[Bug 334374] Re: libnss-ldap should not depend on libpam-ldap

[Robie Basak]

ldap-auth-config does not exist in Debian. It is expected that those who
want ldap authentication can write /etc/ldap.conf themselves.

In Ubuntu, I think it makes sense to permit this, so it should be
possible to install libnss-ldap and libpam-ldap without ldap-auth-config
installed. An example use case is an environment where the sysadmins use
puppet to centrally manage /etc/ldap.conf.

Therefore, I don't think that there should be any hard dependency to
ldap-auth-config at all. If in Ubuntu you decide to ignore
recommendations, I think it's reasonable to expect that you have to
configure bits of your system manually, such as by writing
/etc/ldap.conf yourself.

If you do want to introduce a hard dependency to ldap-auth-config, keep
in mind the use case I fixed in bug 1016592 - please don't regress this.

In a test just now, I successfully installed libnss-ldap in Raring
without being forced to install libpam-ldap (though it was recommended).
Thus I think the bug originally as reported has been fixed, so I'm
marking this bug as Fix Released.

I appreciate that the dependency tree is complicated and it may not be
ideal or fit all use cases. I suggest that you use the ubuntu-devel or
ubuntu-devel-discuss lists if you want to discuss it further. Perhaps
you could start there by presenting the specific use case that is
causing you trouble?

A final note: I'm not sure why Ubuntu has such a complex delta against
Debian here. It seems to mainly be driven by the existence of ldap-auth-
config. What are the implications of either getting this package
upstreamed to Debian or dropping it in Ubuntu?

** Changed in: libnss-ldap (Ubuntu)
       Status: Triaged => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to libnss-ldap in Ubuntu.
https://bugs.launchpad.net/bugs/334374

Title:
  libnss-ldap should not depend on libpam-ldap

Status in “ldap-auth-client” package in Ubuntu:
  New
Status in “libnss-ldap” package in Ubuntu:
  Fix Released
Status in “libnss-ldap” package in Kairos Linux:
  Confirmed

Bug description:
  Binary package hint: libnss-ldap

  I use LDAP to manage users and groups and Kerberos for
  authentification

  thus, I need libnss-ldap and libpam-krb5, but NOT libpam-ldap

  also note https://bugs.launchpad.net/bugs/306054 (which has auth-
  client-config as starting poing)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ldap-auth-client/+bug/334374/+subscriptions