[LIVY-981] licensing of ldapsdk

• Type: Task
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: Build
• Assignee: Unassigned
• Reporter: PJ Fanning
• Created: 31/Jul/23 17:57
• Updated: 05/Oct/23 19:17

Description

The 0.8.0-incubating binaries at https://dist.apache.org/repos/dist/dev/incubator/livy/0.8.0-incubating-rc1/ include a THIRD-PARTY file that lists ldapsdk as having an unknown license.

https://dist.apache.org/repos/dist/dev/incubator/livy/0.8.0-incubating-rc1/

We should find out what the license is.

https://issues.apache.org/jira/browse/LEGAL-160 seems to relate to this dependency.

This appears to be its GItHub page - https://github.com/pingidentity/ldapsdk

This appears to be the license for 4.x release.

https://github.com/pingidentity/ldapsdk/blob/4.0.0/LICENSE-UnboundID-LDAPSDK.txt

Since release 5.0, ldapsdk can be licensed as ASL. If you upgrade to v5.0, then we should explicitly state that we use ldapsdk under ASL license.

Issue Links

• is related to: LIVY-982 THIRD-PARTY file in binary release zip has licenses for jars that do not appear in the zip
• is related to: LIVY-985 Category X licenses in binary distribution