--On Monday, February 22, 2016 1:13 PM +0100 Bruncko Michal Michal.Bruncko@zssos.sk wrote:
many thanks for this. this is a bit odd that even in latest centos7 (what we wanted to use for upgrade) there is old version. so the only option would be to build from scratch.
No, it is not odd. As has been mentioned hundreds if not thousands of times on this list, in general, distribution packages of OpenLDAP should *not* be used for running production instances of OpenLDAP. The packages provided by RHEL/CentOS have additional issues such as being linked to MozNSS which has a number of problems.
Please see: http://www.openldap.org/faq/data/cache/1456.html
I would note that if building and maintaining OpenLDAP yourself is not something you wish to do, the LTB project (http://ltb-project.org/wiki/download#openldap) and Symas (https://symas.com/products/openldap-directory/) both offer prebuilt packages of OpenLDAP. Both of these sanely link to OpenSSL.
Regards, Quanah
--
Quanah Gibson-Mount Platform Architect Zimbra, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc