nss_ldap is a NSS module which provides an LDAP backend for C library
functions such as getpwnam(3), getgrnam(3), and gethostbyname(3). It
is compliant with RFC 2307, ``An Approach for Using LDAP as a Network
Information Service''.
Currently this is an experimental port, with support only for the
`passwd' and `group' databases.
===> The following configuration options are available for nss_ldap-1.265_15:
KERBEROS=on: Kerberos support
LCLASS=on: Enable login classes via the loginClass attribute
===> Use 'make config' to modify these settings
net/nss_ldap: fix the build on both 13.2 and 14.0+
The original configure script attempted to detect the presence of
Heimdal, but it failed with LLVM 15+ due to a type casting bug.
commit 515552b2d2664dc02c2385519a7fedb855f46632 fixed the bug with
LLVM 15+, but inadvertently broke the build for earlier versions.
This commit corrects the configure syntax, fixing the build on 12.4 and
13.2.
PR: 270465
Approved by: mikael (ports)
Sponsored by: Axcient
MFH: 2023Q4
net/nss_ldap: Fix LLVM15 build
./configure's test for Heimdal results in,
conftest.c:47:12: error: incompatible pointer to integer conversion initializing
'const char' with an expression of type 'const char *'; dereference with * [-Wi
nt-conversion]
const char hv = heimdal_version;
^ ~~~~~~~~~~~~~~~
*
This causes ./configure to erroneously assume 14-CURRENT uses MIT instead
of Heimdal, resulting in a subsequent build failure because MIT's
<profile.h> cannot be found.
MFH: 2023Q3
Mk/**ldap.mk: Convert USE_LDAP to USES=ldap
Convert the USE_LDAP=yes to USES=ldap and adds the following features:
- Adds the argument USES=ldap:server to add openldap2{4|5|6}-server as
RUN_DEPENDS
- Adds the argument USES=ldap<version> and replaces WANT_OPENLDAP_VER
- Adds OPENLDAP versions in bsd.default-versions.mk
- Adds USE_OPENLDAP/WANT_OPENLDAP_VER in Mk/bsd.sanity.mk
- Changes consumers to use the features
Reviewed by: delphij
Approved by: portmgr
Differential Revision: https://reviews.freebsd.org/D38233
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
net: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* <ports@c0decafe.net>
* Aaron Dalton <aaron@FreeBSD.org>
* Aaron Straup Cope <ascope@cpan.org>
* Aaron Zauner <az_mail@gmx.at>
* Adam Jette <jettea46@yahoo.com>
* Adam Weinberger <adamw@FreeBSD.org>
* Alan Eldridge <alane@geeksrus.net>
* Alex Bakhtin <Alex.Bakhtin@gmail.com>
* Alex Deiter <Alex.Deiter@Gmail.COM>
* Alex Dupre <ale@FreeBSD.org>
* Alex Dupre <sysadmin@alexdupre.com>
(Only the first 15 lines of the commit message are shown above )
Add patches for a couple of issues I found while researching #190055:
- Use GID_MAX instead of LONG_MAX, they are not the same on 64-bit.
- Correctly restore the egid after reading the krb5 credential cache.
MFH: 2014Q4
Repair instances, almost all courtesy of bf ;-), of spaces
and/or tabs before the =. This made doing regular expressions
on the ports tree really difficult.
Approved by: portmgr (not really, but touches unstaged ports)
net/openldap24-*:
- Convert to USES=libtool and bump dependent ports
- Avoid USE_AUTOTOOLS
- Don't use PTHREAD_LIBS
- Use MAKE_CMD
databases/glom:
- Drop :keepla
- Add INSTALL_TARGET=install-strip
databases/libgda4* databases/libgda5*:
- Convert to USES=libtool and bump dependent ports
- USES=tar:xz
- Use INSTALL_TARGET=install-strip
- Use @sample
(Only the first 15 lines of the commit message are shown above )
Functional changes:
- Add a SASL port option
- Fix the KERBEROS ports option - it was a no-op, setting a
configure flag which modifies how Kerberos was used without
setting the flag that actually enables it.
- Use GSSAPI instead of $ENV{KRB5CCNAME} to set the credential
cache. The latter pollutes the unsuspecting application's
environment and does not always work (for instance, it breaks when
nss_ldap is invoked from OpenSSH, although I haven't quite
determined why)
- Add patches to support Heimdal in addition to MIT Kerberos. Note
(Only the first 15 lines of the commit message are shown above )
- Update devel/automake to 1.14
- Update devel/gettext to 0.18.3
- Fix known-broken (from exp-runs) ports
- Clean up a lot of cruft in the devel/gettext port itself,
based on work from tijl@
PR: 178883
Submitted by: ade
Sponsored by: Wadsworth 6X
- fix build when perl built with USE_PERL set to off (no symlink in /usr/bin)
PR: 163687
Submitted by: Mel Flynn <mel at datakitty.lan.rachie.is-a-geek dot net>
Approved by: maintainer (timeout, 2 weeks)
- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS)
- Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead
PR: 157936
Submitted by: myself
Exp-runs by: pav
Approved by: pav
- Fix several default paths relative to PREFIX
- Move REINPLACE_CMDs to the post-patch target to avoid patching
the same files again when re-running the install target
- Provide a .conf file from the .conf.sample one
- Add a LOCAL mirror
PR: 154843
Approved by: Michael Graziano <mikeg@bsd-box.net> (maintainer),
ehaupt (mentor)
Feature safe: yes
- Use SUB_FILES instead of invoking sed manually to change pkg-message
- Replaces spaces with a tab after OPTIONS
- While here add LICENSE
PR: ports/148925
Submitted by: Sevan Janiyan <venture37 _at_ geeklan.co.uk>
Approved by: Michael Graziano <mikeg _at_ bsd-box.net> (maintainer)
- Update to 1.265
- Submitted is now MAINTAINER
Major upgrade-related fixes (from upstream):
- Version info now in binary
- Fix broken ethers LDAP query
- FD leak cleanup
Fixes in port:
- Re-enable many nss classes that were disabled (ethers, netgroups)
- Fix compile-time breakage in ldap-ethers code (Better fix going upstream when
I have time)
***
Note: Ethers and Netgroup support aren't thoroughly tested as I don't use these
in my environment.
Re-enabling them doesn't seem to cause any problems, so they're back on in
accordance with POLA.
PRs/test cases for these are welcome if anyone finds breakage.
PR: ports/141931
Submitted by: Michael Graziano <mikeg@bsd-box.net>
- OPTIONS += LCLASS
Allow the use of login classes in nss_ldap via a new LDAP attribute
(loginClass).
Administrators should be able to add this attribute to their schemata easily.
PR: ports/14107
Submitted by: Jacob Myers <jacob@whotookspaz.org>
- In some cases (like sudo), we should check euid not uid, thanks for
jnlin at csie.nctu.edu.tw
- Use MAN5PREFIX
- portlint warns:
1) IGNORE should be lowercase-lead
2) INSTALLS_SHLIB should be replaced by USE_LDCONFIG
3) PLIST_FILES should be used when only two files
- Bump PORTREVISION
PR: ports/104310
Submitted by: Gea-Suan Lin <gslin_AT_gslin dot org>
Approved by: maintainer (timeout)
- Update to 1.251
- Install man page
- Make krb5_ccname option in nss_ldap.conf work
nss_ldap has two different arguments that can be used at compile time to
make this work. The --enable-configurable-krb5-ccname-env configure
option was chossen because it works with both the Heimdal and MIT
Kerberos implementations and does not require a kerberos dependency. A
note has been made in UPDATING that this now works because
misconfiguration can lockout users.
PR: 100104
Submitted by: Joerg Pulz <Joerg.Pulz@frm2.tum.de>
Approved by: Maintainer
- Now it is possible to use ldap as source for hosts database.
Only gethosbyname, gethostbyname2, gethostbyaddr are implemented.
Behavior of getpwXXX functions is made traditional for BSD. When uid=0
they return user password, otherwise returned password is "x".
Also, in previous version of the port functions setpwent/endpwent and
setgrent/endgrent were mixed. Now they are not.
- Assign maintainership to submitter.
Submitted by: Artem Kazakov <kazakov@gmail.com>
Make nss_ldap pull its LDAP configuration from
${PREFIX}/etc/nss_ldap.conf rather than /etc/ldap.conf and the
LDAP secret from ${PREFIX}/etc/nss_ldap.secret rather than
/etc/ldap.secret.
Requested by: Many.
