Dropping the MozNSS crypto bits from OpenLDAP

2016-01-11 Thread Quanah Gibson-Mount
Hi Jan, Now that the Crypto Consolidation project has been dropped by Fedora (), is there any objection to OpenLDAP dropping the MozNSS work going forward (OpenLDAP 2.5+)? We already have noted we don't support people using it, due to

Re: Slapd startup behavior when unable to bind to an interface

2016-01-11 Thread Ryan Tandy
On Sat, Jan 09, 2016 at 03:48:12PM -0800, Quanah Gibson-Mount wrote: This is fairly trivial to reproduce. As a non-privileged user, simply do: -h "ldap:// ldapi://slapd.sock" It will fail to bind to 389, but bind to the LDAPI socket anyway, and continue the startup process. I was sure I

Re: Slapd startup behavior when unable to bind to an interface

2016-01-11 Thread Quanah Gibson-Mount
--On Monday, January 11, 2016 7:06 PM -0800 Ryan Tandy wrote: On Sat, Jan 09, 2016 at 03:48:12PM -0800, Quanah Gibson-Mount wrote: This is fairly trivial to reproduce. As a non-privileged user, simply do: -h "ldap:// ldapi://slapd.sock" It will fail to bind to 389, but

Re: Slapd startup behavior when unable to bind to an interface

2016-01-11 Thread Hallvard Breien Furuseth
On 10. jan. 2016 00:48, Quanah Gibson-Mount wrote: Currently, slapd will start up even if it can't bind to an interface, if more than one potential interface is given where the bind is successful. (...) This is fairly trivial to reproduce. As a non-privileged user, simply do: -h "ldap://