1 This is a fork of the official PowerDNS LDAP backend module and
2 is intended to be used as a drop-in replacement for it. As such
3 the library name is the same.
5 As this project is independent from PowerDNS support requests
6 related to the new functionnalities should be sent to the
7 mailing list pdns-ldap-backend@sequanux.org (go to
8 http://sequanux.org/cgi-bin/mailman/listinfo/pdns-ldap-backend
11 The latest version of the code is available from
12 http://repo.or.cz/w/pdns-ldap-backend.git
14 All bug reports should go to the mailing list for now.
19 First the situation of the official LDAP backend is not good.
20 The original developer stopped maintaining it, and nobody
21 stepped in to replace him. The developer of PowerDNS did
22 maintain it in the official tree, checking that it's still
23 compiling, but unfortunately they have no knowledge of LDAP
24 and can't spend resources on this module. Furthermore they
25 express legitimate doubts on the interest of maintaining
26 a module for which they have little usage return.
28 So here it is for the vicious cycle: no users -> no incentive
29 to maintain the module -> users are not interested in a
30 module that's not maintained.
32 Now Grégory Oestreicher (the chap writing these lines, but
33 referred later at the third person should this change) had
34 developed some patches to add GSSAPI authentication to the
35 LDAP backend. They were submitted, but will never be
36 integrated in the main tree for two reasons:
37 - nobody but their author can validate them in the actual
38 situation. As they are consequent it's hard for someone
39 without LDAP and Kerberos knowledge to vouch for them.
40 And as said above the PowerDNS authors can't dedicate
42 - their author cannot commit himself to become the official
43 maintainer of the LDAP backend. Yeah, this sucks but at
44 least it's not giving false hopes.
46 Another problem faced by the LDAP backend is the lack of
47 automated regression tests.
49 The PowerDNS developers and PowerDNS BV are clearly not to
50 blame for this, and their work should be praised. Forking
51 a software is not in this case due to an argument that
52 overheated or to some ego who wants to have more power
53 (though this can be debatted :).
57 These patches can be useful to a more general audience than
58 the readers of the pdns-dev mailing list, where they were
59 originally submitted. As they won't be integrated into the
60 main tree, and as the license permits forks, the decision
61 was taken to temporarily part ways.
63 Maintaining an external repository should have two
65 - Allowing the backend to evolve at its rythm, without
66 the need of a full commitment to the backend maintainership.
67 - Showing that the backend still moves however and attract
68 actual users. This would be a good message to send to
69 the PowerDNS devs that this backend is still alive
75 As the maintenance is a one-man operation, and given that
76 the time of said man is rather limited, the backend should
77 be considered as 'sporadically updated'. One major
78 bug of the backend (issues 260 and 323 for those that used
79 the official PDNS bug tracker) have already been addressed,
80 making it more robust.
82 However future evolution is subject to
83 - free time of the author, as well as his mood and the
84 disposition of the start;
85 - people sending patches.