 update made it into r1 without ever having an official Security Alert announcement, I dunno how big of a deal this is, but I figured I should dredge it up incase it needed be addressed officially. Anyone? -- Jamie Heilman

Re: nss-ldap security bug

2000-11-23 Thread Jamie Heilman
The libnns-ldap 122-1 update made it into r1 without ever having an official Security Alert announcement, I dunno how big of a deal this is, but I figured I should dredge it up incase it needed be addressed officially. Anyone? -- Jamie Heilman

Re: nss-ldap security bug

2000-11-23 Thread Wichert Akkerman
Previously Jamie Heilman wrote: The libnns-ldap 122-1 update made it into r1 without ever having an official Security Alert announcement, I dunno how big of a deal this is, but I figured I should dredge it up incase it needed be addressed officially. Anyone? I know, it's on the list of

Re: nss-ldap security bug

2000-11-23 Thread Jamie Heilman
I know, it's on the list of things to do. Since it's already in there it has a lower priority then fixing things that don't have a fix yet though. Thats cool, it hasn't been compiled for alpha yet either so I guess there's still work to be done. -- Jamie Heilman

nss-ldap security bug

2000-11-03 Thread Davide Puricelli
Hi guys, a security related bug was recently fixed in libnss-ldap whereby a race condition could be exploited to make nscd deadlock. Both potato and woody are affected by this bug: I already have uploaded a fixed version in potato proposed-updates (110-3) and I'm working on the woody upload; I

Re: nss-ldap security bug

2000-11-03 Thread Jamie Heilman
Don't race to install 110-3, it has unresolved symbols. See bug #76018 -- Jamie Heilman http://audible.transient.net/~jamie/ "You came all this way way without saying squat and now you're trying to tell me a '56 Chevy can beat a '47 Buick in a dead quarter mile? I liked

nss-ldap security bug

2000-11-03 Thread Davide Puricelli
Hi guys, a security related bug was recently fixed in libnss-ldap whereby a race condition could be exploited to make nscd deadlock. Both potato and woody are affected by this bug: I already have uploaded a fixed version in potato proposed-updates (110-3) and I'm working on the woody upload; I

Re: nss-ldap security bug

2000-11-03 Thread Jamie Heilman
Don't race to install 110-3, it has unresolved symbols. See bug #76018 -- Jamie Heilman http://audible.transient.net/~jamie/ You came all this way way without saying squat and now you're trying to tell me a '56 Chevy can beat a '47 Buick in a dead quarter mile? I liked you