Warning

Home -> Toolkit -> Docs -> 4.0 -> Info -> Prewsmds	Website Email Lists Search:

The Pre-WS MDS2 component, MDS2, has been deprecated and is included for legacy purposes only. Please use the existing documentation for MDS2 here.

	Warning
Please note that in the GT4 pre-WS build, MDS2 is not installed by default. This is because of security concerns with two third-party libraries, Open LDAP v.2.0.22 and Cyrus SASL (v. 1.5.27). That version of OpenLDAP has security vulnerabilities that are no longer being patched due to the age of the version (the current version is 2.2.25). This means that anyone who runs MDS2 on their server has a chance of being affected by this, although we have no reported cases of this occurring. A similar situation exists for the version of Cyrus SASL we are using although this can be avoided by not using MDS2 in secure-mode. An unsupported, minimally-tested version of MDS2 based on more recent, more secure versions of OpenLDAP and Cyrus SASL is available for download here; however, we strongly recommend that any MDS2 users upgrade their system to use the new WSRF-based MDS4, and we will be happy to work with you to make this possible for your project. Please note that in GT4, MDS2 is a deprecated component, which means that it will not be included in the GT4.2 release, nor supported once GT4.4 exists.

Warning

Please note that in the GT4 pre-WS build, MDS2 is not installed by default. This is because of security concerns with two third-party libraries, Open LDAP v.2.0.22 and Cyrus SASL (v. 1.5.27). That version of OpenLDAP has security vulnerabilities that are no longer being patched due to the age of the version (the current version is 2.2.25). This means that anyone who runs MDS2 on their server has a chance of being affected by this, although we have no reported cases of this occurring. A similar situation exists for the version of Cyrus SASL we are using although this can be avoided by not using MDS2 in secure-mode.

An unsupported, minimally-tested version of MDS2 based on more recent, more secure versions of OpenLDAP and Cyrus SASL is available for download here; however, we strongly recommend that any MDS2 users upgrade their system to use the new WSRF-based MDS4, and we will be happy to work with you to make this possible for your project. Please note that in GT4, MDS2 is a deprecated component, which means that it will not be included in the GT4.2 release, nor supported once GT4.4 exists.