Mikhail T. Reporter
	Description • 21 years ago

User-Agent:       Mozilla/5.0 (compatible; Konqueror/3.1; FreeBSD 5.1-CURRENT; X11; i386)
Build Identifier: 

The OpenLDAP seems to be a more "vibrant" project and Mozilla should offer it as a build-time 
alternative if not switch to it outright. 
 
The particularly important feature is the Cyrus-SASL integration OpenLDAP offers, which lets 
one talk to MS-Exchange's Active Directory servers after Kerberos authentication. 
 
There probably are others. 

Reproducible: Always

Steps to Reproduce:
1.
2.
3.

	Matthias Versen [:Matti]
	Comment 1 • 21 years ago

-> Directory

	Mark Smith [:mcs] Assignee
	Comment 2 • 21 years ago

The Mozilla LDAP code is also actively maintained, although you are correct that
OpenLDAP's SDK has some features we do not (and we have some features they do
not have). Offering OpenLDAP as an alternative would actually be quite a bit of
work due to the requirement to integrate with NSPR (something OpenLDAP likely
does not support).

	Mark Smith [:mcs] Assignee
	Comment 3 • 21 years ago

TM = Future

	Matthew Stier
	Comment 4 • 20 years ago

An additional issue, is that the Netscape SDK is apparently being used in LDAPv2
mode.  

With OpenLDAP and other LDAP server dropping support for LDAPv2 there will be an
increasing number of Directory servers that Mozilla projects will not be able to
use.

	Mark Smith [:mcs] Assignee
	Comment 5 • 20 years ago

Regarding comment 4, use of LDAPv3 by Mozilla applications is the subject of bug
198168 (recently fixed).

	Rich Megginson
	Comment 6 • 19 years ago

One huge problem with this is that Mozilla requires the use of NSS for crypto, but OpenLDAP uses openssl.  I don't know if it is possible to mix the two crypto providers, but it is not desirable.  Upcoming releases of NSS will have FIPS 140-2  and smart card support which openssl does not have.  We will be working on adding cyrus sasl support to the ldapsdk in the very near future.

You might want to file an ITS against openldap for them to add NSS support.

	Rich Megginson
	Comment 7 • 15 years ago

http://www.openldap.org/its/index.cgi/Contrib?id=5696