Number of commits found: 72

Wrap USERS and GROUPS within !CLIENT_ONLY, the user credential
is only required for server.

 - Allow building with MDB option;
 - Fixup for plist;
 - Remove sites that no longer carries distfiles;
 - Use USERS/GROUPS to eliminate duplicated code in pkg-install
 - Update to 2.4.31[1]

PR:             ports/167102
Submitted by:   Hirohisa Yamaguchi <umq ueo co jp>, myself [1]

Update to 2.4.30.

Don't list LDAP_RUN_DIR as required_dirs since we will create it.

PR:             ports/166492
Noticed by:     "O. Hartmann" <ohartman mail zedat fu-berlin de>
Feature safe:   yes

Create LDAPRUNDIR before starting.

Requested by:   Oliver Hartmann <ohartman zedat fu-berlin de>
PR:             ports/166492
Feature safe:   yes

Allow building with Berkeley DB 5.x based on popular demands.

Feature safe:   yes

- Chase unixODBC shlib bump

- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS)
- Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead

PR:             157936
Submitted by:   myself
Exp-runs by:    pav
Approved by:    pav

Pet portlint(1).

Add license.

Update to 2.4.26.

inet_ntoa is not thread-safe as it uses a static store, which may
result in a race condition, where for instance an IP based ACL
might result in a denial decision.

Fix this by changing these inet_ntoa's to inet_ntop with on-stack
store.

Reported by:    Damian Hazen <dhazen lbl.gov>

Make OpenLDAP libraries link against libfetch when requested and not only
binaries linking against liblutil.  This should fix build issue when FETCH
is enabled.

Prompted by:    kib

Disable FETCH support by default, as it adds a new requirement to fetch(3)
library which is unexpected by most applications.

Update to 2.4.25.

Update OpenLDAP to 2.4.24.

Unfortunately this version requires a shared library version bump again.

Sync to new bsd.autotools.mk

Previous patch was:

Submitted by:   Alexander Kriventsov <avk vl ru>

WITH_SMBPWD should apply only when building servers.

PR:             ports/148936

Update to 2.4.23.  This is a pure bugfix release that addresses several
reliability issues.

Feature safe:   yes

 - SASL is not default since 2007 so remove an unneeded test about WITHOUT_SASL
   which causes confusion that defining WITHOUT_SASL as building
   openldap24-sasl-client would get you openldap24-client.
 - Add an option to build without fetch(3) library, which in turn depends on
   base OpenSSL. [1]
 - Promote SASL and FETCH options to be on both client and library ports.
 - Both SASL and FETCH remains their defaults (no and yes) so no PORTREVISION
   bump.

PR:             ports/145337 [1]
Feature safe:   yes

Mark Berkeley DB 5.0 as invalid combination for now.  OpenLDAP does not
officially supports this (yet).

Note that BDB 5.0 do work with OpenLDAP with some trivial tweaks to the
configure scripts.

Update to 2.4.22

RC_SUBR_SUFFIX has not been needed for a long time now, all supported
versions of FreeBSD now use /etc/rc.subr and rc.d scripts without .sh
appended to the script name.

Update to 2.4.21.

Sponsored by:   iXsystems, Inc.

Update to 2.4.20.

Sponsored by:   iXsystems, Inc.

Update to 2.4.19.

Use same logic when creating the name for client package, as what we have
used in building 'em.

PR:             ports/135622
Submitted by:   Christian Ullrich <chris+freebsd chrullrich net>

Add a missing / or otherwise the generated script would point to wrong
directory.

PR:             ports/138618
Reported by:    Alexander Wittig <alexander wittig name>

 o Update to 2.4.18.
 o Add support to slapd_krb5_ktname, which exports an environment variable
   KRB5_KTNAME so that user can specify alternative Kerberos key table. [1]
 o Add support to run slapd with cn=config style configuration. [2]

Reported by:    Matthew Hambley <matthew at aether demon co uk> [1]
                Ulrich Spoerlein <uspoerlein at gmail com> [2]
Submitted by:   Nikolai Nespor <nikolai nespor at basis-wein at> [2]

-Repocopy devel/libtool15 -> libtool22 and libltdl15 -> libltdl22.
-Update libtool and libltdl to 2.2.6a.
-Remove devel/libtool15 and devel/libltdl15.
-Fix ports build with libtool22/libltdl22.
-Bump ports that depend on libltdl22 due to shared library version change.
-Explain what to do update in the UPDATING.

It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop
and applications in the runtime.

With help:      marcus and kwm
Pointyhat-exp:  a few times by pav
Tested by:      pgollucci, "Romain Tartière" <romain@blogreen.org>, and
                a few MarcusCom CVS users. Also, I might have missed a few.
Repocopy by:    marcus
Approved by:    portmgr

Update to OpenLDAP 2.4.17.  Unfortunately a shared library bump is needed.

UPDATING to follow.

Disable the detection of uuid/uuid.h, which brings an unwanted dependency
which is not always being installed.

Reported by:    Panagiotis Christias <p.christias noc.ntua.gr>

Update to 2.4.16

Vendor fix to correct incorrect fix of ITS#5849.

Update to 2.4.15

 - Expose DYNACL and ACI options as configuration menu.
 - Add knobs to build COLLECT, DEREF[1] overlaies.
 - Remove knob for DENYOP.
 - Add pmi schema.

Reported by:    Piotr Buliński <piotr bulinski pl> [1]

Update OpenLDAP to 2.4.14.

Update to 2.4.13.  Note that this requires a full rebuild of all
packages that depends on openldap24-client due to a shared library
version bump.

Fix support of multiple database backend definitions.

PR:             ports/127245
Submitted by:   Alexander Kriventsov <akriventsov xx masterhost.ru>
Approved by:    maintainer timeout

Unbreak install for "smbk5pwd".

Blame to:       me

Add option for smbk5pwd overlay.

PR:             ports/126367
Submitted by:   Alexander Kriventsov <akriventsov xx masterhost.ru>
Approved by:    maintainer timeout

Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.
Specifically, newer autoconf (> 2.13) has different semantic of the
configure target. In short, one should use --build=CONFIGURE_TARGET
instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning
and the old semantic may be removed in later autoconf releases.

To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.

To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.

Changes to Mk/*:
 - Add runtime detection magic in bsd.port.mk

(Only the first 15 lines of the commit message are shown above )

 - Overhaul the way we handle with LDAP data directory, populate
   the data directory upon start, not upon install. [1]
 - Update to OpenLDAP 2.4.11.
 - Modify bsd.port.mk to fit with the shared libary version bump [2]
   This has no impact to package building yet as 2.4.x is not the
   default version.

Submitted by:   Mikhail Goriachev <mikhailg webanoide org> [1]
Approved by:    portmgr (marcus) [2]

Detect OpenLDAP data directory from the configuration and use it for
further operation.

Submitted by:   Mikhail Goriachev <mikhailg webanoide org>

Allow building of 'sock' backend.

PR:             ports/124560
Submitted by:   Stef Walter <stef memberwebs com>

- Update to 2.4.10

Requested by:   delphij (maintainer)

Update to 2.4.9.

Sync overlays with configure script, while I'm there, also sync there
default settings to reflect the reality and sort overlay options.

Oops, forced commit to say that the previous commit is actually an
upgrade to 2.4.8.

Update to 2.4.9.  While there, remove the spurious icu dependency,
which is not used at the moment, and will appear if user has
installed icu on their system.

Avoid confusion when SASL is enabled for server.

Update to 2.4.7.

Oops, previous patch was committed from a wrong tree.  Here is
the correct fix.

Correct slapd_owner case matching.

PR:             ports/117229
Reported by:    Tetsuya Uemura <t_uemura at macome.co.jp>

Update to 2.4.6.

This is the first production release of the OpenLDAP 2.4 series,
and it fixes several security issues, as mentioned in vuln.xml
item db449245-870d-11dc-a3ec-001921ab2fa4.

Note that this is generally a no-op for most users because this
version is not (yet) set as default OpenLDAP implementation.

Security:       db449245-870d-11dc-a3ec-001921ab2fa4
Approved by:    portmgr (linimon)

Update to 2.4.5 beta.

Mark as incompatible with Berkeley DB 4.6.  Next OpenLDAP
alpha release will hopefully support it, though.

 - Adjust DATABASEDIR's permission to 700 upon slapd start.

- Remove the DESTDIR modifications from individual ports as we have a new,
  fully chrooted DESTDIR, which does not need such any more.

Sponsored by:   Google Summer of Code 2007
Approved by:    portmgr (pav)

Do not build SASL by default for client package, thus avoids
a very annoying conflict when installing the client from package.

Use more concise expressions for splitting the user:group string.

Submitted by:   Ulrich Spoerlein <uspoerlein@gmail.com>
PR:             ports/111617

Use USE_LDCONFIG correctly upon successful server installation
in order to make backend shared objects to be recognized
correctly.

Requested by:   edwin
PR:             ports/110424

Update to OpenLDAP 2.4.4a.

Approved by:    portmgr (kris, bsd.port.mk part)

- Use newly added RC_SUBR_SUFFIX

Approved by:    delphij (maintainer)

 o Respect PTHREAD_LIBS=ANY (like -lthr). [1]
 o Use Berkeley DB 4.4, as suggested by OpenLDAP developers.

Submitted by:   nork [1]

Update to 2.4.3alpha.

Submitted by:   Joerg Pulz
PR:             ports/102399

Switch to root's credential during pre-install stage.  This fixes
installation initialized by a unprivileged user.

Reported by:    Michal Bartkowiak <michal bartkowiak biz>

PlanetMirror appears to add a page which fetch(1) do not like, so remove it
for now.

Merged from openldap23-server:

New option: SLURPD which makes the user to be able to choose whether to
build and install slurpd.  The option is unconditionally disabled when
threading is disabled (i.e. shell backend is enabled).

Update to 2.4.2alpha after repocopy.

Please note that this is not connected to build at this time, as
the port infrastructure lacks some necessary support for this
OpenLDAP release which will be tested on pointyhat soon.

If you really want to try this out please apply the patch found
in ports/97515 or
  http://www.delphij.net/patch-bsd.port.mk
in order to get infrastructure support for it.

This work is heavily based on ports/96165 submitted by
Joerg Pulz <Joerg Pulz frm2 tum de>.

Approved by:    sem (mentor, implicit)

Remove USE_REINPLACE from all categories starting with N

Number of commits found: 72

12 vulnerabilities affecting 17 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities