[opensuse-factory] Removing support for nss_ldap/pam_ldap from YaST LDAP client
Hi! According to feature #313142 ("YaST support only SSSD for LDAP based authentication") we want to remove current nss_ldap/pam_ldap support from YaST modules and leave only support for SSSD. Target is next openSUSE realease (12.2). SSSD is there already now (12.1), but still only as an option. With new approach, we should of course provide a migration from current setups. However, this also means that we will stop supporting non-encrypted connections to LDAP server, because SSL/TLS is a requirement for SSSD. So you have to prepare your LDAP servers so they are able to provide TLS. Jiri -- Jiri Suchomel SUSE LINUX, s.r.o. e-mail: jsuchome@suse.cz Lihovarská 1060/12 tel: +420 284 028 960 190 00 Praha 9, Czech Republic http://www.suse.cz -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Tue, 07 Feb 2012 17:20:10 +0100
Jiri Suchomel
Hi!
According to feature #313142 ("YaST support only SSSD for LDAP based authentication") we want to remove current nss_ldap/pam_ldap support from YaST modules and leave only support for SSSD. Target is next openSUSE realease (12.2).
SSSD is there already now (12.1), but still only as an option. With new approach, we should of course provide a migration from current setups.
However, this also means that we will stop supporting non-encrypted connections to LDAP server, because SSL/TLS is a requirement for SSSD. So you have to prepare your LDAP servers so they are able to provide TLS.
Jiri
-- Josef Reidinger Software Engineer Appliance Department SUSE LINUX, s. r. o. Lihovarska 1060/12 190 00 Praha 9 Czech Republic jreidinger@suse.com SUSE -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Le mardi 07 février 2012, à 17:31 +0100, Josef Reidinger a écrit :
On Tue, 07 Feb 2012 17:20:10 +0100 Jiri Suchomel
wrote: Hi, I think that this is something that should go to release notes. Is there page on opensuse wiki where developers could write such information ( I think it is easier to write it now, then trying to remember it when we are before release ).
You can file a bug against the release notes component (in openSUSE 12.2), and write the text there. Cheers, Vincent -- Les gens heureux ne sont pas pressés. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Tue, 7 Feb 2012 17:57:27 +0100
Vincent Untz
You can file a bug against the release notes component (in openSUSE 12.2), and write the text there.
Which doesn't prevent you to create page:
http://en.opensuse.org/openSUSE:Release_notes_12.2_(unoffical)
with structure:
--8<--------------------------
==
participants (4)
-
Jiri Suchomel
-
Josef Reidinger
-
Rajko M.
-
Vincent Untz