Commit graph

69 commits

Author SHA1 Message Date
tron
d9d0243487 Add a comment which explains why we use the "db46" package under
certain versions of NetBSD.
2008-09-10 09:51:04 +00:00
tron
0179891bd4 Depend on the "db46" package under NetBSD versions that use SA threads.
Bump package revision.

This is the second half of the fix for PR pkg/39500.
2008-09-09 22:25:02 +00:00
wiz
1448cd3066 Fix build of openldap-server against BDB 4.7, using patches from upstream
CVS. Bump PKGREVISION.
2008-09-07 12:18:06 +00:00
ghen
899d74c194 Update OpenLDAP packages to 2.4.8 (bugfixes).
OpenLDAP 2.4.8 Release (2008/02/19)
	Fixed ldapmodify verbose logging (ITS#5247)
	Fixed ldapdelete with sizelimit (ITS#5294)
	Fixed ldapdelete with subentries control (ITS#5293)
	Fixed ldapsearch exit code init (ITS#5317)
	Fixed libldap extended decoding (ITS#5304)
	Fixed libldap filter abort (ITS#5300)
	Fixed libldap ldap_parse_sasl_bind_result (ITS#5263)
	Fixed libldap result codes for open (ITS#5338)
	Fixed libldap search timeout crash (ITS#5291)
	Fixed libldap paged results crash (ITS#5315)
	Fixed libldap cipher suite with GnuTLS (ITS#5341)
	Fixed slapd support for 2.1 CSN (ITS#5348)
	Fixed slapd include handling (ITS#5276)
	Fixed slapd modrdn check for valid new DN (ITS#5344)
	Fixed slapd multi-step SASL binds (ITS#5298)
	Fixed slapd non-atomic signal variables (ITS#5248)
	Fixed slapd overlay ordering when moving to slapd.d (ITS#5284)
	Fixed slapd NULL printf (ITS#5264)
	Fixed slapd NULL set values (ITS#5286)
	Fixed slapd segv with SASL/OTP (ITS#5259)
	Fixed slapd timestamp race condition (ITS#5370)
	Fixed slapd cn=config crash on delete (ITS#5343)
	Fixed slapd cn=config global acls (ITS#5352)
	Fixed slapd truncated cookie (ITS#5362)
	Fixed slapd sasl with CLEARTEXT (ITS#5368)
	Fixed slapd str2entry with no attrs (ITS#5308)
	Fixed slapd TLSVerifyClient default (ITS#5360)
	Fixed slapd HAVE_TLS dependency (ITS#5379)
	Fixed slapd delta-syncrepl refresh mode (ITS#5376)
	Fixed slapd ACL sets URI attrs (ITS#5384)
	Fixed slapd invalid entryUUID filter (ITS#5386)
	Fixed slapd-bdb idlcache on adds (ITS#5086)
	Fixed slapd-bdb crash with modrdn (ITS#5358)
	Fixed slapd-bdb segv with bdb4.6 (ITS#5322)
	Fixed slapd-bdb modrdn to same dn (ITS#5319)
	Fixed slapd-bdb MMR (ITS#5332)
	Added slapd-bdb/slapd-hdb DB encryption (ITS#5359)
	Fixed slapd-ldif delete (ITS#5265)
	Fixed slapd-meta link to slapd-ldap (ITS#5355)
	Fixed slapd-meta setting of sm_nvalues (ITS#5375)
	Fixed slapd-monitor crash (ITS#5311)
	Fixed slapd-relay compare (ITS#4937)
	Added slapd-sock (ITS#4094)
	Fixed slapo-accesslog cleanup on successful response (ITS#5374)
	Added slapo-autogroup contrib module (ITS#5145)
	Added slapo-constraint cross-attribute constraints (ITS#4987)
	Fixed slapo-memberof objectClass inheritance (ITS#5299)
	Added slapo-memberof global overlay support (ITS#5301)
	Fixed slapo-memberof leak (ITS#5302)
	Fixed slapo-ppolicy only password check with policy (ITS#5285)
	Fixed slapo-ppolicy del/replace password without new one (ITS#5373)
	Fixed slapo-syncprov hang on checkpoint (ITS#5261)
	Added slapo-translucent local searching (ITS#5283)
	Removed lint
	Build Environment
		Fixed libldap_r threaded library linking (ITS#4982)
		Fixed libldap use of %n (ITS#5324)
		Fixed test047 to skip if rwm is not available (ITS#5292)
	Documentation
		DB_CONFIG.example URL wrong in comments (ITS#5288)
		Add cn=config example for auditlog (ITS#5245)
		ldapmodify(1) clarification for RFC2849 (ITS#5312)
2008-02-24 20:15:05 +00:00
tnn
ad6ceadd25 Per the process outlined in revbump(1), perform a recursive revbump
on packages that are affected by the switch from the openssl 0.9.7
branch to the 0.9.8 branch. ok jlam@
2008-01-18 05:06:18 +00:00
ghen
fb30bb7abe Update openldap packages to OpenLDAP 2.4.7 (forced update for db4-4.6.x
support, reported via PR pkg/37745 ).

OpenLDAP 2.4.x brings a lot of new features, including multi-master support,
dynamic configuration and schema changes, automatic reverse group membership,
significant performance improvements, etc.  One of the most noticeable changes
for administrators though is the removal if the slurpd daemon (in favour of
the sync replication mechanism).  Users of slurpd replication should migrate
to sync replication before upgrading to OpenLDAP 2.4.x.
2008-01-13 17:15:15 +00:00
ghen
861a9165d3 DESTDIR support for openldap. 2008-01-04 11:42:29 +00:00
ghen
20a5a1c683 Unset PKGREVISION after update. 2007-09-02 13:04:38 +00:00
tron
afbf90a7c6 Fix build problem caused by "smbk5pwd" support:
- Correct typo in "configure" so that "--enable-smbk5pwd" or
  "--disable-smbk5pwd" actually work.
- Explicitly add "--disable-smbk5pwd" to "CONFIGURE_ARGS" because this
  feature is turned on by default (which it really shouldn't be).

The "openldap-server" package can now be built with the default options.
2007-08-28 14:33:27 +00:00
manu
f3bf163ce3 Add smbk5pwd support (sync samba and kerberos passwords on password changes)
The smbk5pwd overlay is now static. It can be used like this:
overlay         smbk5pwd

To sync only the samba password, add this:
smbk5pwd-enable samba

See contrib/slapd-modules/smbk5pwd/README in openldap distribution for more
information
2007-08-24 19:06:50 +00:00
jlam
4390d56940 Make it easier to build and install packages "unprivileged", where
the owner of all installed files is a non-root user.  This change
affects most packages that require special users or groups by making
them use the specified unprivileged user and group instead.

(1) Add two new variables PKG_GROUPS_VARS and PKG_USERS_VARS to
    unprivileged.mk.  These two variables are lists of other bmake
    variables that define package-specific users and groups.  Packages
    that have user-settable variables for users and groups, e.g. apache
    and APACHE_{USER,GROUP}, courier-mta and COURIER_{USER,GROUP},
    etc., should list these variables in PKG_USERS_VARS and PKG_GROUPS_VARS
    so that unprivileged.mk can know to set them to ${UNPRIVILEGED_USER}
    and ${UNPRIVILEGED_GROUP}.

(2) Modify packages to use PKG_GROUPS_VARS and PKG_USERS_VARS.
2007-07-04 20:54:31 +00:00
manu
27ececf503 Fiw a configure option name: it's --enable-spasswd ans not --with-spasswwd
details here:
http://www.openldap.org/lists/openldap-software/200702/msg00126.html
2007-03-15 14:28:57 +00:00
ghen
a0b39d3c81 Update openldap packages to 2.3.31 (new stable release).
OpenLDAP 2.3.31 Release
	Fixed libldap unchased referral leak (ITS#4545)
	Fixed libldap tls callback (ITS#4723)
	Fixed liblutil ldif file: URL parsing
	Fixed slapd syncrepl logging (ITS#4755)
	Fixed slapd group ACL caching when proxyAuthz'ing (ITS#4760)
	Fixed slapd "group" authz default member parsing (ITS#4761)
	Fixed slapd uninitialized sd_actives array (ITS#4765)
	Fixed slapd DN parsing in bindconf_parse (ITS#4766)
	Fixed slapd conditional in macro argument (ITS#4769)
	Fixed slapd send_search_reference should propagate errors
	Fixed slapd memleak on failed bind (ITS#4771)
	Fixed slapd schema preparation case to match RFCs (ITS#4764)
	Fixed slapd kbind buffer overflow condition (ITS#4775)
	Fixed slapd connections_shutdown assert
	Fixed slapd glue parent/sub db overlay nesting (ITS#4615)
	Fixed slapd-bdb/hdb/ldbm slap_add_opattrs error checking
	Fixed slapd-bdb/hdb setting up tool threads when no indices specified
	Fixed slapd-perl interpreter context (ITS#4751)
	Fixed slapo-syncprov to complain if defined outside of a database
	Fixed test021 modify ops to be syntactically correct
	Fixed contrib smbk5pwd, check kadm5 init result
	Documentation
		Fixed typo in slapo-retcode(5) man page (ITS#4753)
		Fixed syncrepl searchbase note (ITS#4540)
		Added syncrepl starttls in the admin guide (ITS#4510)
		Fixed reference to deprecated function in ldap_parse_result(3)

OpenLDAP 2.3.30 Release
	Fixed slapd authzTo/authzFrom URL matching (ITS#4744)
	Fixed slapd syncrepl consumer memory leaks (ITS#4746)
	Fixed slapd-hdb livelock (ITS#4738)
	Fixed slapo-ppolicy external quality check (ITS#4741)
	Documentation
		Fixed ldapsearch(1) man page acknowledgement (ITS#4743)

OpenLDAP 2.3.29 Release
	Fixed liblber/libldap error codes on Windows (ITS#4606)
	Fixed libldap string length assert (ITS#4740)
	Fixed liblunicode case mapping (ITS#4724)
	Fixed slapd ldapi:// socket permissions (ITS#4709)
	Fixed slapd c_writewaiters assert (ITS#4696,4736)
	Fixed slapo-accesslog purge contextCSN bug (ITS#4704)
	Fixed slapo-accesslog modify/replace bug (ITS#4728)
	Fixed slapo-dynlist leaks (ITS#4664)
	Fixed slapo-ppolicy leaks (ITS#4665)
	Fixed slapo-syncprov deadlock (ITS#4720)
	Build environment
		Added selection of ODBC (ITS#4735)
	Documentation
		Fixed slapd-ldap/meta(5) rebind-as-user usage (ITS#4715)
		Fixed slapd-ldap/meta(5) missing network-timeout (ITS#4718)

OpenLDAP 2.3.28 Release
	Fixed libldap ldap.conf max line length (ITS#4669)
	Fixed libldap use keepalive for syncrepl (ITS#4708)
	Fixed liblutil LDIF CR/LF parsing bug (ITS#4635)
	Fixed librewrite LDAP map parsing bug
	Fixed librewrite map double free bug
	Added ldapsearch bad filter pattern check (ITS#4647)
	Fixed slapd global access controls initialization (ITS#4654)
	Fixed slapd setting c_sasl_bindop only on SASL binds
	Fixed slapd max line length issue (ITS#4651)
	Fixed slapd return code not being propagated (ITS#4565)
	Fixed slapd integerBitAndMatch (ITS#4672)
	Fixed slapd syncrepl modrdn new superior (ITS#4695)
	Fixed slapd-ldap retry with idassert (ITS#4686)
	Fixed slapd-meta DN massage error code handling (ITS#4711)
	Fixed slapd-monitor locking with scope "subordinate" (ITS#4668)
	Fixed slapd-perl deletes (ITS#2612)
	Fixed slapd-perl backend initialization (ITS#4358)
	Fixed slapd-perl finding interpreter inside a thread (ITS#4358)
	Fixed slapo-ppolicy pwdChangedTime behavior (ITS#4692)
	Fixed slapo-translucent ldapmodify crash (ITS#4673)
	Documentation
		Updated ldapsearch(1) options (ITS#4371,4526,4647)
		Fixed slapd.access(5) non-optional dn= error (ITS#4522)
2007-01-02 11:29:15 +00:00
ghen
f260454178 Add a fix for CVE-2006-5779 as openldap/patches/patch-ap, from OpenLDAP CVS.
Bump PKGREVISION for openldap-client and openldap-server.
2006-11-27 12:44:36 +00:00
ghen
8413d3b79e Update OpenLDAP packages to 2.3.27, the new "stable" release.
Changes since 2.3.24:

OpenLDAP 2.3.27 Release
- Fixed libldap dangling pointer issue (previous fix was broken) (ITS#4405)

OpenLDAP 2.3.26 Release
- Fixed libldap dnssrv bug with "not present" positive statement (ITS#4610)
- Fixed libldap dangling pointer issue (ITS#4405)
- Fixed slapd incorrect rebuilding of replica URI (ITS#4633)
- Fixed slapd DN X.509 normalization crash (ITS#4644)
- Fixed slapd-monitor operations order via callbacks (ITS#4631)
- Fixed slapd-sql undefined filter handling (ITS#4604)
- Fixed slapo-accesslog purge task during shutdown
- Fixed slapo-ppolicy handling of default policy (ITS#4634)
- Fixed slapo-ppolicy logging verbosity when using default policy
- Fixed slapo-syncprov incomplete sync on restart issues (ITS#4622)

OpenLDAP 2.3.25 Release
- Fixed liblber ber_bvreplace_x argument checks
- Add libldap_r TLS concurrency workaround (ITS#4583)
- Fixed liblutil password length bug
- Add slapd glue/subordinate conflict check (ITS#4614)
- Fixed slapd acl selfwrite bug (ITS#4587)
- Fixed slapd bconfig "require" and "none" handling (ITS#4574)
- Fixed slapd bconfig segfault when ldapadding new schema entries
- Fixed slapd syncrepl no rootdn bug (ITS#4582)
- Fixed slapd syncrepl contextCSN issue (ITS#4622)
- Fixed slapd-bdb/hdb lock bug with virtual root (ITS#4572)
- Fixed slapd-bdb/hdb modrdn new entry disappearing bug (ITS#4616)
- Fixed slapd-bdb/hdb cache job issue
- Fixed slapo-syncprov need new CSN with delete syncID sets (ITS#4534)
- Fixed slapo-syncprov startup when lastmod is off (ITS#4613)
- Fixed slapo-accesslog cn=config purge bug (ITS#4595)
- Fixes slapo-auditlog DB initialization
- Fixed slapo-ppolicy password hashing bug (ITS#4575)
- Fixed slapo-ppolicy password modify pwdMustChange reset bug (ITS#4576)
- Fixed slapo-ppolicy control can be critical (ITS#4596)
- Fixed slapo-retcode logical and bug
- Fixed slapo-syncprov DEL propagation bug (ITS#4589)
- Fixed slurpd ldaps:// default port bug (ITS#4580)
- Build environment
  - Fix configure winsock.h detection for Cygwin (ITS#4621)
  - Fix configure GMP detection (ITS#4608)
  - Updated test006-acls to test selfwrite access (ITS#4587)
- Documentation
  - Fixed ldapsearch(1) formatting (ITS#4619)
  - Updated slapd.conf(5) RFC references
  - Updated slapd.conf(5) lastmod discussion (ITS#4613)
  - Updated slapd.conf(5) "require" and "none" handling (ITS#4574)
  - Added slapd.conf(5) access control note to authz-regexp discussion
  - Updated slapo-syncprov(5) to clarify SyncProv and syncrepl diffs
2006-08-25 07:02:28 +00:00
ghen
98b0bf653a The ldapi:// socket file lives in ${OPENLDAP_VARDIR}/run, so that directory
should be world-accessible.  Bump PKGREVISION.
2006-07-04 06:42:52 +00:00
ghen
782296405b "make test" only makes sense for openldap-server with bdb/hdb enabled. 2006-06-08 15:30:03 +00:00
joerg
d5d04d0385 Include options.mk in -client and -server, but not the common
Makefile.
2006-06-02 22:02:33 +00:00
ghen
29bb0e1a9c Import databases/openldap-server, formerly a part of databases/openldap but
now split off.  This package contains only the slapd and slurpd servers.

Please note that both slapd and slurpd now run unprivileged by default (as
slapd:ldap and slurpd:ldap, respectively).  An upgrade scenaria is described
in MESSAGE.  This change addresses PR pkg/31959.
2006-05-31 18:18:36 +00:00