OpenLDAP is a suite of Lightweight Directory Access Protocol (v3) servers,
clients, utilities and development tools.
This package includes the following major components:
* slapd - a stand-alone LDAP directory server
* LDIF tools - data conversion tools for use with slapd
This is the latest stable release of OpenLDAP Software for general use.
===> The following configuration options are available for openldap27-server-2.7.2:
ACI=off: Per-object ACI (experimental)
ARGON2=on: Argon2 password hashing module
DEBUG=on: Build with debugging support
DYNACL=off: Run-time loadable ACL (experimental)
FETCH=off: Enable fetch(3) support
GSSAPI=off: With GSSAPI support
LLOADD=on: Enable load balancer
NETWORKING=off: Require full network configuration (NETWORKING) before slapd starts
OUTLOOK=off: Force caseIgnoreOrderingMatch on name attribute (experimental)
PBKDF2=off: With PBKDF2 hash password support
RLOOKUPS=off: With reverse lookups of client hostnames
SLAPI=off: With Netscape SLAPI plugin API (experimental)
SLP=off: With SLPv2 (RFC 2608) support
====> OpenLDAP backends
ASYNCMETA=on: With asynchronous metadirectory backend
DNSSRV=on: With Dnssrv backend
MDB=on: With Memory-Mapped DB backend
PASSWD=on: With Passwd backend
RELAY=on: With Relay backend
SOCK=on: With Sock backend
====> OpenLDAP overlays
ACCESSLOG=on: With In-Directory Access Logging overlay
ADDPARTIAL=on: With addpartial overlay (experimental)
ALLOP=on: With allop overlay (experimental)
AUDITLOG=on: With Audit Logging overlay
AUTOCA=on: With Automatic Certificate Authority overlay
AUTOGROUP=on: With autogroup overlay (experimental)
CLOAK=on: With cloak overlay (experimental)
COLLECT=on: With Collective Attributes overlay
CONSTRAINT=on: With Attribute Constraint overlay
DDS=on: With Dynamic Directory Services overlay
DENYOP=on: With denyop overlay (experimental)
DEREF=on: With Dereference overlay
DYNGROUP=on: With Dynamic Group overlay
DYNLIST=on: With Dynamic List overlay
EMPTYDS=on: With emptyds overlay (experimental)
HOMEDIR=on: With Home Directory Management overlay
LASTBIND=on: With lastbind overlay
LASTMOD=on: With lastmod overlay (experimental)
MEMBEROF=on: With Reverse Group Membership overlay
NESTGROUP=on: With nestgroup overlay
NOPS=on: With nops overlay
NSSOV=on: With NSS/PAM overlay [baked in nslcd(8)]
OTP=on: With OTP 2-factor authentication overlay
PPOLICY=on: With Password Policy overlay
PROXYCACHE=on: With Proxy Cache overlay
REFINT=on: With Referential Integrity overlay
REMOTEAUTH=on: With Deferred Authentication overlay
RESULTSTATS=on: With per-operation result code statistics overlay
RETCODE=on: With Return Code testing overlay
RWM=on: With Rewrite/Remap overlay
SEQMOD=on: With Sequential Modify overlay
SHA2=on: With SHA2 Password hashes overlay
SMBPWD=on: With Samba Password hashes overlay
SSSVLV=on: With ServerSideSort/VLV overlay
SYNCPROV=on: With Syncrepl Provider overlay
TRACE=on: With Trace overlay
TRANSLUCENT=on: With Translucent Proxy overlay
UNIQUE=on: With attribute Uniqueness overlay
VALSORT=on: With Value Sorting overlay
===> Use 'make config' to modify these settings
databases/openldap2[567]-server: Restore SMBPWD
Since FreeBSD 15 switched to MIT Kerberos, the SMBPWD option
was excluded because smbk5pwd requires Heimdal for its Kerberos
support. However, the Samba and shadow password hash parts of
the overlay do not depend on Kerberos and are still useful.
On FreeBSD 15 and later, build smbk5pwd without DO_KRB5 instead
of excluding the option altogether.
PR: 299408
Reported by: Geoffroy Desvernay <dgeo@centrale-med.fr>
databases/openldap2[567]-server: fix COLLECT_DESC
The collect overlay implements collective attributes (RFC 3671);
describe it as such instead of "Collect overy Services".
{databases,net}/openldap2[567]-server: use USES=localbase:ldflags
Remove redundant CPPFLAGS, LDFLAGS, LIBS, and SQL_LDFLAGS assignments
that are already covered by USES=localbase:ldflags. Also fix COMMENT/WWW
ordering in openldap25-server.
No functional change to the built packages.
databases/openldap27-server: fix patch target for ldap.map.in
In OpenLDAP 2.7.0, ldap.map was changed to a template (ldap.map.in)
that is processed during configure. Update the post-patch sed target
accordingly to fix build failure when DEBUG option is disabled.
Reported by: sunpoet
databases/openldap27-{client,server}: add OpenLDAP 2.7.0
Add new ports for OpenLDAP 2.7.0 (Feature Release) under databases/
category, which better reflects LDAP's nature as a directory database.
Notable changes from 2.6:
- Perl and SQL backends have been removed upstream
- New resultstats contrib overlay for per-operation result code statistics
- slapi-plugin.h header no longer shipped with client library
Update Mk/Uses/ldap.mk to support version 27 with databases/ category
routing (27+ -> databases/, older -> net/), and add 27 as a possible
value in Mk/bsd.default-versions.mk.
