@Daniel
Makes sense to me. Since NSS isn't strictly auth, would it also make
sense to rename ldap-auth-config to ldap-config?
This area is complex, especially with the delta with Debian in mind. I'm
not even considering touching this because I'm worried I'll break
something, and it seems like it
ldap-auth-config does not exist in Debian. It is expected that those who
want ldap authentication can write /etc/ldap.conf themselves.
In Ubuntu, I think it makes sense to permit this, so it should be
possible to install libnss-ldap and libpam-ldap without ldap-auth-config
installed. An example
Robie, thanks for commenting.
Note that the ldap-auth-config package does not preclude alternate forms
of managing /etc/ldap.conf. It won't touch an existing config file, nor
complain if the one it creates is modified. Also, while this package
does not exist in Debian, the file is still created
** Also affects: ldap-auth-client (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libnss-ldap in Ubuntu.
https://bugs.launchpad.net/bugs/334374
Title:
libnss-ldap should not
I think Thierry's solution in comment #10 is the way to go. It's
appropriate for ldap-auth-client to depend on libpam-ldap, because
that's the intent of the metapackage. But ldap-auth-config provides
/etc/ldap.conf, which you need whether or not you're using LDAP for
authentication. (That package
This still needs to be discussed to find the optimal fix, and it probably won't
make it into karmic at this point (as it changes the behavior at a late stage).
Unsubscribing sponsors for now.
** Changed in: libnss-ldap (Ubuntu)
Importance: Undecided = Low
** Changed in: libnss-ldap (Ubuntu)
Still unsure it's the best way to fix it. I agree one of those Depends
must be turned into a Recommends, I'm just unsure this one is the best
:)
How about making the ldap-auth-config - ldap-auth-client link a
Recommend ?
@Daniel: thanks ! That makes explaining the issue so much easier.
--
Andreas: I would still explicitely recommend ldap-auth-config from
libnss-ldap. Even if it is redundant from an resulting installed
packages perspective, it is still very much recommended to have it
installed if you use libnss-ldap. Not only if you use libpam-ldap.
--
libnss-ldap should not
@Thierry: Attaching new debdiff.
@Daniel: Awesome visual aid!
** Attachment added: libnss-ldap_261-2.1ubuntu3.debdiff
http://launchpadlibrarian.net/30478240/libnss-ldap_261-2.1ubuntu3.debdiff
--
libnss-ldap should not depend on libpam-ldap
https://bugs.launchpad.net/bugs/334374
You received
This bug report needs a visual aid.
** Attachment added: Current dependency graph (black edge = Depends, red edge
= Recommends)
http://launchpadlibrarian.net/30386089/depgraph.png
--
libnss-ldap should not depend on libpam-ldap
https://bugs.launchpad.net/bugs/334374
You received this bug
Well, still think this is a good idea. Attaching a debdiff which removes
ldap-auth-config as a (hard) dependency.
Not re-adding as a Recommends, as that part is indirectly covered by the
Recommends on libpam-ldap.
** Attachment added: libnss-ldap_261-2.1ubuntu3.debdiff
Ok, revisiting this bug I got an idea, which might just be a good
idea...
ldap-auth-config not always being a must to use libnss-ldap, perhaps it
should be a Recommends instead of a Depends? Given that Recommends is
now being installed by the default it will still give the normal user
the same
fine for me, definitely an improvement
--
libnss-ldap should not depend on libpam-ldap
https://bugs.launchpad.net/bugs/334374
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libnss-ldap in ubuntu.
--
Ubuntu-server-bugs mailing list
** Also affects: libnss-ldap (Kairos Linux)
Importance: Undecided
Status: New
** Changed in: libnss-ldap (Kairos Linux)
Importance: Undecided = Medium
Assignee: (unassigned) = Kairos Maintainers techref group
(kairos-techref)
Status: New = Confirmed
--
libnss-ldap
Strictly speaking libpam-ldap isn't a dependency to libnss-ldap. Instead
it listed as a Recommended.
From Intrepid and forward Ubuntu automatically installs Recommended
packages. Still, there is a difference compared to if it had been a pure
dependency. This way you can still remove libpam-ldap
This way you can still remove libpam-ldap (afterwards)
without libnss-ldap being removed too.
no (try it)
the problem is ldap-auth-client
libnss-ldap depends on ldap-auth-config
ldap-auth-config depends on ldap-auth-client
ldap-auth-client depends on both libnss-ldap and libpam-ldap
Do you
You are right; libpam-ldap really ends up being hard dependency to
libnss-ldap.
I see the problem and agree that this isn't necessary an optimal
solution. I'll mark this bug as confirmed, and we'll see what happens.
** Changed in: libnss-ldap (Ubuntu)
Status: Incomplete = Confirmed
--
17 matches
Mail list logo
