NSS is a generally well-written library, and thought by some to be superior to OpenSSL. I have mixed feelings - there are some design decisions I'm not wild on - but I think it's unfair to describe it as "garbage" ;o)
It's definitely tedious this problem exists - I assume because RedHat have linked libldap with the NSS/OpenSSL compat shim? - but that's hardly the fault of NSS.
Phil, could you have a look at the new entry at the end of http://wiki.freeradius.org/modules/Rlm_ldap to check whether it's sufficiently... diplomatic? ;-) Stefan Paetow Moonshot Industry & Research Liaison Coordinator t: +44 (0)1235 822 125 gpg: 0x3FCE5142 xmpp: stefanp@jabber.dev.ja.net skype: stefan.paetow.janet Lumen House, Library Avenue, Harwell Oxford, Didcot, OX11 0SG jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800. Jisc Collections and Janet Ltd. is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under Company No. number 2881024, VAT No. GB 197 0632 86. The registered office is: Lumen House, Library Avenue, Harwell, Didcot, Oxfordshire, OX11 0SG. T 01235 822200.