|
From: <mi...@st...> - 2002-08-21 20:47:57
|
Hans Aschauer wrote:
> On Montag, 19. August 2002 20:20, Michael Str=F6der wrote:
>=20
>>Modules/
>>- Validating server's certificate when calling start_tls_s() or
>> ldap.initialize('ldaps://..')
>=20
> Seems to be interesting. However, I have no idea how much work it is,=20
> and honestly, I don't know the pitfalls which one has to overcome in=20
> order to get it right, but I will look into it.
Frankly at the moment I have no clue whether this is more an issue=20
of the OpenLDAP 2 lib itself or if we can do anything about it in=20
python-ldap's C module part. Additionally there will be built-in=20
support for CRL checking in OpenSSL 0.9.7 itself.
> Probably it would be a good=20
> idea to write wrappers for generic controls/extended operations only,=20
> and leave the details to python code.
Yepp!
>>Lib/
>>- Remove obsolete/unsupported modules
>>- Caching of search requests for each LDAPObject instance
>>- LDIF parser for replication logs
>>- DSML support
>>- Support for SASL mechanims GSS-API
>=20
> Huh, does SASL GSS-API not work?
Aah, sorry. I did not see and did not test this.
> I dont't have a working kerberos right=20
> now, but it used to work.
Ok, then I will remove it from TODO.
Ciao, Michael.
|