[ILUG] ldap alernative

[Rick Moen]

Quoting David Golden (david.golden at unison.ie):

> Personally, for me the major annoyance is not quite to do with
> ldap itself: none of the major distros ship OpenLDAP 2.2 with syncrepl 
> yet, apparently because of Stupid Licensing Issues (OpenSSL license 
> might actually be GPL incompatible - reason OpenLDAP is in Debian is 
> because someone ported OpenLDAP 2 to  GNUTLS instead of OpenSSL)....

Not "might be":  _Is_.

Eric A. Young of Australia was the author of the older portion of the
OpenSSL codebase, back when the package was called "ssleay"
(incorporating his initials).  Since he was a BSDish sort of chap, and
since this was back in old BSD days, he used the old-style 4-clause 
BSD licence, which had this as clause #3 out of 4:

3. All advertising materials mentioning features or use of this software
   must display the following acknowledgement:
   This product includes software developed by the University of
   California, Berkeley and its contributors."

On July 22, 1999, University of California at Berkeley's Director of the 
Office of Technology Licensing issued a proclamation expunging clause #3
from all UC Berkeley-licensed BSD code -- and in effect creating the
"new BSD licence" that is now in very common use.  Unfortunately, the
expunging didn't apply to Young's work, over which of course he (not UC
Berkeley) owned copyright.

All of the newer code in OpenSSL is under the new BSD licence, but
Young's code is not.  Thus, at $PRIOR_FIRM, when my colleague Marc
Merlin created an Exim4 variant that used OpenSSL to do TLS, I had to
remind him, to his considerable annoyance, that he'd just created a work
that was not lawfully redistributable on account of licence conflict.
Fortunately, Philip Hazel was willing to grant a licence exception,
permitting the linkage.