Details
-
Question
-
Status: Resolved
-
Major
-
Resolution: Resolved
-
None
-
None
Description
I'm currently contributing code to the Guacamole project, which is in the Incubator phase with ASF. One of the items I'm contributing is an extension to the Guacamole Client that supports RADIUS authentication. The extension that I've written includes a binary dependency on the JRadius library, which is licensed under LGPL-2.1, a license not compatible with the Apache 2.0 license and listed in the Category-X section on the ASF legal page.
We have been through several rounds of discussions in the project and on the Incubator General list about the acceptability of including this extension in the project. At this point we have determined that it is definitely not acceptable to distribute a binary form of this extension that would include the binary (JAR) of the JRadius library. However, if possible, we'd like to include the source code for this extension in the main repository, with instructions to users on building the extension. Based on the information provided on the ASF legal page, we believe this is acceptable, but would like to have verification on that.
All of the source code in the extension is Apache 2.0 licensed. There is no source code included from the JRadius library, only calls to classes and methods provided by the library.
Finally, the source code in question is for an optional extension to the Guacamole Client project, and is not core to its functionality. It allows a user to perform RADIUS authentication with the Guacamole Client, if they so choose, and other authentication modules are also available.
Given the above information, can we get some guidance on whether or not including the source code for the extension (not the JRadius library) in this ASF Incubator project is acceptable?
Attachments
Issue Links
- is related to
-
GUACAMOLE-197 Implement Support for RADIUS Authentication
- Resolved