guillomovitch@gmail.com wrote:

Full_Name: Guillaume Rousse Version: any OS: Linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (128.93.30.10)

In order to build out of tree extensions, such as ppolicy external password checker (http://ltb-project.org/wiki/documentation/openldap-ppolicy-check-password), you need additional slapd headers, portable.h and slapd.h (and a bunch of additional dependant ones), which are currently not installed, and thus considered as private.

A request to ship those headers was refused by fedora package maintainer, precisely for this reason: https://bugzilla.redhat.com/show_bug.cgi?id=812860

They gave the right answer. The slap.h header is private and subject to change without notice.

The situation ought to be clarified, and some kind of solution found, as maintaining a custom slapd build just to be able to benefit from this extensability is largely overkill.

Probably this should be discussed on the openldap-devel mailing list. There's no straightforward solution to this request.

In the case of the LTB password checker module, there's barely any need for slap.h; the module could easily be tweaked to avoid all references to it.