= Proposed Self Contained Change: OpenLDAP: Drop TCP wrappers support =
https://fedoraproject.org/wiki/Changes/OpenLDAPDropTCPWrappersSupport
Change owner(s):
* Matus Honek <mhonek AT redhat DOT com>
As per [1], TCP wrappers are being deprecated in Fedora. Also, as per
[2], upstream discourages its usage in favour of other means of
protection (e.g. firewall). After this change OpenLDAP will no longer
be affected by TCP wrappers configuration.
[1]
https://fedoraproject.org/wiki/Changes/Deprecate_TCP_wrappers
[2]
https://www.openldap.org/doc/admin24/security.html#TCP%20Wrappers
== Detailed Description ==
After this change, OpenLDAP will not be configured with
--enable-wrappers resulting in potential TCP wrappers configuration
having no effect on OpenLDAP (i.e. slapd binary executable). Please,
use other means of protection for the OpenLDAP server.
== Scope ==
* Proposal owners:
Remove dependency of OpenLDAP on TCP wrappers. See [4].
* Other developers:
None
* Release engineering:
Part of #7029 [
https://pagure.io/releng/issue/7029 ]
* List of deliverables:
N/A (not a System Wide Change)
* Policies and guidelines:
N/A
* Trademark approval:
N/A (not needed for this Change)
--
Jan Kuřík
Platform & Fedora Program Manager
Red Hat Czech s.r.o., Purkynova 99/71, 612 45 Brno, Czech Republic