nss_ldap 1.265_3 net =27

RFC 2307 NSS module
Maintained by: mikeg@bsd-box.net
Port Added: 17 Apr 2003 15:26:23

---

---

nss_ldap is a NSS module which provides an LDAP backend for C library
functions such as getpwnam(3), getgrnam(3), and gethostbyname(3).  It
is compliant with RFC 2307, ``An Approach for Using LDAP as a Network
Information Service''.

Currently this is an experimental port, with support only for the
`passwd' and `group' databases.

WWW: http://www.padl.com/OSS/nss_ldap.html

CVSWeb : Sources : Main Web Site : Distfiles Availability : PortsMon

---

Required To Build: devel/gmake, devel/automake19, devel/autoconf262
Required Libraries: net/openldap24-client

---

To install the port: cd /usr/ports/net/nss_ldap/ && make install clean
To add the package: pkg_add -r nss_ldap

---

Configuration Options

===> The following configuration options are available for nss_ldap-1.265_3:
     LCLASS=on (default) "Enable login classes via the loginClass attribute"
===> Use 'make config' to modify these settings

---

Master Sites:

http://www.padl.com/download/

ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/

• 2006-07-29

  Affects: users of net/nss_ldap

  Author: tmclaugh@sdf.lonestar.org

  Reason: 
    The krb5_ccname option in ldap.conf has been fixed in the port so that it
    now works. Please be aware of this when updating if you have it in your
    config and are using GSSAPI when use_sasl is enabled. Using GSSAPI with a
    misconfigured krb5_ccname combined with one of the 'hard' bind_policy
    options can effectively lockout users.
  
  

- Update to 1.265
- Submitted is now MAINTAINER

Major upgrade-related fixes (from upstream):
- Version info now in binary
- Fix broken ethers LDAP query
- FD leak cleanup

Fixes in port:
- Re-enable many nss classes that were disabled (ethers, netgroups)
- Fix compile-time breakage in ldap-ethers code (Better fix going upstream when
I have time)

***

Note: Ethers and Netgroup support aren't thoroughly tested as I don't use these
in my environment.
Re-enabling them doesn't seem to cause any problems, so they're back on in
accordance with POLA.
PRs/test cases for these are welcome if anyone finds breakage.

PR:             ports/141931
Submitted by:   Michael Graziano <mikeg@bsd-box.net>

Really (!) add patch for "loginClass".

PR:             ports/140107
Submitted by:   Jacob Myers <jacob xx whotookspaz.org>

- OPTIONS += LCLASS

Allow the use of login classes in nss_ldap via a new LDAP attribute
(loginClass).
Administrators should be able to add this attribute to their schemata easily.

PR:             ports/14107
Submitted by:   Jacob Myers <jacob@whotookspaz.org>

Reset maintainer at his request due to lack of time.

Hat:            portmgr
Feature safe:   yes

- fix krb5_ccname broken in previous commit.

PR:             133344

Unbreak build with defined WITHOUT_KERBEROS.

PR:             ports/133344
Submitted by:   Alex Bakhtin <bakhtin xx amt.ru>
Approved by:    maintainer timeout (> 4 months)

Disable pthread_atfork detection. This fixes login issues on FreeBSD
7.2-RELEASE and possibly previous versions.

PR:             ports/133501
Submitted by:   Benjamin Lee <ben@b1c1l1.com>
Approved by:    maintainer timeout (4 weeks)

Bump PORTREVISION's after OpenLDAP update.

Suggested by:   rafan

- Update to 1.264 [1]
- use more autotools [2]
- fixes assertion problems related to openldap 2.4 [3]

PR:     ports/129445 [1], ports/127675 [2], ports/122750 [3]
Submitted by:   mm [1], "Eugene M. Kim" <gene@nttmcl.com> [2]
Approved by:    maintainer (timeout ports/127675, ports/129030, ports/127675)

- Distfile rerolled; no changes (verified)
- While here, style

PR:             ports/117886
Reported by:    O. Hartmann <ohartman@zedat.fu-berlin.de>
Approved by:    maintainer timeout (1 month)

- Update to 1.257

PR:             ports/116175
Submitted by:   mm
Approved by:    Artem Kazakov <kazakov at gmail.com> (maintainer)

- Update to 1.256

PR:             ports/114862
Approved by:    maintainer (timeout), garga (mentor, implicit)

Update to 1.255

Submitted by:   maintainer in ports@

- Update to 1.254

Submitted by:   "Artem Kazakov" <kazakov@gmail.com> (maintainer)

- In some cases (like sudo), we should check euid not uid, thanks for
  jnlin at csie.nctu.edu.tw
- Use MAN5PREFIX
- portlint warns:
  1) IGNORE should be lowercase-lead
  2) INSTALLS_SHLIB should be replaced by USE_LDCONFIG
  3) PLIST_FILES should be used when only two files
- Bump PORTREVISION

PR:             ports/104310
Submitted by:   Gea-Suan Lin <gslin_AT_gslin dot org>
Approved by:    maintainer (timeout)

- Update to 1.251
- Install man page
- Make krb5_ccname option in nss_ldap.conf work
    nss_ldap has two different arguments that can be used at compile time to
    make this work.  The --enable-configurable-krb5-ccname-env configure
    option was chossen because it works with both the Heimdal and MIT
    Kerberos implementations and does not require a kerberos dependency.  A
    note has been made in UPDATING that this now works because
    misconfiguration can lockout users.

PR:             100104
Submitted by:   Joerg Pulz <Joerg.Pulz@frm2.tum.de>
Approved by:    Maintainer

Update to 1.250

Submitted by:   maintainer via email

- Now it is possible to use ldap as source for hosts database.
  Only gethosbyname, gethostbyname2, gethostbyaddr are implemented.
  Behavior of getpwXXX functions is made traditional for BSD. When uid=0
  they return user password, otherwise returned password is "x".
  Also, in previous version of the port functions setpwent/endpwent and
  setgrent/endgrent were mixed. Now they are not.
- Assign maintainership to submitter.

Submitted by:   Artem Kazakov <kazakov@gmail.com>

- MASTER_SITE is unstable. Copy distfile on MASTER_SITE_LOCAL.

Requested by:   Dmitriy Kirhlarov (kyrh@RusNet)

- Update to 1.249 [1]
- Fix build when sasl installed.

PR:             ports/94049 [1]
Submitted by:   Dmitriy Kirhlarov <dkirhlarov@oilspace.com> [1]

Reset maintainer at his request; nectar is away from FreeBSD work right now.

Remove BROKEN; nss_ldap compiles and runs fine on recent -CURRENT.

- Update to 1.244

PR:             ports/90151
Submitted by:   Konstantin Saurbier <saurbier@math.uni-bielefeld.de>
Approved by:    maintainer timeout (nectar; 3 weeks)

BROKEN on 7.0: Does not compile

Upgraded to version 1.239

Submitted by:   Thomas Sandford
PR:             ports/82841
Approved by:    nectar (mentor,maintainer)

Add SIZE.

Submitted by:   trevor

USE_OPENLDAP

Submitted by:   Darrin Smith <beldin@beldin.org>

Enable RFC 2307bis, schema mapping, and paged results.

PR:             ports/61996
Submitted by:   Joseph Scott <joseph@randomnetworks.com>

Make nss_ldap pull its LDAP configuration from
${PREFIX}/etc/nss_ldap.conf rather than /etc/ldap.conf and the
LDAP secret from ${PREFIX}/etc/nss_ldap.secret rather than
/etc/ldap.secret.

Requested by:   Many.

Quick fix for INDEX build breakage by openldap2[012] split.
We should use net/openldap20/bsd.openldap.mk later...

Pointy hat to:  kuriyama

Add support for using nss_ldap in `compat' mode (i.e. as sources for
the `passwd_compat' and `group_compat' databases).

Mark `IGNORE' for earlier FreeBSD versions, rather than `BROKEN'.

Requested by:   kris

Correct distfile name.

Submitted by:   gordon

Previous commit was

Sponsored by:   DARPA, Network Associates Laboratories

Add nss_ldap, an RFC 2307-compliant NSS module.  Currently only the
getpwent(3) and getgrent(3) family of functions are supported.

Add nss_ldap, an RFC 2307-compliant NSS module.  Currently only the
getpwent(3) and getgrent(3) family of functions are supported.

5 vulnerabilities affecting 16 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities