Bug 244937

Summary: mod_admserv: Should do client TLS/SSL init even if mod_nss not used
Product: [Retired] 389 Reporter: Rich Megginson <rmeggins>
Component: AdminAssignee: Rich Megginson <rmeggins>
Status: CLOSED CURRENTRELEASE QA Contact: Viktor Ashirov <vashirov>
Severity: low Docs Contact:
Priority: low    
Version: 1.1.0beta   
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-12-07 16:31:51 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 240316, 427409    
Attachments:
Description Flags
diffs none

Description Rich Megginson 2007-06-19 23:10:55 UTC 
The way mod_admserv works now is that it only does NSS initialization if mod_nss
is being used.  But mod_nss is only for the server side of TLS/SSL.  mod_admserv
needs to be able to speak LDAPS to the directory server even if it is not a
TLS/SSL server itself.
Comment 1 Rich Megginson 2007-06-19 23:12:33 UTC 
Created attachment 157430 [details]
diffs
Comment 2 Noriko Hosoi 2007-06-19 23:28:50 UTC 
Your changes look good.
Comment 3 Rich Megginson 2007-06-19 23:33:35 UTC 
Reviewed by: nhosoi (Thanks!)
Fix Description: The way the code currently works is that mod_admserv let's
mod_nss do all of the NSS initialization.  But mod_nss is only used when the
admin server is also a TLS/SSL server.  mod_admserv still needs to do NSS
initialization when it is a TLS/SSL client (e.g. of the config DS using LDAPS).
 This fix allows mod_admserv to do the client side TLS/SSL init.
Platforms tested: RHEL4
Flag Day: no
Doc impact: no

Index: mod_admserv.c
===================================================================
RCS file: /cvs/dirsec/mod_admserv/mod_admserv.c,v
retrieving revision 1.29
retrieving revision 1.30
diff -u -r1.29 -r1.30
--- mod_admserv.c	11 May 2007 19:46:36 -0000	1.29
+++ mod_admserv.c	19 Jun 2007 23:31:12 -0000	1.30