Re: BROKEN? - LDAP + SSL + Solaris 10 + Firefox

Maybe the PAM module causes a different NSS library to be pulled in, or 
the PAM module initializes NSS before Firefox does, which then causes 
Firefox to use the "wrong" certificate store.

-- 
Mark Smith
Pearl Crescent
http://pearlcrescent.com/


Anton Bobrov wrote:
> Nelson Bolyard wrote:
>>> 6661:3516:      open("/usr/local/ldapcsdk/lib/libprldap50.so", O_RDONLY) = 3
>> Is this related to perl?  Isn't prldap a plugin for perl?
> 
> no, it is not. libprldap is LDAP C SDK lib built on top of
> NSPR functionality.
> 
> related to comment found in the bug description re libldap
> using some default /etc/ldap.conf for any config stuff is
> completely bogus, it does not. that config file normally
> belongs to pam-ldap/nss-ldap and that is what most likely
> calling to libldap/prldap/ssldap in your case and the args
> it passes to LDAP C SDK API [ which are then passed to NSS
> API ] are likely based on its config file naturally. i do
> not have much experience with pam-ldap/nss-ldap but would
> guess that you either can solve the issue by tweaking its
> config file or fixing pam-ldap/nss-ldap appropriately if
> no config tweaks are available to do what you wanna do.