CDDL / ForgeRock License incompatibility


In dotnet/legal/ForgeRock_License.txt [1] it says:

"1.2. Restrictions. Except as expressly set forth in this ForgeRock Software
License Agreement (the "Agreement"), Company shall not, directly or indirectly:
(a) sublicense, resell, rent, lease, distribute or otherwise transfer rights or
usage in the ForgeRock Software, including without limitation to Company
subsidiaries and affiliates; (b) remove or alter any copyright, trademark or
proprietary notices in the ForgeRock Software; or (c) use the ForgeRock
Software in any way that would subject the ForgeRock Software, in whole in or
in part, to a Copyleft License. As used herein, "Copyleft License" means a
software license that requires that information necessary for reproducing and
modifying such software must be made available publicly to recipients of
executable versions of such software (see, e.g., GNU General Public License and"

Yet the ConnID Framework claims to be distributed under the CDDL, which is considered a weak copyleft license[2]. IANAL but it seems to me that any files this license applies to could not be distributed under the CDDL, unless they had also been licensed under the CDDL by the copyright holder, in which case the inclusion of this license is confusing and off putting for anyone looking for a Free solution. (There are a number of files which are "Portions Copyrighted [year] ForgeRock AS", and which have CDDL headers.)

Please could any files which are licensed under the ForgeRock license but not the CDDL be removed from the project, and the ForgeRock_License.txt file removed, if that is legally appropriate?

A reference to [1] is made in [3], which will need to be updated appropriately.


Christopher Hoskin





Francesco Chicchiriccò
December 6, 2016, 7:25 AM

The Forgerock license file was confirmed to be used only for inclusion into .Net release artifacts.
The ConnId project does not release any .Net artifact, hence the license file was removed and the build script adjusted accordingly.
Moreover, all the source files were checked to carry the appropriate CDDL header, as originally set by Sun Microsystems for the Identity Connector Framework.

Francesco Chicchiriccò
July 7, 2017, 9:28 AM

Bulk close for


Francesco Chicchiriccò


Christopher Hoskin




Fix versions

Affects versions