nss-pam-ldapd, a Name Service Switch (NSS) module and
Pluggable Authentication Module (PAM) that allows your
LDAP server to provide user account, group, host name,
alias, netgroup, and basically any other information that
you would normally get from /etc flat files or NIS. It also
allows you to do authentication to an LDAP server.
Key differences from nss_ldap:
* lighter NSS library
* lighter PAM library
* simpler internal semantics
* clear separation between NSS, PAM and LDAP code (the server
part could easily be implemented in another language)
* less connections to the LDAP server
===> The following configuration options are available for nss-pam-ldapd-0.9.13_1:
KERBEROS=on: Kerberos support
LCLASS=off: Build with loginClass support
====> Options available for the multi MG1: you have to choose at least one of them
PAM=on: Build pam_ldap
NSS=on: Build nss support
===> Use 'make config' to modify these settings
Mk/**ldap.mk: Convert USE_LDAP to USES=ldap
Convert the USE_LDAP=yes to USES=ldap and adds the following features:
- Adds the argument USES=ldap:server to add openldap2{4|5|6}-server as
RUN_DEPENDS
- Adds the argument USES=ldap<version> and replaces WANT_OPENLDAP_VER
- Adds OPENLDAP versions in bsd.default-versions.mk
- Adds USE_OPENLDAP/WANT_OPENLDAP_VER in Mk/bsd.sanity.mk
- Changes consumers to use the features
Reviewed by: delphij
Approved by: portmgr
Differential Revision: https://reviews.freebsd.org/D38233
net/nss-pam-ldapd: use closefrom in nslcd
nslcd tries to close all file descriptors on startup. It does that by
calling close() in a loop, running down from _SC_OPEN_MAX to 0. Since
_SC_OPEN_MAX autoscales with available RAM, this can take more than a
minute on large servers. The solution is to use closefrom. Upstream
has already made that change in the master branch, but due to its slow
release cadence we're applying it here as well.
PR: 266970
Approved by: zi (maintainer)
Sponsored by: Axcient
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
net: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* <ports@c0decafe.net>
* Aaron Dalton <aaron@FreeBSD.org>
* Aaron Straup Cope <ascope@cpan.org>
* Aaron Zauner <az_mail@gmx.at>
* Adam Jette <jettea46@yahoo.com>
* Adam Weinberger <adamw@FreeBSD.org>
* Alan Eldridge <alane@geeksrus.net>
* Alex Bakhtin <Alex.Bakhtin@gmail.com>
* Alex Deiter <Alex.Deiter@Gmail.COM>
* Alex Dupre <ale@FreeBSD.org>
* Alex Dupre <sysadmin@alexdupre.com>
(Only the first 15 lines of the commit message are shown above )
*/*: Remove redundant '-[0-9]*' from CONFLICTS
The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").
Many CONFLICTS definitions used patterns like "bash-[0-9]*" to filter
for the bash package in any version. But that pattern is functionally
identical with just "bash".
Approved by: portmgr (blanket)
Remove compatibility code for FreeBSD < 11.2 from all ports.
Simplify some ports where DragonFlyBSD no longer needs to be special-cased.
Submitted by: rene
Reviewed by: bapt, jbeich
Differential Revision: https://reviews.freebsd.org/D17724
For some ports under `net*' categories: remove redundant PKGMESSAGE
assignment, which is set appropriately by the b.p.m when `pkg-message'
appears on the SUB_FILES list.
net/openldap24-*:
- Convert to USES=libtool and bump dependent ports
- Avoid USE_AUTOTOOLS
- Don't use PTHREAD_LIBS
- Use MAKE_CMD
databases/glom:
- Drop :keepla
- Add INSTALL_TARGET=install-strip
databases/libgda4* databases/libgda5*:
- Convert to USES=libtool and bump dependent ports
- USES=tar:xz
- Use INSTALL_TARGET=install-strip
- Use @sample
(Only the first 15 lines of the commit message are shown above )
- update to 0.8.12
- while here adopt optionsNG and trim historical header
PR: 174384
Submitted by: john.marshall@riverwillow.com.au
Approved by: portmgr (tabthorpe)
- Update to 0.8.9
- Make it a master port to support net/nss-pam-ldap-sasl
PR: ports/168338
Submitted by: Mel FLynn <rflynn@acsalaska.net> (maintainer)
In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS)
- Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead
PR: 157936
Submitted by: myself
Exp-runs by: pav
Approved by: pav
- Run nslcd before syslogd as we use external group present in syslog.conf,
and it should be resolvable when syslogd starts. Remove DAEMON from
dependency list to fix circular dependency problem.
- Ensure nslcd is usable right after it was started.
Submitted by: maintainer
