OpenLDAP is a suite of Lightweight Directory Access Protocol (v3) servers,
clients, utilities and development tools.
This package includes the following major components:
* slapd - a stand-alone LDAP directory server
* LDIF tools - data conversion tools for use with slapd
This is the latest stable release of OpenLDAP Software for general use.
===> The following configuration options are available for openldap26-server-2.6.15:
ACI=off: Per-object ACI (experimental)
ARGON2=on: Argon2 password hashing module
DEBUG=on: Build with debugging support
DYNACL=off: Run-time loadable ACL (experimental)
FETCH=off: Enable fetch(3) support
GSSAPI=off: With GSSAPI support
LLOADD=on: Enable load balancer
NETWORKING=off: Require full network configuration (NETWORKING) before slapd starts
OUTLOOK=off: Force caseIgnoreOrderingMatch on name attribute (experimental)
PBKDF2=off: With PBKDF2 hash password support
RLOOKUPS=off: With reverse lookups of client hostnames
SLAPI=off: With Netscape SLAPI plugin API (experimental)
SLP=off: With SLPv2 (RFC 2608) support
====> OpenLDAP backends
ASYNCMETA=on: With asynchronous metadirectory backend
DNSSRV=on: With Dnssrv backend
MDB=on: With Memory-Mapped DB backend
PASSWD=on: With Passwd backend
RELAY=on: With Relay backend
SOCK=on: With Sock backend
PERL=off: With Perl backend
SQL=off: With SQL backend
====> OpenLDAP overlays
ACCESSLOG=on: With In-Directory Access Logging overlay
ADDPARTIAL=on: With addpartial overlay (experimental)
ALLOP=on: With allop overlay (experimental)
AUDITLOG=on: With Audit Logging overlay
AUTOCA=on: With Automatic Certificate Authority overlay
AUTOGROUP=on: With autogroup overlay (experimental)
CLOAK=on: With cloak overlay (experimental)
COLLECT=on: With Collect overy Services overlay
CONSTRAINT=on: With Attribute Constraint overlay
DDS=on: With Dynamic Directory Services overlay
DENYOP=on: With denyop overlay (experimental)
DEREF=on: With Dereference overlay
DYNGROUP=on: With Dynamic Group overlay
DYNLIST=on: With Dynamic List overlay
EMPTYDS=on: With emptyds overlay (experimental)
HOMEDIR=on: With Home Directory Management overlay
LASTBIND=on: With lastbind overlay
LASTMOD=on: With lastmod overlay (experimental)
MEMBEROF=on: With Reverse Group Membership overlay
NESTGROUP=on: With nestgroup overlay
NOPS=on: With nops overlay
NSSOV=on: With NSS/PAM overlay [baked in nslcd(8)]
OTP=on: With OTP 2-factor authentication overlay
PPOLICY=on: With Password Policy overlay
PROXYCACHE=on: With Proxy Cache overlay
REFINT=on: With Referential Integrity overlay
REMOTEAUTH=on: With Deferred Authentication overlay
RETCODE=on: With Return Code testing overlay
RWM=on: With Rewrite/Remap overlay
SEQMOD=on: With Sequential Modify overlay
SHA2=on: With SHA2 Password hashes overlay
SSSVLV=on: With ServerSideSort/VLV overlay
SYNCPROV=on: With Syncrepl Provider overlay
TRACE=on: With Trace overlay
TRANSLUCENT=on: With Translucent Proxy overlay
UNIQUE=on: With attribute Uniqueness overlay
VALSORT=on: With Value Sorting overlay
===> Use 'make config' to modify these settings
Affects: users of net/openldap25-client, net/openldap25-server,
net/openldap26-client, net/openldap26-server
Author: delphij@FreeBSD.org
Reason:
All OpenLDAP ports have been moved from net/ to databases/ to be
consistent with OpenLDAP 2.7 which was already in databases/.
pkg users should be able to upgrade directly with:
# pkg upgrade
Portmaster users:
# portmaster -o databases/openldap2X-client net/openldap2X-client
# portmaster -o databases/openldap2X-server net/openldap2X-server
Portupgrade users:
# portinstall databases/openldap2X-client databases/openldap2X-server
# portupgrade -a
Replace 2X with the actual version (25 or 26) you have installed.
databases/openldap*: move from net/
Move all OpenLDAP ports (openldap25-client, openldap25-server,
openldap26-client, openldap26-server) from net/ to databases/ to be
consistent with OpenLDAP 2.7 which was already in databases/.
Bump PORTREVISION for all moved ports. Simplify Mk/Uses/ldap.mk now
that all OpenLDAP versions live under databases/.
{databases,net}/openldap2[567]-server: use USES=localbase:ldflags
Remove redundant CPPFLAGS, LDFLAGS, LIBS, and SQL_LDFLAGS assignments
that are already covered by USES=localbase:ldflags. Also fix COMMENT/WWW
ordering in openldap25-server.
No functional change to the built packages.
net/openldap26-server: update to 2.6.13.
While I'm there also address the following issues:
- Add nssov overlay (PR 293531)
- Add an option to delay slapd startup (PR 280849)
- Support PREFIX/openldap/slapd.d/cn=config/olcDatabase=* as directory
(PR 261792 / 258418)
PR: 258418, 261792, 280849, 293531
net/openldap26-server: fix build with lld 17 and DEBUG option off
If the DEBUG option for the net/openldap26-server is turned off,
building the port will result in:
ld: error: version script assignment of 'OPENLDAP_2.200' to symbol
'ldap_dump_connection' failed: symbol not defined
ld: error: version script assignment of 'OPENLDAP_2.200' to symbol
'ldap_dump_requests_and_responses' failed: symbol not defined
cc: error: linker command failed with exit code 1 (use -v to see invocation)
This is because the mentioned symbols are in a #ifdef LDAP_DEBUG block,
and will indeed not be defined if DEBUG option is off.
Adjust the port Makefile to delete the undefined symbols from the
ldap.map file, if the DEBUG option is off.
PR: 277585
Reported by: Matt Magoffin <bugs.freebsd.org@msqr.us>
MFH: 2024Q1
net/openldap26-server: relax OpenSSL version requirement
The authors' configure insists on OpenSSL-1.1.1, but the software
makes no use of the new features -- and can compile just as well
against the older OpenSSL.
Also remove patch-configure -- the freshly patch configure script
was being overwritten anyway by the autoconf.
PR: 276388
net/openldap2[4-6]-server: suppress warning message when chown failed.
On UFS with sujournal enabled, the journal is immutable and chown would
fail. This would cause the script to issue an error when a separate UFS
file system is used as OpenLDAP data store, which is not actionable and
causes confusion.
Reported by: Olivier Nicole <on cs.ait.ac.th>
PR: ports/266811
net/openldap26-{server,client}: fix proper usage of FETCH/GSSAPI options
* FETCH_DESC is not present with client
* FETCH applies to *both* client and server since both slapd and client tools
use ldif_parse_line2() via libldap which can use libfetch
* GSSAPI is also required for the client as well since ldap*(1) commands can
be used to connect and authenticate to directory servers like Active
Directory
and OpenLDAP with Kerberos via SASL GSSAPI mechanism
PR: ports/267056
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
net: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* <ports@c0decafe.net>
* Aaron Dalton <aaron@FreeBSD.org>
* Aaron Straup Cope <ascope@cpan.org>
* Aaron Zauner <az_mail@gmx.at>
* Adam Jette <jettea46@yahoo.com>
* Adam Weinberger <adamw@FreeBSD.org>
* Alan Eldridge <alane@geeksrus.net>
* Alex Bakhtin <Alex.Bakhtin@gmail.com>
* Alex Deiter <Alex.Deiter@Gmail.COM>
* Alex Dupre <ale@FreeBSD.org>
* Alex Dupre <sysadmin@alexdupre.com>
(Only the first 15 lines of the commit message are shown above )
net/openldap2[456]-server: Fix paths for argsfile and pidfile.
The Makefile patches the slapd.conf file with a changed path for
the argsfile and pidfile, but the slapd.ldif file remains unchanged.
Fix this by patching the paths in the slapd.ldif file as well.
PR: ports/261734
*/*: Remove redundant '-*' from CONFLICTS definitions
The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").
Approved by: portmgr (blanket)
