OpenLDAP is a suite of Lightweight Directory Access Protocol (v3) servers,
clients, utilities and development tools.
This package includes the following major components:
* slapd - a stand-alone LDAP directory server
* LDIF tools - data conversion tools for use with slapd
This is the latest stable release of OpenLDAP Software for general use.
===> The following configuration options are available for openldap24-server-2.4.59_11:
ACI=off: Per-object ACI (experimental)
DEBUG=on: Build with debugging support
DYNACL=off: Run-time loadable ACL (experimental)
DYNAMIC_BACKENDS=off: Build dynamic backends (DEPRECATED)
DYNAMIC_MODULES=on: Build dynamic backend and overlay modules
FETCH=off: Enable fetch(3) support
GSSAPI=off: With GSSAPI support
KQUEUE=off: With kqueue support (experimental)
LMPASSWD=off: With LM hash password support (DEPRECATED)
OUTLOOK=off: Force caseIgnoreOrderingMatch on name attribute (experimental)
PBKDF2=off: With PBKDF2 hash password support
RLOOKUPS=off: With reverse lookups of client hostnames
SLAPI=off: With Netscape SLAPI plugin API (experimental)
SLP=off: With SLPv2 (RFC 2608) support
TCP_WRAPPERS=off: With tcp wrapper support
====> OpenLDAP backends
DNSSRV=on: With Dnssrv backend
MDB=on: With Memory-Mapped DB backend
PASSWD=on: With Passwd backend
RELAY=on: With Relay backend
ODBC=on: With SQL backend
SOCK=on: With Sock backend
BDB=off: With BerkeleyDB backend (DEPRECATED)
PERL=off: With Perl backend
SHELL=off: With Shell backend (disables threading)
====> OpenLDAP overlays
ACCESSLOG=on: With In-Directory Access Logging overlay
ADDPARTIAL=on: With addpartial overlay (experimental)
ALLOP=on: With allop overlay (experimental)
AUDITLOG=on: With Audit Logging overlay
AUTOGROUP=on: With autogroup overlay (experimental)
CLOAK=on: With cloak overlay (experimental)
COLLECT=on: With Collect overy Services overlay
CONSTRAINT=on: With Attribute Constraint overlay
DDS=on: With Dynamic Directory Services overlay
DENYOP=on: With denyop overlay (experimental)
DEREF=on: With Dereference overlay
DYNGROUP=on: With Dynamic Group overlay
DYNLIST=on: With Dynamic List overlay
LASTBIND=on: With lastbind overlay
LASTMOD=on: With lastmod overlay (experimental)
MEMBEROF=on: With Reverse Group Membership overlay
NOPS=on: With nops overlay
PCACHE=on: With Proxy Cache overlay
PPOLICY=on: With Password Policy overlay
REFINT=on: With Referential Integrity overlay
RETCODE=on: With Return Code testing overlay
RWM=on: With Rewrite/Remap overlay
SEQMOD=on: With Sequential Modify overlay
SHA2=on: With SHA2 Password hashes overlay
SMBPWD=on: With Samba Password hashes overlay
SSSVLV=on: With ServerSideSort/VLV overlay
SYNCPROV=on: With Syncrepl Provider overlay
TRACE=on: With Trace overlay
TRANSLUCENT=on: With Translucent Proxy overlay
UNIQUE=on: With attribute Uniqueness overlay
VALSORT=on: With Value Sorting overlay
===> Use 'make config' to modify these settings
The OpenLDAP server package has been successfully installed.
In order to run the LDAP server, you need to edit
/usr/local/etc/openldap/slapd.conf
to suit your needs and add the following lines to /etc/rc.conf:
slapd_enable="YES"
slapd_flags='-h "ldapi://%2fvar%2frun%2fopenldap%2fldapi/ ldap://0.0.0.0/"'
slapd_sockets="/var/run/openldap/ldapi"
Then start the server with
/usr/local/etc/rc.d/slapd start
or reboot.
Try `man slapd' and the online manual at
http://www.OpenLDAP.org/doc/
for more information.
slapd runs under a non-privileged user id (by default `ldap'),
see /usr/local/etc/rc.d/slapd for more information.
PLEASE NOTE:
As of openldap24-server 2.4.58_2, the server is now modularized and
all overlays are built as dynamic modules instead of being statically linked.
Previously, statically linked modules do not need an explicit
moduleload (in slapd.conf(5)) or olcModuleLoad (when using slapd-config(5))
and you might need to make configuration change accordingly as part of the
upgrade.
Add a patch to improve Outlook interoperability at expense of possible
RFC violation. This patch is optional and not enabled by default.
For detailed discussion please follow:
http://www.openldap.org/lists/openldap-technical/201211/msg00175.html
Requested by: Tim Gustafson <tjg ucsc edu>
Apply two upstream patches to address two remote DoS issues:
- ITS8027: crash when a search includes the Deref control with an
empty attribute list.
- ITS8046: double free and crash by certain search queries using
the Matched Values control.
MFH: 2015Q1
- Fix Perl dependency by converting the port from using
bsd.port.{pre,post}.mk to options.mk. [1]
- Fix build with LibreSSL. [2] [3]
- Make LM Password optional and disable by default. [3]
Reported by: Lorenzo Perone <lorenzo.perone@bytesatwork.com> [1],
brd [1]
Submitted by: spil.oss@gmail.com [2]
PR: 194841 [3]
Replace USE_AUTOTOOLS=libltdl with an ordinary LIB_DEPENDS in all ports.
There are only 60 such ports so there doesn't need to be a separate
keyword or USES for this.
Approved by: portmgr (bapt)
cleanup openldap24-server / client
- pre-su-instal no longer required with staging (replaced with pre-install)
- pkg-install was removed in r295334, so remove the part in Makefile
- handle schema.sample files during install and use the @sample keyword
- use %%ETCDIR%% in pkg-plist
- bump PORTREVISION
PR: 193439
Submitted by: ohauer
Approved by: delphij
Berkeley DB cleanup, remove versions 4.0 ... 4.7.
- Mk/bsd.database.mk rewrite, new default to db5.
- db6 is eligible by default only if installed on the system.
- Bump PORTREVISION of all ports that directly depend on BerkeleyDB or
where USE_BDB is found in the port's directory
- Patch a few ports such that they will pick up or work with newer
versions.
- Add UPDATING entry
- Drive-by format fix for pks
- Drop BerkeleyDB option from mail/popular for now, requires more work.
- Exp-run logs linked from the PR below.
- Ports that do not build (IGNORE, BROKEN, etc.) have pro-forma changes
for new Berkeley DB, but are untested.
NOTE: please read UPDATING and the Wiki page before proceeding!
Announcement: http://lists.freebsd.org/pipermail/freebsd-ports-announce/2014-August/000090.html
Wiki reference: https://wiki.freebsd.org/Ports/BerkeleyDBCleanup
PR: 192690
Approved by: portmgr (implicit, PORTREVISION bump on unstaged ports)
net/openldap24-*:
- Convert to USES=libtool and bump dependent ports
- Avoid USE_AUTOTOOLS
- Don't use PTHREAD_LIBS
- Use MAKE_CMD
databases/glom:
- Drop :keepla
- Add INSTALL_TARGET=install-strip
databases/libgda4* databases/libgda5*:
- Convert to USES=libtool and bump dependent ports
- USES=tar:xz
- Use INSTALL_TARGET=install-strip
- Use @sample
(Only the first 15 lines of the commit message are shown above )
Support LIBS like LDFLAGS.
- Add LIBS="${LIBS}" to MAKE_ENV and CONFIGURE_ENV.
- Add an option helper for LIBS.
- Adjust all ports that already use LIBS. Also remove references to
PTHREAD_CFLAGS and PTHREAD_LIBS while here.
- Some ports did not support having a LIBS environment variable and
required additional patches.
Somewhat simplified a linker command line looks like:
${CC} ${src_LDFLAGS} ${LDFLAGS} ${src_LIBS} ${LIBS}
where src_LDFLAGS and src_LIBS are controlled by upstream and LDFLAGS and
LIBS can be controlled by us. If possible -L and -l flags need to be
(Only the first 15 lines of the commit message are shown above )
Fix unixODBC vs libiodbc conflicts
Always rely on unixODBC each time a port is looking for libodbc.so
Remove odbc compat from libiodbc
This allows to install both kde and gnome at the same time
While here:
- Convert libiodbc to USES=libtool
- Convert a bunch of libiodbc dependencies to USES=libtool
- Chase libiodbc.so shlib change
- Stagify some ports
- Convert some ports to USES=pgsql
Discussed with: rakuco (kde)
With hat: portmgr
Convert all :U to :tu and :L to :tl
Since FreeBSD 8.4 and FreeBSD 9.1 make(1) do support :tu and :tl as a
replacement for :U and :L (which has been marked as deprecated)
bmake which is the default on FreeBSD 10+ only support by default
:tu/:tl a hack has been added at the time to support :U and :L to ease
migration. This hack is now not necessary anymore
Note that this makes the ports tree incompatible with make(1) from
FreeBSD 8.3 or earlier
With hat: portmgr
Spring cleanup of OpenLDAP 2.4 port:
- Fix various issues introduced with staging support.
- Build MDB backend by default, this will become new preferred backend
and BerkeleyDB backend is now deprecated.
Variable that start with _ are considered private to the defining
makefile and may not be used by ports makefiles.
In addition, avoid problems should the defaults ever change.
Approved by: portmgr (tabthorpe)
Avoid setting PKGNAMESUFFIX late, which in turn changes UNIQUENAME and
causes OPTIONS menu to be shown up multiple times.
As a side effect we have to make openldap24-client and
openldap24-sasl-client which we do not have a better solution at this
time.
Submitted by: bapt (mostly)
- Allow building with MDB option;
- Fixup for plist;
- Remove sites that no longer carries distfiles;
- Use USERS/GROUPS to eliminate duplicated code in pkg-install
- Update to 2.4.31[1]
PR: ports/167102
Submitted by: Hirohisa Yamaguchi <umq ueo co jp>, myself [1]
Don't list LDAP_RUN_DIR as required_dirs since we will create it.
PR: ports/166492
Noticed by: "O. Hartmann" <ohartman mail zedat fu-berlin de>
Feature safe: yes
Remove a duplicate @dirrmtry, as spotted by pkg2ng.
Note that this does not actually affect packaging (by
accident) so no PORTREVISION bump is done.
Noticed by: Anton Shterenlikht <mexas@bristol.ac.uk>
Feature safe: yes
In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS)
- Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead
PR: 157936
Submitted by: myself
Exp-runs by: pav
Approved by: pav
Remove painful examples of foo="", with particular prejudice against
constructions that parse out to [ -z "$foo" ] && foo=""
These are bad examples that get copied and pasted into new code, so the
hope is that with less bad examples there will be less need for me to
bring this up in review.
In a few of these files all that were changed were comments so that next
time I search for these patterns I won't trip on the file for no reason.
In a few places, add $FreeBSD$
No functional changes, so no PORTREVISION bumps
inet_ntoa is not thread-safe as it uses a static store, which may
result in a race condition, where for instance an IP based ACL
might result in a denial decision.
Fix this by changing these inet_ntoa's to inet_ntop with on-stack
store.
Reported by: Damian Hazen <dhazen lbl.gov>
Make OpenLDAP libraries link against libfetch when requested and not only
binaries linking against liblutil. This should fix build issue when FETCH
is enabled.
Prompted by: kib
Add a patch from OpenLDAP ITS 6832 to fix build when the user uses a custom
GCC version.
PORTREVISION intentionally not bumped because this does not affect compiled
binary.
PR: ports/155743
Submitted by: mm
- SASL is not default since 2007 so remove an unneeded test about WITHOUT_SASL
which causes confusion that defining WITHOUT_SASL as building
openldap24-sasl-client would get you openldap24-client.
- Add an option to build without fetch(3) library, which in turn depends on
base OpenSSL. [1]
- Promote SASL and FETCH options to be on both client and library ports.
- Both SASL and FETCH remains their defaults (no and yes) so no PORTREVISION
bump.
PR: ports/145337 [1]
Feature safe: yes
Mark Berkeley DB 5.0 as invalid combination for now. OpenLDAP does not
officially supports this (yet).
Note that BDB 5.0 do work with OpenLDAP with some trivial tweaks to the
configure scripts.
RC_SUBR_SUFFIX has not been needed for a long time now, all supported
versions of FreeBSD now use /etc/rc.subr and rc.d scripts without .sh
appended to the script name.
Use same logic when creating the name for client package, as what we have
used in building 'em.
PR: ports/135622
Submitted by: Christian Ullrich <chris+freebsd chrullrich net>
Add a missing / or otherwise the generated script would point to wrong
directory.
PR: ports/138618
Reported by: Alexander Wittig <alexander wittig name>
Number of commits found: 248 (showing only 100 on this page)
