OpenLDAP is a suite of Lightweight Directory Access Protocol (v3) servers,
clients, utilities and development tools.
This package includes the following major components:
* slapd - a stand-alone LDAP directory server
* LDIF tools - data conversion tools for use with slapd
This is the latest stable release of OpenLDAP Software for general use.
===> The following configuration options are available for openldap24-server-2.4.59_11:
ACI=off: Per-object ACI (experimental)
DEBUG=on: Build with debugging support
DYNACL=off: Run-time loadable ACL (experimental)
DYNAMIC_BACKENDS=off: Build dynamic backends (DEPRECATED)
DYNAMIC_MODULES=on: Build dynamic backend and overlay modules
FETCH=off: Enable fetch(3) support
GSSAPI=off: With GSSAPI support
KQUEUE=off: With kqueue support (experimental)
LMPASSWD=off: With LM hash password support (DEPRECATED)
OUTLOOK=off: Force caseIgnoreOrderingMatch on name attribute (experimental)
PBKDF2=off: With PBKDF2 hash password support
RLOOKUPS=off: With reverse lookups of client hostnames
SLAPI=off: With Netscape SLAPI plugin API (experimental)
SLP=off: With SLPv2 (RFC 2608) support
TCP_WRAPPERS=off: With tcp wrapper support
====> OpenLDAP backends
DNSSRV=on: With Dnssrv backend
MDB=on: With Memory-Mapped DB backend
PASSWD=on: With Passwd backend
RELAY=on: With Relay backend
ODBC=on: With SQL backend
SOCK=on: With Sock backend
BDB=off: With BerkeleyDB backend (DEPRECATED)
PERL=off: With Perl backend
SHELL=off: With Shell backend (disables threading)
====> OpenLDAP overlays
ACCESSLOG=on: With In-Directory Access Logging overlay
ADDPARTIAL=on: With addpartial overlay (experimental)
ALLOP=on: With allop overlay (experimental)
AUDITLOG=on: With Audit Logging overlay
AUTOGROUP=on: With autogroup overlay (experimental)
CLOAK=on: With cloak overlay (experimental)
COLLECT=on: With Collect overy Services overlay
CONSTRAINT=on: With Attribute Constraint overlay
DDS=on: With Dynamic Directory Services overlay
DENYOP=on: With denyop overlay (experimental)
DEREF=on: With Dereference overlay
DYNGROUP=on: With Dynamic Group overlay
DYNLIST=on: With Dynamic List overlay
LASTBIND=on: With lastbind overlay
LASTMOD=on: With lastmod overlay (experimental)
MEMBEROF=on: With Reverse Group Membership overlay
NOPS=on: With nops overlay
PCACHE=on: With Proxy Cache overlay
PPOLICY=on: With Password Policy overlay
REFINT=on: With Referential Integrity overlay
RETCODE=on: With Return Code testing overlay
RWM=on: With Rewrite/Remap overlay
SEQMOD=on: With Sequential Modify overlay
SHA2=on: With SHA2 Password hashes overlay
SMBPWD=on: With Samba Password hashes overlay
SSSVLV=on: With ServerSideSort/VLV overlay
SYNCPROV=on: With Syncrepl Provider overlay
TRACE=on: With Trace overlay
TRANSLUCENT=on: With Translucent Proxy overlay
UNIQUE=on: With attribute Uniqueness overlay
VALSORT=on: With Value Sorting overlay
===> Use 'make config' to modify these settings
The OpenLDAP server package has been successfully installed.
In order to run the LDAP server, you need to edit
/usr/local/etc/openldap/slapd.conf
to suit your needs and add the following lines to /etc/rc.conf:
slapd_enable="YES"
slapd_flags='-h "ldapi://%2fvar%2frun%2fopenldap%2fldapi/ ldap://0.0.0.0/"'
slapd_sockets="/var/run/openldap/ldapi"
Then start the server with
/usr/local/etc/rc.d/slapd start
or reboot.
Try `man slapd' and the online manual at
http://www.OpenLDAP.org/doc/
for more information.
slapd runs under a non-privileged user id (by default `ldap'),
see /usr/local/etc/rc.d/slapd for more information.
PLEASE NOTE:
As of openldap24-server 2.4.58_2, the server is now modularized and
all overlays are built as dynamic modules instead of being statically linked.
Previously, statically linked modules do not need an explicit
moduleload (in slapd.conf(5)) or olcModuleLoad (when using slapd-config(5))
and you might need to make configuration change accordingly as part of the
upgrade.
net/openldap24-{client|server}: Remove expired port
2023-09-30 net/openldap24-client: No longer supported by upstream. Please use a
newer version of OpenLDAP instead
2023-09-30 net/openldap24-server: No longer supported by upstream. Please use a
newer version of OpenLDAP instead
net/openldap24-*: Extend EXPIRATION_DATE
These ports are still used in our cluster. The upgradation work to
openldap26 is still WIP and is expected to be completed before
2023-09-30. So extend the EXPIRATION_DATE.
Reported by: philip
Approved by: portmgr (blanket cluster)
net/openldap24-*: Extend EXPIRATION_DATE
These ports are still used in our cluster. The upgradation work to
openldap26 is still WIP and is expected to be completed before
2023-06-30. So extend the EXPIRATION_DATE.
Reported by: philip
Approved by: portmgr (blanket cluster)
Mk/**ldap.mk: Convert USE_LDAP to USES=ldap
Convert the USE_LDAP=yes to USES=ldap and adds the following features:
- Adds the argument USES=ldap:server to add openldap2{4|5|6}-server as
RUN_DEPENDS
- Adds the argument USES=ldap<version> and replaces WANT_OPENLDAP_VER
- Adds OPENLDAP versions in bsd.default-versions.mk
- Adds USE_OPENLDAP/WANT_OPENLDAP_VER in Mk/bsd.sanity.mk
- Changes consumers to use the features
Reviewed by: delphij
Approved by: portmgr
Differential Revision: https://reviews.freebsd.org/D38233
net/openldap24-*: Extend EXPIRATION_DATE
These ports are still used in our cluster. The upgradation work to
openldap26 is still WIP and is expected to be completed before
2023-03-31. So extend the EXPIRATION_DATE.
Reported by: philip
Approved by: portmgr (blanket cluster)
net/openldap2[4-6]-server: suppress warning message when chown failed.
On UFS with sujournal enabled, the journal is immutable and chown would
fail. This would cause the script to issue an error when a separate UFS
file system is used as OpenLDAP data store, which is not actionable and
causes confusion.
Reported by: Olivier Nicole <on cs.ait.ac.th>
PR: ports/266811
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
net: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* <ports@c0decafe.net>
* Aaron Dalton <aaron@FreeBSD.org>
* Aaron Straup Cope <ascope@cpan.org>
* Aaron Zauner <az_mail@gmx.at>
* Adam Jette <jettea46@yahoo.com>
* Adam Weinberger <adamw@FreeBSD.org>
* Alan Eldridge <alane@geeksrus.net>
* Alex Bakhtin <Alex.Bakhtin@gmail.com>
* Alex Deiter <Alex.Deiter@Gmail.COM>
* Alex Dupre <ale@FreeBSD.org>
* Alex Dupre <sysadmin@alexdupre.com>
(Only the first 15 lines of the commit message are shown above )
net/openldap2[456]-server: Fix paths for argsfile and pidfile.
The Makefile patches the slapd.conf file with a changed path for
the argsfile and pidfile, but the slapd.ldif file remains unchanged.
Fix this by patching the paths in the slapd.ldif file as well.
PR: ports/261734
*/*: Remove redundant '-*' from CONFLICTS definitions
The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").
Approved by: portmgr (blanket)
net/openldap24-client: Install libldap as symlinks to libldap_r.
As of FreeBSD 12.0, OpenSSL is depending on the threading library
and it is no longer possible to build a true non-threaded version
of libldap.
The libldap_r is ABI compatible with libldap and is shipped as the
libldap on Solaris and many Linux distributions, so follow the same
approach.
net/openldap24-server: Make DEBUG default.
In 616f384d5cce7f52a9f5a2164d405f4185bbcab9 the port was converted
to use the option framework's handling of options. Previously,
when "DEBUG" is unchecked, the port will not pass --disable-debug
and because debug was enabled by default in upstream, the option
is effectively saying build with debug anyways. After the conversion,
we are now correctly building a non-debug build which will also remove
syslog support.
Restore the historical behavior and build with debug option by default
as it's what expected by upstream and the option never worked on FreeBSD
until the recent conversion actually fixed the option to do what it was
intended to do.
PR: ports/257884
net/openldap24-server: Upon shutdown, backup database in LDIF form.
The upcoming OpenLDAP 2.5 update requires a format change to mdb
databases. It is mandatory for existing slapd-mdb(5) databases to
be exported via an OpenLDAP 2.4 slapcat prior to upgrade, then
reloaded via an OpenLDAP 2.5 slapadd after upgrade.
To make sure that the user always have a backup somewhere, introduce
a backup mechanism (enabled by default, and may be disabled by setting
rc.conf variable slapd_autobackup_enable to "NO") in the slapd rc.d
script upon shutdown.
By default, the backups will be stored at /var/backups/openldap and
a total of 8 backups will be kept, with the oldest backup overwritten
as needed. Backups are compressed using zstd, or, when zstd is not
available, using gzip. The compression can be disabled by setting
slapd_autobackup_compress to "NO", if desirable (e.g. if /var/backups
is located on a file system that is capable of doing compression,
like ZFS).
net/openldap24-server: Cleanup and make better use of options framework.
While there also add the following contrib/ overlaies:
- addpartial
- allop
- autogroup
- cloak
- denyop
- lastmod
- nops
- trace
net/openldap24-server: fix build with LibreSSL
Modify the OpenSSL 1.1.1 preprocessor guards to also account for
LibreSSL missing certain functions, particularly
SSL_CTX_set_ciphersuites(3) and SSL_set_ciphersuites(3). While here,
un-IGNORE for ${SSL_DEFAULT:Mlibressl*}.
PORTREVISION intentionally not bumped as this is a build fix.
PR: 256433
net/openldap24-server: Mark IGNORE when libressl is chosen for now.
The current release of libressl does not yet provide OpenSSL style
TLSv1.3 API which is required by OpenLDAP cd3567d75 (ITS#9521).
PR: 256433
Remove compatibility code for FreeBSD < 11.2 from all ports.
Simplify some ports where DragonFlyBSD no longer needs to be special-cased.
Submitted by: rene
Reviewed by: bapt, jbeich
Differential Revision: https://reviews.freebsd.org/D17724
Ensure that slapd starts before kdc, as the kdc may be configured to
require LDAP services. If it is configured to require LDAP and the
slapd server is not yet started, the kdc will fail to start.
PR: 229939
Approved by: delphij@ (maintainer)
MFH: 2018Q3
Differential Revision: https://reviews.freebsd.org/D16602
Replace USE_AUTOTOOLS=autoconf with a BUILD_DEPENDS on autoconf and run
autoconf from pre-configure. USES=autoreconf cannot be used because of
upstream modifications (e.g. custom ltmain.sh).
Workaround an issue with kqueue support.
OpenLDAP does slapd_daemon_init() which will initialize kqueue(), but then
calls lutil_detach() which will fork(), and the fork() would invalidate the
kqueue descriptor in the child process.
Completely solving this would require some intrusive changes so workaround
this for now by calling rfork() without RFFDG and reorder file descriptor
closure order.
While I'm there also refrain from stopping slapd when deinstalling.
Add experimental kqueue support [1]:
===
Added support for using kqueue in slapd (for systems that support kqueue(2).
Patch obtained from:
http://public.me.com/bryan.duncan/bryan-duncan.kqueue.090922.patch
# This patch file is derived from OpenLDAP Software. All of the
# modifications to OpenLDAP Software represented in the following
# patch(es) were developed by Apple. I, Bryan Duncan, am authorized by
# Apple, my employer, to release this work under the following terms.
#
# Copyright 2009 Apple Inc. All rights reserved.
#
(Only the first 15 lines of the commit message are shown above )
Fix usage of WITH_OPENSSL_BASE, WITH_OPENSSL_PORT and OPENSSL_PORT.
WITH_OPENSSL_* can't be set after bsd.port.pre.mk.
Fold all other usage into using SSL_DEFAULT == foo
PR: 210149
Submitted by: mat
Exp-run by: antoine
Sponsored by: The FreeBSD Foundation, Absolight
Differential Revision: https://reviews.freebsd.org/D6577
Use pipe sign (|) instead of comma (,) when doing sed. This fixes a
problem when the variable portion of sed command contains comma, for
instance, when USE_GCC=4.9.
PR: 192297
Submitted by: marino
Use sa_len instead of sizeof(struct sockaddr_storage) to work around a
FreeBSD kernel check, which would return EINVAL when the passed length
is larger than desired.
PR: ports/202819
Submitted by: brd
Remove UNIQUENAME and LATEST_LINK.
UNIQUENAME was never unique, it was only used by USE_LDCONFIG and now,
we won't have conflicts there.
Use PKGBASE instead of LATEST_LINK in PKGLATESTFILE, the *only* consumer
is pkg-devel, and it works just fine without LATEST_LINK as pkg-devel
has the correct PKGNAME anyway.
Now that UNIQUENAME is gone, OPTIONSFILE is too. (it's been called
OPTIONS_FILE now.)
Reviewed by: antoine, bapt
Exp-run by: antoine
Sponsored by: Absolight
Differential Revision: https://reviews.freebsd.org/D3336
Add a patch to resolve symbol conflict between SHA2 module with OpenSSL's
SHA2 implementation.
Without this, e.g. SSHA512 scheme would result in a crash due to stack
corruption, which is a result of different SHA512 context size in the
contributed SHA2 implementation and the OpenSSL one, plus the allocation
is on stack.
PR: 197004
MFH: 2015Q2
Number of commits found: 248 (showing only 100 on this page)
