Also, for those interested, here is the GraphViz source for the "visual
aid." The graphic can be regenerated with the command
$ dot -Tpng ldap-deps.dot >ldap-deps.png
(The dot(1) command is in the "graphviz" package.)
** Attachment added: "ldap-deps.dot"
https://bugs.launchpad.net/ubuntu
Hi everyone. I've been setting up LDAP in Ubuntu lately, and have run
headlong into this issue again.
Arguably, the situation has gotten worse in the past three years, as the
dependency rat's nest has become more convoluted.
I've put together a new visual aid to illustrate the current situation;
@Daniel
Makes sense to me. Since NSS isn't strictly auth, would it also make
sense to rename ldap-auth-config to ldap-config?
This area is complex, especially with the delta with Debian in mind. I'm
not even considering touching this because I'm worried I'll break
something, and it seems like it
Robie, thanks for commenting.
Note that the ldap-auth-config package does not preclude alternate forms
of managing /etc/ldap.conf. It won't touch an existing config file, nor
complain if the one it creates is modified. Also, while this package
does not exist in Debian, the file is still created wh
ldap-auth-config does not exist in Debian. It is expected that those who
want ldap authentication can write /etc/ldap.conf themselves.
In Ubuntu, I think it makes sense to permit this, so it should be
possible to install libnss-ldap and libpam-ldap without ldap-auth-config
installed. An example us
I think Thierry's solution in comment #10 is the way to go. It's
appropriate for ldap-auth-client to depend on libpam-ldap, because
that's the intent of the metapackage. But ldap-auth-config provides
/etc/ldap.conf, which you need whether or not you're using LDAP for
authentication. (That package w
** Also affects: ldap-auth-client (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/334374
Title:
libnss-ldap should not depend on libpam-ldap
To ma
This still needs to be discussed to find the optimal fix, and it probably won't
make it into karmic at this point (as it changes the behavior at a late stage).
Unsubscribing sponsors for now.
** Changed in: libnss-ldap (Ubuntu)
Importance: Undecided => Low
** Changed in: libnss-ldap (Ubuntu)
Still unsure it's the best way to fix it. I agree one of those Depends
must be turned into a Recommends, I'm just unsure this one is the best
:)
How about making the ldap-auth-config -> ldap-auth-client link a
Recommend ?
@Daniel: thanks ! That makes explaining the issue so much easier.
--
libn
@Thierry: Attaching new debdiff.
@Daniel: Awesome visual aid!
** Attachment added: "libnss-ldap_261-2.1ubuntu3.debdiff"
http://launchpadlibrarian.net/30478240/libnss-ldap_261-2.1ubuntu3.debdiff
--
libnss-ldap should not depend on libpam-ldap
https://bugs.launchpad.net/bugs/334374
You receive
Andreas: I would still explicitely recommend ldap-auth-config from
libnss-ldap. Even if it is redundant from an "resulting installed
packages" perspective, it is still very much recommended to have it
installed if you use libnss-ldap. Not only if you use libpam-ldap.
--
libnss-ldap should not dep
This bug report needs a visual aid.
** Attachment added: "Current dependency graph (black edge = Depends, red edge
= Recommends)"
http://launchpadlibrarian.net/30386089/depgraph.png
--
libnss-ldap should not depend on libpam-ldap
https://bugs.launchpad.net/bugs/334374
You received this bug n
Well, still think this is a good idea. Attaching a debdiff which removes
ldap-auth-config as a (hard) dependency.
Not re-adding as a Recommends, as that part is indirectly covered by the
Recommends on libpam-ldap.
** Attachment added: "libnss-ldap_261-2.1ubuntu3.debdiff"
http://launchpadlibrar
fine for me, definitely an improvement
--
libnss-ldap should not depend on libpam-ldap
https://bugs.launchpad.net/bugs/334374
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https
Ok, revisiting this bug I got an idea, which might just be a good
idea...
ldap-auth-config not always being a must to use libnss-ldap, perhaps it
should be a Recommends instead of a Depends? Given that Recommends is
now being installed by the default it will still give the normal user
the same aut
** Also affects: libnss-ldap (Kairos Linux)
Importance: Undecided
Status: New
** Changed in: libnss-ldap (Kairos Linux)
Importance: Undecided => Medium
Assignee: (unassigned) => Kairos Maintainers "techref" group
(kairos-techref)
Status: New => Confirmed
--
libnss-ldap
You are right; libpam-ldap really ends up being hard dependency to
libnss-ldap.
I see the problem and agree that this isn't necessary an optimal
solution. I'll mark this bug as confirmed, and we'll see what happens.
** Changed in: libnss-ldap (Ubuntu)
Status: Incomplete => Confirmed
--
l
> This way you can still remove libpam-ldap (afterwards)
> without libnss-ldap being removed too.
no (try it)
the problem is ldap-auth-client
libnss-ldap depends on ldap-auth-config
ldap-auth-config depends on ldap-auth-client
ldap-auth-client depends on both libnss-ldap and libpam-ldap
> Do y
Strictly speaking libpam-ldap isn't a dependency to libnss-ldap. Instead
it listed as a Recommended.
>From Intrepid and forward Ubuntu automatically installs Recommended
packages. Still, there is a difference compared to if it had been a pure
dependency. This way you can still remove libpam-ldap (
19 matches
Mail list logo