python-ldap hanging for 15 minutes under certain conditions

[Michael Wood]

On 4 February 2011 08:32, James Andrewartha <jamesa at daa.com.au> wrote:
> On 04/02/11 03:31, Michael Ströder wrote:
>> Michael Wood wrote:
>>> On 3 February 2011 18:16, Rich Megginson <rich.megginson at gmail.com> wrote:
>>>> On 02/03/2011 04:34 AM, Michael Wood wrote:
>>>>> e.g. Ubuntu Lucid Lynx with libldap2-dev version 2.4.21-0ubuntu5.3 and
>>>>> python-ldap 2.3.10-1ubuntu1.
>>> [..]
>>> But I thought it was worth a try to recompile OpenLDAP and link with
>>> OpenSSL instead of GnuTLS.
>>>
>>> After doing that, the problem went away!
>>
>> That was my first idea when I read that you're using Ubuntu (based on Debian).
>> There have been so many issues with OpenLDAP linked with GnuTLS during the
>> last years. I really wonder why the Debian folks force everybody to use this.
>> IMO that's a major issue with Debian.
>
> Debian uses GnuTLS because OpenSSL has the non-GPL compatible
> advertising clause, and libldap is linked into many GPL applications. So

Ah, good point.

> the solutions are fix the OpenSSL licensing or make GnuTLS not suck; I

Or switch to something else.

> have no hope of either occurring.

I understand your lack of hope wrt. the licensing situation and I
suppose switching to another SSL/TLS library is unlikely at this
point.  I do hold out some hope that issues like this in GnuTLS (or in
the software using GnuTLS?) can get fixed, though.

-- 
Michael Wood <esiotrot at gmail.com>