Bug 122066
| Summary: | Unable to establish LDAP over SSL or TLS | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Dax Kelson <dkelson> |
| Component: | perl-LDAP | Assignee: | Chip Turner <cturner> |
| Status: | CLOSED RAWHIDE | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | rawhide | CC: | jose.p.oliveira.oss, perl-devel, steve |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2005-04-11 22:07:08 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Dax Kelson
2004-04-30 05:22:38 UTC
these may make it in the next release, but it's too late right now for FC2. for fc3 we can see if we can get it in. if those packages don't have dependencies on other packages, it shouldn't be hard to get them in. Ok, can these go into rawhide now? Just checking back. It would be really really nice to have: perl-IO-Socket-SSL perl-Net_SSLeay perl-Authen-SASL In FC3 / RHEL4. Again, they are very useful and doing a LDAP over a secure connection is best practice by far. Oh yeah, SUSE ships em. :) I agree that the above modules should be in core. Right now perl-IO-Socket-SSL and perl-Net-SSLeay are available in the Fedora Extras repo. perl-Authen-SASL should be there in a few days (already approved by still not built). perl-Authen-SASL is now available in Fedora.Extras notting said "not for now". It is good enough to be in Extras. Sniff! Sniff! Can I re-open this for FC5? Doesn't FC's perl-LDAP work when these packages are installed? What software uses perl-LDAP? Anything in Core? Warren, There are several perl modules in core that I don't know what they are used for. Do you know if there is some kind of requirement tree that we could check? If not I think it would make a good starting point for the new fedora-perl mailing list ;) Examples: perl-BSD-Resource, perl-Bit-Vector/perl-Date-Calc, ... Regarding perl-LDAP ------------------- I think samba has several scripts that use perl-LDAP but the requirement is being filtered out (will check again and if they require LDAPS). It really seems like perl-LDAP should have a hard dependency on perl(IO::Socket::SSL). Right now trying to use smbldap-tools results in this error: Can't locate IO/Socket/SSL.pm in @INC (@INC contains: /usr/sbin/ /usr/lib64/perl5/site_perl/5.8.8/x86_64-linux-thread-multi /usr/lib64/perl5/site_perl/5.8.7/x86_64-linux-thread-multi /usr/lib64/perl5/site_perl/5.8.6/x86_64-linux-thread-multi /usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thread-multi /usr/lib64/perl5/site_perl/5.8.4/x86_64-linux-thread-multi /usr/lib64/perl5/site_perl/5.8.3/x86_64-linux-thread-multi /usr/lib/perl5/site_perl/5.8.8 /usr/lib/perl5/site_perl/5.8.7 /usr/lib/perl5/site_perl/5.8.6 /usr/lib/perl5/site_perl/5.8.5 /usr/lib/perl5/site_perl/5.8.4 /usr/lib/perl5/site_perl/5.8.3 /usr/lib/perl5/site_perl /usr/lib64/perl5/vendor_perl/5.8.8/x86_64-linux-thread-multi /usr/lib64/perl5/vendor_perl/5.8.7/x86_64-linux-thread-multi /usr/lib64/perl5/vendor_perl/5.8.6/x86_64-linux-thread-multi /usr/lib64/perl5/vendor_perl/5.8.5/x86_64-linux-thread-multi /usr/lib64/perl5/vendor_perl/5.8.4/x86_64-linux-thread-multi /usr/lib64/perl5/vendor_perl/5.8.3/x86_64-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.8 /usr/lib/perl5/vendor_perl/5.8.7 /usr/lib/perl5/vendor_perl/5.8.6 /usr/lib/perl5/vendor_perl/5.8.5 /usr/lib/perl5/vendor_perl/5.8.4 /usr/lib/perl5/vendor_perl/5.8.3 /usr/lib/perl5/vendor_perl /usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi /usr/lib/perl5/5.8.8 .) at /usr/lib/perl5/vendor_perl/5.8.8/Net/LDAP.pm line 920. At least MS AD requires a secure connection (LDAPS) in order to allow password fields to be modified. I believe other LDAP servers have the same impositions. These just got added to rawhide, so they should be part of core and RHEL5. yah. Finally. *** Bug 190887 has been marked as a duplicate of this bug. *** |