Bug 812860

Summary: missing private headers
Product: [Fedora] Fedora Reporter: Guillaume Rousse <guillomovitch>
Component: openldapAssignee: Jan Vcelak <jvcelak>
Status: CLOSED CANTFIX QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: low Docs Contact:
Priority: unspecified    
Version: rawhideCC: jsynacek, jvcelak, rmeggins, tsmetana
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: All   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-05-29 09:17:51 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Guillaume Rousse 2012-04-16 12:59:27 UTC
The openldap-devel package only ships public openldap headers, and lacks those needed to build openldap-specific extensions, such as openldap-ppolicy-check-password (namely portable.h and slapd.h):
http://ltb-project.org/wiki/documentation/openldap-ppolicy-check-password

Comment 1 Jan Vcelak 2012-05-29 09:17:51 UTC
I discussed this with other maintainer. And we finally decided not to include private headers. We also took a look at other distributions and didn't find any other shipping these headers.

The internal headers are not ment to be public. If some change occurs in OpenLDAP internal structures it will most probably break your extension. In case of OpenLDAP backends, you can crash the server very easily. We do not want to support these configurations.

If you need some module we do not ship, you have to rebuild OpenLDAP by your own and manage it by yourself. Or, you can work with upstream on some better solution for external modules.

Sorry, closing as CANTFIX.

Comment 2 Guillaume Rousse 2012-05-30 08:46:16 UTC
An ITS has been opened upstream:
http://www.openldap.org/its/index.cgi?findid=7283

BTW, mandriva and its mageia fork do ship those headers for ages:
http://svnweb.mageia.org/packages/cauldron/openldap/current/SPECS/

Comment 3 Guillaume Rousse 2012-06-04 09:23:23 UTC
The discussion on openldap-devel mailing list suggested to build the module directly from the tree. Would a patch bringing check-password as an additional source, and building it as an additional extension be accepted ?

Comment 4 Jan Vcelak 2012-06-04 10:00:36 UTC
Guillame, please, file a new bug report for the request. Provide upstream project URL and link to the release tarball. We will take a look at it. If it doesn't violate Fedora packaging guidelines, we can probably include it.