[Bug libc/6610] NSS modules should be dlopen()ed with RTLD_DEEPBIND
fw at deneb dot enyo.de
sourceware-bugzilla@sourceware.org
Sun Mar 8 14:25:49 GMT 2020
https://sourceware.org/bugzilla/show_bug.cgi?id=6610
Florian Weimer <fw at deneb dot enyo.de> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |fw at deneb dot enyo.de
--- Comment #3 from Florian Weimer <fw at deneb dot enyo.de> ---
Note that by now, nss_ldap with its in-process LDAP processing is considered a
design mistake. The successor, nss_ldapd, performs all LDAP handling in a
dedicated daemon, so that the NSS module itself does not depend on any LDAP
libraries. This avoids symbol binding issues due to conflicting LDAP libraries.
(It also allows the client to use some secret not known to all local users to
authenticate to the LDAP server.)
--
You are receiving this mail because:
You are on the CC list for the bug.
More information about the Glibc-bugs
mailing list