Jason King wrote: > On Tue, Feb 24, 2009 at 4:29 PM, James Carlson <james.d.carlson at sun.com> > wrote: > >> Doug Leavitt writes: >> >>> For the purposes of 'official system architecture' as documented >>> by ARC (specifically PSARC), the committed, public and supported >>> libldap interfaces in Solaris is libldap5 as documented by >>> PSARC/2000/362, and for naming services it is the sparks effort >>> as documented by PSARC/2005/133. >>> >> True enough. And that's not what this project is using. In fact, >> it's enhancing PHP5 by _removing_ the existing support for the >> committed, public, and supported interfaces and adding in its place >> support for the volatile and unsupported interface from OpenLDAP. >> >> Perhaps that is ultimately the right way forward for Solaris (despite >> all the work you and your team have put into this). Unfortunately, >> without some clear system architecture to back it up, it's just random >> change. >> > > Perhaps a stupid question, but libldap5 does support SSL, TLS, and > ldaps URLs (from looking at the source) -- it just appears that it > perhaps just doesn't have the appropriate stability classification. >
There's no actual problem with the stability classification of either libldap5 or of the new OpenLDAP integration. OpenLDAP doesn't have the traditional Solaris interface stability, but the open source packages which use it deal with that with occasional version-specific code. > What isn't clear (from the original proposal) to me is there something > incompatible with those interfaces & php? Or could raising the > stability of the existing interfaces perhaps solve the problem (and > would that be an easier proposition than going to OpenLDAP)? > The open source software in the web space generally (everything we know of) can use OpenLDAP for secure connections but not libldap5. Some can't use libldap5 at all. Another way to look at it: Everything that can run on Linux is able to use OpenLDAP. People have been building OpenLDAP on their own for years to use this software with full function on Solaris. CoolStack, Blastwave, and Sun freeware distributions of Apache, PHP, etc. for Solaris require OpenLDAP for their LDAP support.
