diff --git a/packaging/rhel/xrootd.spec.in b/packaging/rhel/xrootd.spec.in index 90dcfa103ad..8c66b6baff8 100644 --- a/packaging/rhel/xrootd.spec.in +++ b/packaging/rhel/xrootd.spec.in @@ -780,7 +780,6 @@ fi %{_libdir}/libXrdPosix.so.1* %{_libdir}/libXrdSecgsiAuthzVO.so* %{_libdir}/libXrdSecgsiGMAPDN.so* -%{_libdir}/libXrdSecgsiGMAPLDAP.so* %{_libdir}/libXrdSecgsi.so* %{_libdir}/libXrdSeckrb5.so* %{_libdir}/libXrdSecpwd.so* diff --git a/src/XrdCl/XrdClDefaultEnv.cc b/src/XrdCl/XrdClDefaultEnv.cc index 1c83ce5ece9..e02e5530e70 100644 --- a/src/XrdCl/XrdClDefaultEnv.cc +++ b/src/XrdCl/XrdClDefaultEnv.cc @@ -570,7 +570,6 @@ namespace XrdCl "libXrdSecgsi.so", "libXrdSecgsiAuthzVO.so", "libXrdSecgsiGMAPDN.so", - "libXrdSecgsiGMAPLDAP.so", "libXrdSecpwd.so", "libXrdSecsss.so", "libXrdSecunix.so", diff --git a/src/XrdSecgsi.cmake b/src/XrdSecgsi.cmake index aa7d24e1870..ce60880b2b5 100644 --- a/src/XrdSecgsi.cmake +++ b/src/XrdSecgsi.cmake @@ -5,7 +5,6 @@ include( XRootDCommon ) # Shared library version #------------------------------------------------------------------------------- set( LIB_XRD_SEC_GSI XrdSecgsi-${PLUGIN_VERSION} ) -set( LIB_XRD_SEC_GSI_GMAPLDAP XrdSecgsiGMAPLDAP-${PLUGIN_VERSION} ) set( LIB_XRD_SEC_GSI_GMAPDN XrdSecgsiGMAPDN-${PLUGIN_VERSION} ) set( LIB_XRD_SEC_GSI_AUTHZVO XrdSecgsiAUTHZVO-${PLUGIN_VERSION} ) @@ -30,20 +29,6 @@ set_target_properties( INTERFACE_LINK_LIBRARIES "" LINK_INTERFACE_LIBRARIES "" ) -#------------------------------------------------------------------------------- -# The XrdSecgsiGMAPLDAP module -#------------------------------------------------------------------------------- -add_library( - ${LIB_XRD_SEC_GSI_GMAPLDAP} - MODULE - XrdSecgsi/XrdSecgsiGMAPFunLDAP.cc ) - -set_target_properties( - ${LIB_XRD_SEC_GSI_GMAPLDAP} - PROPERTIES - INTERFACE_LINK_LIBRARIES "" - LINK_INTERFACE_LIBRARIES "" ) - #------------------------------------------------------------------------------- # The XrdSecgsiAuthzVO module #------------------------------------------------------------------------------- @@ -99,7 +84,6 @@ target_link_libraries( install( TARGETS ${LIB_XRD_SEC_GSI} - ${LIB_XRD_SEC_GSI_GMAPLDAP} ${LIB_XRD_SEC_GSI_AUTHZVO} ${LIB_XRD_SEC_GSI_GMAPDN} xrdgsiproxy diff --git a/src/XrdSecgsi/XrdSecgsiGMAPFunLDAP.cc b/src/XrdSecgsi/XrdSecgsiGMAPFunLDAP.cc index fbeba5bb691..a1d2cad2986 100644 --- a/src/XrdSecgsi/XrdSecgsiGMAPFunLDAP.cc +++ b/src/XrdSecgsi/XrdSecgsiGMAPFunLDAP.cc @@ -38,6 +38,15 @@ XrdVERSIONINFO(XrdSecgsiGMAPFun,secgsigmap); /* */ /* GMAP function implementation querying a LDAP database */ /* */ +/* Warning: this plug-in is not build any longer because the external */ +/* LDAP query via the popen() represents a potential security threat */ +/* and it is believed that functionality provided is not actually used. */ +/* If this believe happens to be uncorrect please report at */ +/* */ +/* https://github.com/xrootd */ +/* */ +/* a sanitized version of the plug-in can be provided using a proper library. */ +/* */ /* ************************************************************************** */ #include diff --git a/src/XrdVersionPlugin.hh b/src/XrdVersionPlugin.hh index f2702f4e5d7..7b766662fd2 100644 --- a/src/XrdVersionPlugin.hh +++ b/src/XrdVersionPlugin.hh @@ -169,7 +169,6 @@ "libXrdSecgsi.so", \ "libXrdSecgsiAUTHZVO.so", \ "libXrdSecgsiGMAPDLAP.so", \ - "libXrdSecgsiGMAPLDAP.so", \ "libXrdSeckrb5.so", \ "libXrdSecpwd.so", \ "libXrdSecsss.so", \