[prev in list] [next in list] [prev in thread] [next in thread] 

List:       freeradius-users
Subject:    Re: FR, LDAP (AD) issues
From:       Alan DeKok <aland () deployingradius ! com>
Date:       2020-12-08 14:37:51
Message-ID: 630E6466-61BA-4F8F-B54C-7A5055EA8F14 () deployingradius ! com
[Download RAW message or body]

On Dec 8, 2020, at 9:34 AM, Michael Ströder via Freeradius-Users \
<freeradius-users@lists.freeradius.org> wrote:
> 
> On 12/8/20 2:41 PM, Alan DeKok wrote:
> > The issue is RedHat.  They've linked libldap against GNUTLS, which is *not* \
> > compatible with OpenSSL.
> 
> Debian links libldap against GnuTLS. AFAIK RedHat never did this.
> 
> RedHat/CentOS had libldap linked against libnss (Mozilla's crypto lib)
> until recently. They switched back to libldap linked against OpenSSL.

  Ah yes.  Similar, but different.

  Whether it's libnss or GNUTLS, the underlying issue is the same.  Libraries which \
claim to be "compatible" but aren't.

  The fix is still the same tho.  Use libraries which aren't broken.

  Alan DeKok.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


[prev in list] [next in list] [prev in thread] [next in thread]