openldap-vl.spec 41 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143
  1. %bcond_with systemd
  2. %bcond_with sql
  3. %define build_compat32 %{?_with_compat32:1}%{!?_with_compat32:0}
  4. %global check_password_version 1.1
  5. Summary: The configuration files, libraries and documentation for OpenLDAP.
  6. Summary(ja): OpenLDAP の設定ファイル,ライブラリ,ドキュメント.
  7. Name: openldap
  8. Version: 2.6.10
  9. Release: 1%{?_dist_release}%{?with_systemd:.systemd}
  10. Group: system
  11. Vendor: Project Vine
  12. Distribution: Vine Linux
  13. License: OpenLDAP
  14. URL: https://www.openldap.org/
  15. Source0: https://www.openldap.org/software/download/OpenLDAP/openldap-release/openldap-%{version}.tgz
  16. Source2: ldap.init
  17. Source4: slapd.ldif
  18. Source5: ldap.conf
  19. Source10: ldap.sysconfig
  20. Source11: https://github.com/ltb-project/openldap-ppolicy-check-password/archive/v%{check_password_version}/openldap-ppolicy-check-password-%{check_password_version}.tar.gz
  21. Source50: libexec-functions
  22. Source52: libexec-check-config.sh
  23. Source101: slapd.service
  24. Source102: slapd.tmpfiles
  25. Source103: openldap.sysusers
  26. # Patches for 2.6
  27. Patch0: openldap-manpages.patch
  28. Patch1: openldap-reentrant-gethostby.patch
  29. Patch3: openldap-smbk5pwd-overlay.patch
  30. Patch4: openldap-ai-addrconfig.patch
  31. Patch5: openldap-allop-overlay.patch
  32. # fix back_perl problems with lt_dlopen()
  33. # might cause crashes because of symbol collisions
  34. # the proper fix is to link all perl modules against libperl
  35. # http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=327585
  36. Patch6: openldap-switch-to-lt_dlopenadvise-to-get-RTLD_GLOBAL-set.patch
  37. # System-wide default for CA certs
  38. Patch7: openldap-openssl-manpage-defaultCA.patch
  39. Patch8: openldap-add-export-symbols-LDAP_CONNECTIONLESS.patch
  40. Patch9: openldap-libldap-avoid-SSL-context-cleanup-during-library-des.patch
  41. # check-password module specific patches
  42. Patch90: check-password-makefile.patch
  43. Patch91: check-password.patch
  44. # Vine Patches
  45. # security fixes
  46. BuildRoot: %{_tmppath}/%{name}-%{version}-root
  47. BuildRequires: autoconf, automake, libtool >= 2.2.6a
  48. BuildRequires: libxcrypt-devel, libnsl2-devel
  49. BuildRequires: cyrus-sasl-devel, openssl-devel, perl
  50. BuildRequires: pam-devel, pkgconfig
  51. BuildRequires: unixODBC-devel, libtool-ltdl-devel >= 2.2.6a
  52. BuildRequires: krb5-devel
  53. BuildRequires: libevent-devel
  54. BuildRequires: groff
  55. %if %{with systemd}
  56. BuildRequires: systemd
  57. %endif
  58. #BuildConflicts: libicu-devel
  59. Requires: cyrus-sasl, mktemp
  60. %description
  61. OpenLDAP is an open source suite of LDAP (Lightweight Directory Access
  62. Protocol) applications and development tools. LDAP is a set of
  63. protocols for accessing directory services (usually phone book style
  64. information, but other information is possible) over the Internet,
  65. similar to the way DNS (Domain Name System) information is propagated
  66. over the Internet. The openldap package contains configuration files,
  67. libraries and documentation for OpenLDAP.
  68. %description -l ja
  69. OpenLDAPはオープンソースなLDAP (Lightweight Directory Access Protocol)アプリケーションと開発ツール集です。LDAPはディレクトリサービス(電話帳の様な情報や他の情報)にInternelからアクセスするプロトコルであり、DNS(Domain Name System)情報に似た方式でInternetに伝えられます。opanldapパッケージはOpanLDAP用の設定ファイルやライブラリ、ドキュメントを含んでいます。
  70. %package devel
  71. Summary: OpenLDAP development libraries and header files.
  72. Summary(ja): OpenLDAP の開発用ライブラリおよびヘッダファイル.
  73. Group: programming
  74. Requires: openldap = %{version}-%{release}, cyrus-sasl-devel >= 2.1
  75. Provides: openldap-evolution-devel = %{version}-%{release}
  76. %description devel
  77. The openldap-devel package includes the development libraries and
  78. header files needed for compiling applications that use LDAP
  79. (Lightweight Directory Access Protocol) internals. LDAP is a set of
  80. protocols for enabling directory services over the Internet. Install
  81. this package only if you plan to develop or will need to compile
  82. customized LDAP clients.
  83. %description devel -l ja
  84. openldap-develパッケージはLDAP(Lightweight Directory Access Protocol)を使うためにコンパイルするアプリケーションに必要な開発用ライブラリやヘッダファイルを含んでいます。LDAPはInternet上にディレクトリサービスを可能にするプロトコルです。LDAPクライアントを開発したりカスタマイズする場合には、このパッケージをインストールしてください。
  85. %package servers
  86. Summary: OpenLDAP servers and related files.
  87. Summary(ja): OpenLDAP サーバおよび関連ファイル.
  88. Group: servers
  89. Requires(pre): fileutils, make, openldap = %{version}-%{release}, openssl, shadow-utils, coreutils
  90. Requires(post): fileutils, make, openldap = %{version}-%{release}, openssl, shadow-utils, coreutils
  91. %if %{with systemd}
  92. %{?systemd_requires}
  93. %else
  94. Requires(pre): chkconfig
  95. Requires(post): chkconfig
  96. %endif
  97. %description servers
  98. OpenLDAP is an open source suite of LDAP (Lightweight Directory Access
  99. Protocol) applications and development tools. LDAP is a set of
  100. protocols for accessing directory services (usually phone book style
  101. information, but other information is possible) over the Internet,
  102. similar to the way DNS (Domain Name System) information is propagated
  103. over the Internet. This package contains the slapd and slurpd servers,
  104. migration scripts and related files.
  105. %description servers -l ja
  106. OpenLDAPはオープンソースなLDAP (Lightweight Directory Access Protocol)アプリケーションと開発ツール集です。LDAPはディレクトリサービス(電話帳の様な情報や他の情報)にInternelからアクセスするプロトコルであり、DNS(Domain Name System)情報に似た\方式でInternetに伝えられます。このパッケージはslapdやslurpdサーバ、移行スクリプトや関連するファイルを含んでいます。
  107. %if %{with sql}
  108. %package servers-sql
  109. Summary: OpenLDAP server SQL support module.
  110. Summary(ja): SQLサポートモジュールを含んだOpenLDAPサーバ
  111. Group: servers
  112. Requires(post): openldap-servers = %{version}-%{release}
  113. %description servers-sql
  114. OpenLDAP is an open-source suite of LDAP (Lightweight Directory Access
  115. Protocol) applications and development tools. LDAP is a set of
  116. protocols for accessing directory services (usually phone book style
  117. information, but other information is possible) over the Internet,
  118. similar to the way DNS (Domain Name System) information is propagated
  119. over the Internet. This package contains a loadable module which the
  120. slapd server can use to read data from an RDBMS.
  121. %description servers-sql -l ja
  122. OpenLDAPはオープンソースなLDAP (Lightweight Directory Access Protocol)アプリケー
  123. ションと開発ツール集です。LDAPはディレクトリサービス(電話帳の様な情報や他の情報
  124. )にInternelからアクセスするプロトコルであり、DNS(Domain Name System)情報に似た
  125. 方式でInternetに伝えられます。
  126. このパッケージはslapdサーバがRDBMSからデータを読み込むためのモジュールを含んでいます。
  127. %endif
  128. %package clients
  129. Summary: Client programs for OpenLDAP.
  130. Summary(ja): OpenLDAP のクライアントプログラム.
  131. Requires(post): openldap = %{version}-%{release}
  132. Group: admin-tools
  133. %description clients
  134. OpenLDAP is an open source suite of LDAP (Lightweight Directory Access
  135. Protocol) applications and development tools. LDAP is a set of
  136. protocols for accessing directory services (usually phone book style
  137. information, but other information is possible) over the Internet,
  138. similar to the way DNS (Domain Name System) information is propagated
  139. over the Internet. The openldap-clients package contains the client
  140. programs needed for accessing and modifying OpenLDAP directories.
  141. %description clients -l ja
  142. OpenLDAPはオープンソースなLDAP (Lightweight Directory Access Protocol)アプリケーションと開発ツール集です。LDAPはディレクトリサービス(電話帳の様な情報や他の情報)にInternelからアクセスするプロトコルであり、DNS(Domain Name System)情報に似た\方式でInternetに伝えられます。openldap-clientsパッケージはOpenLDAPディレクトリにアクセスしたり、修正したりするためのクライアントプログラムを含んでいます。
  143. ## to build compat32 for x86_64 architecture support
  144. %package -n compat32-%{name}
  145. Summary: libraries for OpenLDAP.
  146. Group: system,legacy
  147. %description -n compat32-%{name}
  148. OpenLDAP is an open source suite of LDAP (Lightweight Directory Access
  149. Protocol) applications and development tools. LDAP is a set of
  150. protocols for accessing directory services (usually phone book style
  151. information, but other information is possible) over the Internet,
  152. similar to the way DNS (Domain Name System) information is propagated
  153. over the Internet. The openldap package contains configuration files,
  154. libraries and documentation for OpenLDAP.
  155. # %package -n compat32-%{name}-servers-sql
  156. # Summary: OpenLDAP server SQL support module.
  157. # Group: System Environment/Libraries
  158. # %description -n compat32-%{name}-servers-sql
  159. # OpenLDAP is an open-source suite of LDAP (Lightweight Directory Access
  160. # Protocol) applications and development tools. LDAP is a set of
  161. # protocols for accessing directory services (usually phone book style
  162. # information, but other information is possible) over the Internet,
  163. # similar to the way DNS (Domain Name System) information is propagated
  164. # over the Internet. This package contains a loadable module which the
  165. # slapd server can use to read data from an RDBMS.
  166. %package -n compat32-%{name}-devel
  167. Summary: OpenLDAP development libraries and header files.
  168. Group: programming,legacy
  169. %description -n compat32-%{name}-devel
  170. The openldap-devel package includes the development libraries and
  171. header files needed for compiling applications that use LDAP
  172. (Lightweight Directory Access Protocol) internals. LDAP is a set of
  173. protocols for enabling directory services over the Internet. Install
  174. this package only if you plan to develop or will need to compile
  175. customized LDAP clients.
  176. %debug_package
  177. %prep
  178. %setup -q -c -a 0 -a 11
  179. pushd openldap-%{version}
  180. %patch0 -p1
  181. %patch1 -p1
  182. %patch3 -p1
  183. %patch4 -p1
  184. %patch5 -p1
  185. %patch6 -p1
  186. %patch7 -p1
  187. %patch8 -p1
  188. %patch9 -p1
  189. # security
  190. # build smbk5pwd with other overlays
  191. ln -s ../../../contrib/slapd-modules/smbk5pwd/smbk5pwd.c servers/slapd/overlays
  192. mv contrib/slapd-modules/smbk5pwd/README contrib/slapd-modules/smbk5pwd/README.smbk5pwd
  193. # build allop with other overlays
  194. ln -s ../../../contrib/slapd-modules/allop/allop.c servers/slapd/overlays
  195. mv contrib/slapd-modules/allop/README contrib/slapd-modules/allop/README.allop
  196. mv contrib/slapd-modules/allop/slapo-allop.5 doc/man/man5/slapo-allop.5
  197. mv servers/slapd/back-perl/README{,.back_perl}
  198. # fix documentation encoding
  199. for filename in doc/drafts/draft-ietf-ldapext-acl-model-xx.txt; do
  200. iconv -f iso-8859-1 -t utf-8 "$filename" > "$filename.utf8"
  201. mv "$filename.utf8" "$filename"
  202. done
  203. popd
  204. pushd openldap-ppolicy-check-password-%{check_password_version}
  205. %patch90 -p1
  206. %patch91 -p1
  207. popd
  208. %global optflags %(echo %{optflags} | sed -e 's/-Werror=format-security/-Wformat -Wformat-security -Werror=format-security/')
  209. %build
  210. %set_build_flags
  211. # enable experimental support for LDAP over UDP (LDAP_CONNECTIONLESS)
  212. export CFLAGS="${CFLAGS} ${LDFLAGS} -Wl,--as-needed -Wl,-z,now -DLDAP_CONNECTIONLESS"
  213. # disable legacy hash algorithm
  214. export CFLAGS="${CFLAGS} -DOPENSSL_NO_MD2"
  215. pushd openldap-%{version}
  216. %configure \
  217. --enable-debug \
  218. --enable-dynamic \
  219. --enable-versioning \
  220. \
  221. --enable-dynacl \
  222. --enable-cleartext \
  223. --enable-crypt \
  224. --enable-lmpasswd \
  225. --enable-spasswd \
  226. --enable-modules \
  227. --enable-rewrite \
  228. --enable-rlookups \
  229. --enable-slapi \
  230. --disable-slp \
  231. \
  232. --enable-backends=mod \
  233. --enable-bdb=yes \
  234. --enable-hdb=yes \
  235. --enable-mdb=yes \
  236. --enable-monitor=yes \
  237. --disable-ndb \
  238. %if %{with sql}
  239. --enable-sql=yes \
  240. %else
  241. --disable-sql \
  242. %endif
  243. --disable-wt \
  244. \
  245. --enable-overlays=mod \
  246. \
  247. --disable-static \
  248. \
  249. --enable-balancer=mod \
  250. \
  251. --with-cyrus-sasl \
  252. --without-fetch \
  253. --with-threads \
  254. --with-pic \
  255. --with-gnu-ld \
  256. \
  257. --libexecdir=%{_libdir}
  258. %make_build
  259. popd
  260. pushd openldap-ppolicy-check-password-%{check_password_version}
  261. make LDAP_INC="-I../openldap-%{version}/include \
  262. -I../openldap-%{version}/servers/slapd \
  263. -I../openldap-%{version}/build-servers/include"
  264. popd
  265. %install
  266. mkdir -p %{buildroot}%{_libdir}/
  267. pushd openldap-%{version}
  268. make install DESTDIR=%{buildroot} STRIP_OPTS=""
  269. popd
  270. # install check_password module
  271. pushd openldap-ppolicy-check-password-%{check_password_version}
  272. mv check_password.so check_password.so.%{check_password_version}
  273. ln -s check_password.so.%{check_password_version} %{buildroot}%{_libdir}/openldap/check_password.so
  274. install -m 755 check_password.so.%{check_password_version} %{buildroot}%{_libdir}/openldap/
  275. # install -m 644 README %{buildroot}%{_libdir}/openldap
  276. install -d -m 755 %{buildroot}%{_sysconfdir}/openldap
  277. cat > %{buildroot}%{_sysconfdir}/openldap/check_password.conf <<EOF
  278. # OpenLDAP pwdChecker library configuration
  279. #useCracklib 1
  280. #minPoints 3
  281. #minUpper 0
  282. #minLower 0
  283. #minDigit 0
  284. #minPunct 0
  285. EOF
  286. mv README{,.check_pwd}
  287. popd
  288. # setup directories for TLS certificates
  289. mkdir -p %{buildroot}%{_sysconfdir}/openldap/certs
  290. # Create the data directory.
  291. install -m 0700 -d $RPM_BUILD_ROOT/var/lib/ldap
  292. # Create the new run directory
  293. install -m 0755 -d $RPM_BUILD_ROOT/var/run/openldap
  294. # install default ldap.conf (customized)
  295. rm -f %{buildroot}%{_sysconfdir}/openldap/ldap.conf
  296. install -m 0644 %SOURCE5 %{buildroot}%{_sysconfdir}/openldap/ldap.conf
  297. # setup maintainance scripts
  298. mkdir -p %{buildroot}%{_libexecdir}
  299. install -m 0755 -d %{buildroot}%{_libexecdir}/openldap
  300. install -m 0644 %SOURCE50 %{buildroot}%{_libexecdir}/openldap/functions
  301. install -m 0755 %SOURCE52 %{buildroot}%{_libexecdir}/openldap/check-config.sh
  302. # remove build root from config files and manual pages
  303. perl -pi -e "s|%{buildroot}||g" %{buildroot}%{_sysconfdir}/openldap/*.conf
  304. perl -pi -e "s|%{buildroot}||g" %{buildroot}%{_mandir}/*/*.*
  305. # we don't need the default files -- RPM handles changes
  306. rm -f %{buildroot}%{_sysconfdir}/openldap/*.default
  307. rm -f %{buildroot}%{_sysconfdir}/openldap/schema/*.default
  308. %if %{with systemd}
  309. # install an init script for the servers
  310. mkdir -p %{buildroot}%{_unitdir}
  311. install -m 0644 %{SOURCE101} %{buildroot}%{_unitdir}/slapd.service
  312. # setup autocreation of runtime directories on tmpfs
  313. mkdir -p %{buildroot}%{_tmpfilesdir}
  314. install -m 0644 %{SOURCE102} %{buildroot}%{_tmpfilesdir}/slapd.conf
  315. install -p -D -m 0644 %{SOURCE103} %{buildroot}%{_sysusersdir}/openldap.conf
  316. %else
  317. # Install an init script for the servers.
  318. mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/rc.d/init.d
  319. install -m 755 $RPM_SOURCE_DIR/ldap.init $RPM_BUILD_ROOT%{_sysconfdir}/rc.d/init.d/ldap
  320. # install syconfig/ldap
  321. mkdir -p %{buildroot}%{_sysconfdir}/sysconfig
  322. install -m 644 %SOURCE2 %{buildroot}%{_sysconfdir}/sysconfig/slapd
  323. %endif
  324. # move slapd out of _libdir
  325. mv %{buildroot}%{_libdir}/slapd %{buildroot}%{_sbindir}/
  326. # setup tools as symlinks to slapd
  327. rm -f %{buildroot}%{_sbindir}/slap{acl,add,auth,cat,dn,index,passwd,test,schema}
  328. rm -f %{buildroot}%{_libdir}/slap{acl,add,auth,cat,dn,index,passwd,test,schema}
  329. for X in acl add auth cat dn index passwd test schema; do ln -s slapd %{buildroot}%{_sbindir}/slap$X ; done
  330. # tweak permissions on the libraries to make sure they're correct
  331. chmod 0755 %{buildroot}%{_libdir}/lib*.so*
  332. chmod 0644 %{buildroot}%{_libdir}/lib*.*a
  333. # slapd.conf(5) is obsoleted since 2.3, see slapd-config(5)
  334. # new configuration will be generated in %%post
  335. mkdir -p %{buildroot}%{_datadir}
  336. install -m 0755 -d %{buildroot}%{_datadir}/openldap-servers
  337. install -m 0644 %SOURCE4 %{buildroot}%{_datadir}/openldap-servers/slapd.ldif
  338. install -m 0750 -d %{buildroot}%{_sysconfdir}/openldap/slapd.d
  339. rm -f %{buildroot}%{_sysconfdir}/openldap/slapd.conf
  340. rm -f %{buildroot}%{_sysconfdir}/openldap/slapd.ldif
  341. # move doc files out of _sysconfdir
  342. mv %{buildroot}%{_sysconfdir}/openldap/schema/README README.schema
  343. chmod 0644 openldap-%{version}/servers/slapd/back-sql/rdbms_depend/timesten/*.sh
  344. # remove files which we don't want packaged
  345. rm -f %{buildroot}%{_libdir}/*.la # because we do not want files in %{_libdir}/openldap/ removed, yet
  346. %pre servers
  347. # create ldap user and group
  348. getent group ldap &>/dev/null || groupadd -r -g 55 ldap
  349. getent passwd ldap &>/dev/null || \
  350. useradd -r -g ldap -u 55 -d %{_sharedstatedir}/ldap -s /sbin/nologin -c "OpenLDAP server" ldap
  351. exit 0
  352. %post servers
  353. %if %{with systemd}
  354. %systemd_post slapd.service
  355. %endif
  356. # generate configuration if necessary
  357. if [[ ! -f %{_sysconfdir}/openldap/slapd.d/cn=config.ldif && \
  358. ! -f %{_sysconfdir}/openldap/slapd.conf
  359. ]]; then
  360. # if there is no configuration available, generate one from the defaults
  361. mkdir -p %{_sysconfdir}/openldap/slapd.d/ &>/dev/null || :
  362. /usr/sbin/slapadd -F %{_sysconfdir}/openldap/slapd.d/ -n0 -l %{_datadir}/openldap-servers/slapd.ldif
  363. chown -R ldap:ldap %{_sysconfdir}/openldap/slapd.d/
  364. %if %{with systemd}
  365. systemctl try-restart slapd.service &>/dev/null
  366. %else
  367. /sbin/service ldap condrestart > /dev/null 2>&1 || :
  368. %endif
  369. fi
  370. # restart after upgrade
  371. if [ $1 -ge 1 ]; then
  372. %if %{with systemd}
  373. systemctl condrestart slapd.service &>/dev/null || :
  374. %else
  375. /sbin/service ldap condrestart > /dev/null 2>&1 || :
  376. %endif
  377. fi
  378. exit 0
  379. %preun servers
  380. %if %{with systemd}
  381. %systemd_preun slapd.service
  382. %else
  383. if [ "$1" = "0" -o -x /bin/systemctl ] ; then
  384. /sbin/service ldap stop > /dev/null 2>&1 || :
  385. /sbin/chkconfig --del ldap
  386. # Openldap-servers are being removed from system.
  387. # Do not touch the database! Older versions of this
  388. # package attempted to store database in LDIF format, so
  389. # it can be restored later - but it's up to the administrator
  390. # to save the database, if he/she wants so.
  391. fi
  392. %endif
  393. %postun servers
  394. %if %{with systemd}
  395. %systemd_postun_with_restart slapd.service
  396. %else
  397. if [ $1 -ge 1 ] ; then
  398. /sbin/service ldap condrestart > /dev/null 2>&1 || :
  399. fi
  400. %endif
  401. %files
  402. %license openldap-%{version}/{COPYRIGHT,LICENSE}
  403. %doc openldap-%{version}/{ANNOUNCEMENT,CHANGES,README}
  404. %dir %{_sysconfdir}/openldap
  405. %dir %{_sysconfdir}/openldap/certs
  406. %config(noreplace) %{_sysconfdir}/openldap/ldap.conf
  407. %dir %{_libexecdir}/openldap/
  408. %{_libdir}/liblber*.so.*
  409. %{_libdir}/libldap*.so.*
  410. %{_libdir}/libslapi*.so.*
  411. %{_mandir}/man5/ldif.5*
  412. %{_mandir}/man5/ldap.conf.5*
  413. %files servers
  414. %doc openldap-%{version}/contrib/slapd-modules/smbk5pwd/README.smbk5pwd
  415. %doc openldap-%{version}/doc/guide/admin/*.html
  416. %doc openldap-%{version}/doc/guide/admin/*.png
  417. %doc openldap-%{version}/servers/slapd/back-perl/SampleLDAP.pm
  418. %doc openldap-%{version}/servers/slapd/back-perl/README.back_perl
  419. %doc openldap-%{version}/servers/slapd/back-perl/README.back_perl
  420. %doc openldap-ppolicy-check-password-%{check_password_version}/README.check_pwd
  421. %doc README.schema
  422. %config(noreplace) %dir %attr(0750,ldap,ldap) %{_sysconfdir}/openldap/slapd.d
  423. %config(noreplace) %{_sysconfdir}/openldap/schema
  424. %config(noreplace) %{_sysconfdir}/openldap/check_password.conf
  425. %if %{with systemd}
  426. %{_unitdir}/slapd.service
  427. %{_tmpfilesdir}/slapd.conf
  428. %{_sysusersdir}/openldap.conf
  429. %else
  430. %attr(0755,root,root) %config %{_sysconfdir}/rc.d/init.d/ldap
  431. %config(noreplace) %{_sysconfdir}/sysconfig/slapd
  432. %endif
  433. %attr(0700,ldap,ldap) %dir /var/lib/ldap
  434. %attr(0755,ldap,ldap) %dir /var/run/openldap
  435. %{_datadir}/openldap-servers/
  436. %{_libdir}/openldap/accesslog*
  437. %{_libdir}/openldap/allop*
  438. %{_libdir}/openldap/auditlog*
  439. %{_libdir}/openldap/autoca*
  440. %{_libdir}/openldap/back_asyncmeta*
  441. %{_libdir}/openldap/back_dnssrv*
  442. %{_libdir}/openldap/back_ldap*
  443. %{_libdir}/openldap/back_meta*
  444. %{_libdir}/openldap/back_null*
  445. %{_libdir}/openldap/back_passwd*
  446. %{_libdir}/openldap/back_relay*
  447. %{_libdir}/openldap/back_sock*
  448. %{_libdir}/openldap/back_perl*
  449. %{_libdir}/openldap/collect*
  450. %{_libdir}/openldap/constraint*
  451. %{_libdir}/openldap/dds*
  452. %{_libdir}/openldap/deref*
  453. %{_libdir}/openldap/dyngroup*
  454. %{_libdir}/openldap/dynlist*
  455. %{_libdir}/openldap/home*
  456. %{_libdir}/openldap/lloadd*
  457. %{_libdir}/openldap/memberof*
  458. %{_libdir}/openldap/nestgroup*
  459. %{_libdir}/openldap/otp*
  460. %{_libdir}/openldap/pcache*
  461. %{_libdir}/openldap/ppolicy*
  462. %{_libdir}/openldap/refint*
  463. %{_libdir}/openldap/remoteauth*
  464. %{_libdir}/openldap/retcode*
  465. %{_libdir}/openldap/rwm*
  466. %{_libdir}/openldap/seqmod*
  467. %{_libdir}/openldap/smbk5pwd*
  468. %{_libdir}/openldap/sssvlv*
  469. %{_libdir}/openldap/syncprov*
  470. %{_libdir}/openldap/translucent*
  471. %{_libdir}/openldap/unique*
  472. %{_libdir}/openldap/valsort*
  473. %{_libdir}/openldap/check_password*
  474. %{_libexecdir}/openldap/functions
  475. %{_libexecdir}/openldap/check-config.sh
  476. %{_sbindir}/sl*
  477. %{_mandir}/man8/*
  478. %{_mandir}/man5/lloadd.conf.5*
  479. %{_mandir}/man5/slapd*.5*
  480. %{_mandir}/man5/slapo-*.5*
  481. %{_mandir}/man5/slappw-argon2.5*
  482. # obsolete configuration
  483. %ghost %config(noreplace,missingok) %attr(0640,ldap,ldap) %{_sysconfdir}/openldap/slapd.conf
  484. %if %{with sql}
  485. %files servers-sql
  486. %doc openldap-%{version}/servers/slapd/back-sql/docs/*
  487. %doc openldap-%{version}/servers/slapd/back-sql/rdbms_depend
  488. %{_libdir}/openldap/back_sql*
  489. %endif
  490. %files clients
  491. %{_bindir}/*
  492. %{_mandir}/man1/*
  493. %files devel
  494. %doc openldap-%{version}/doc/drafts openldap-%{version}/doc/rfc
  495. %{_libdir}/lib*.so
  496. %{_includedir}/*
  497. %{_libdir}/pkgconfig/lber.pc
  498. %{_libdir}/pkgconfig/ldap.pc
  499. %{_mandir}/man3/*
  500. ## to build compat32 for x86_64 architecture support
  501. %if %{build_compat32}
  502. %files -n compat32-%{name}
  503. %{_libdir}/libl*.so.*
  504. # %files -n compat32-%{name}-servers-sql
  505. # %attr(0755,root,root) %{_libdir}/openldap/back_sql.la
  506. # %attr(0755,root,root) %{_libdir}/openldap/back_sql*.so.*
  507. %files -n compat32-%{name}-devel
  508. %{_libdir}/lib*.so
  509. %endif
  510. %changelog
  511. * Fri Jun 13 2025 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 2.6.10-1
  512. - new upstream release.
  513. * Thu Jun 20 2024 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 2.6.8-1
  514. - new upstream release.
  515. * Wed Jun 07 2023 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 2.6.4-1
  516. - new upstream release.
  517. * Fri Nov 11 2022 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 2.6.3-1
  518. - new upstream release.
  519. * Sun Nov 21 2021 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 2.4.59-2
  520. - rebuilt with perl-5.34.0.
  521. * Tue Oct 05 2021 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 2.4.59-1
  522. - new upstream release.
  523. - built with openssl-3.0.0.
  524. - imported Patch50-64 from rawhide.
  525. * Thu Jun 03 2021 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 2.4.58-1
  526. - new upstream release.
  527. - dropped ldconfig scriptlets.
  528. - dropped Patch2000: fixed in upstream.
  529. * Thu Mar 04 2021 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 2.4.57-2
  530. - imported Patch2000 from rawhide to fix CVE-2021-27212.
  531. * Sat Jan 30 2021 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 2.4.57-1
  532. - new upstream release.
  533. * Sat Dec 12 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 2.4.56-1
  534. - new upstream release.
  535. * Sun Sep 13 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 2.4.53-1
  536. - new upstream release.
  537. - added systemd support (disabled as default).
  538. * Sat May 18 2019 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 2.4.46-3
  539. - rebuilt with perl-5.26.
  540. * Mon May 13 2019 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 2.4.46-2
  541. - added BR:libxcrypt-devel.
  542. - added BR:libnsl2-devel.
  543. - gdbm is no longer needed.
  544. * Fri Nov 02 2018 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 2.4.46-1
  545. - new upstream release.
  546. - rebuilt with openssl-1.1.1.
  547. - dropped too old MigrationTools.
  548. - dropped all patches and imported from rawhide.
  549. * Mon Mar 14 2016 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 2.4.44-1
  550. - new upstream release and built with openssl 1.0.2g
  551. - update patch0
  552. - drop patch1000,1001 (are included in new release)
  553. * Fri Mar 6 2015 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 2.4.40-2
  554. - added patch1000,1001 to fix CVE-2015-1545,1546.
  555. * Sat Feb 28 2015 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 2.4.40-1
  556. - new upstream release.
  557. * Fri Feb 27 2015 Ryoichi INAGAKI <ryo1@toki.waseda.jp> 2.4.23-6
  558. - add patch1146 for fix CVE-2013-4449
  559. * Tue Dec 16 2014 Ryoichi INAGAKI <ryo1@toki.waseda.jp> 2.4.23-5
  560. - added Patch700 to build with libdb 5.3.28
  561. * Thu Jan 9 2014 IWAI, Masaharu <iwaim.sub@gmail.com> 2.4.23-4
  562. - build with cyrus-sasl 2.1.26
  563. * Sun Dec 9 2012 IWAI, Masaharu <iwai@alib.jp> 2.4.23-3
  564. - SECURITY FIX, #2501
  565. - patches from CentOS 6.3; openldap 2.4.23-26.el6_3.2
  566. - CVE-2011-1024: add openldap-cve-ppolicy-forward-updates.patch (Patch1112)
  567. - CVE-2011-1025: add openldap-cve-ndb-bind-rootdn.patch (Patch1113)
  568. - CVE-2012-1164: add openldap-cve-relay-rwm-translucent.patch (Patch1141)
  569. - CVE-2012-2668: add openldap-cve-nss-cipher-suite-ignored.patch (Patch1144)
  570. - patch based CentOS 6.3; openldap 2.4.23-26.el6_3.2
  571. - CVE-2012-2668: add openldap-cve-nss-default-cipher-suite-always-selected.patch (Patch1145)
  572. - fix document file path for servers sub package
  573. * Sat Apr 9 2011 Ryoichi INAGAKI <ryo1@bc.wakwak.com> 2.4.23-2
  574. - added --with-odbc=unixodbc to configure
  575. * Wed Apr 6 2011 IWAI, Masaharu <iwai@alib.jp> 2.4.23-1
  576. - new upstream release
  577. - update MigrationTools 47
  578. * Wed Jan 12 2011 Yoji TOYODA <bsyamato@sea.plala.or.jp> - 2.4.21-5
  579. - change %%define __perl_requires instead of __find_requires
  580. * Tue Jan 11 2011 Yoji TOYODA <bsyamato@sea.plala.or.jp> - 2.4.21-4
  581. - rebuild with openssl-1.0.0c
  582. * Fri Feb 12 2010 MATSUBAYASHI Kohji <shaolin@vinelinux.org> - 2.4.21-3
  583. - rebuilt with gcc-4.4.3-3 on ppc
  584. * Fri Feb 5 2010 MATSUBAYASHI Kohji <shaolin@vinelinux.org> - 2.4.21-2
  585. - rebuilt with rpm-4.8.0-3 (on ppc)
  586. * Tue Feb 02 2010 Daisuke SUZUKI <daisuke@linux.or.jp> 2.4.21-1
  587. - new upstream release
  588. - rebuild with db4-4.8.0
  589. - use Requires(post/pre) instead of Prereq
  590. * Sun Dec 20 2009 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 2.4.16-4
  591. - rebuild
  592. * Tue Nov 3 2009 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 2.4.16-3
  593. - add BuildConflicts: libicu-devel
  594. * Mon Nov 2 2009 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 2.4.16-2
  595. - add Patch1000 for fix CVE-2009-3767 (openssl null char)
  596. - add --with-gssapi into configure
  597. - drop --without-kerberos (it is old configure option)
  598. * Wed Aug 05 2009 NAKAMURA Kenta <kenta@vinelinux.org> 2.4.16-1
  599. - new upstream release
  600. * Sun Jul 05 2009 Munehiro Yamamoto <munepi@cg8.so-net.ne.jp> 2.4.11-6
  601. - dropped compat32-%%{name}-servers-sql
  602. * Sat Jul 04 2009 Munehiro Yamamoto <munepi@cg8.so-net.ne.jp> 2.4.11-5
  603. - added compat32 subpackages
  604. * Wed Apr 15 2009 Daisuke SUZUKI <daisuke@linux.or.jp> 2.4.11-4
  605. - rebuild with libtool-2.2.6a
  606. * Sat Apr 04 2009 NAKAMURA Kenta <kenta@vinelinux.org> 2.4.11-3
  607. - use filter-requires-openldap.sh instead of find-requires
  608. * Wed Apr 01 2009 NAKAMURA Kenta <kenta@vinelinux.org> 2.4.11-2
  609. - reverted a scriptlet that dropped in 2.3.24-0vl4
  610. * Sun Mar 01 2009 NAKAMURA Kenta <kenta@vinelinux.org> 2.4.11-1
  611. - new upstream release
  612. - applied patches from fedora's package (openldap-2.4.12-1)
  613. * Sun Mar 30 2008 Ryoichi INAGAKI <ryo1@bc.wakwak.com> 2.3.41-1vl5
  614. - updated to 2.3.41 (Patch10 and 11 were merged into upstream)
  615. * Fri May 18 2007 Daisuke SUZUKI <daisuke@linux.or.jp> 2.3.27-0vl5
  616. - rebuild with new openssl
  617. * Sat May 12 2007 Ryoichi INAGAKI <ryo1@bc.wakwak.com> 2.3.27-0vl4
  618. - rebuilt with new toolchain/bdb 4.3
  619. * Tue Dec 26 2006 Ryoichi INAGAKI <ryo1@bc.wakwak.com> 2.3.27-0vl3
  620. - rebuilt for VineSeed
  621. * Thu Dec 21 2006 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 2.3.27-0vl2.3
  622. - add Vendor/Distribution tag
  623. * Wed Dec 13 2006 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 2.3.27-0vl2.2
  624. - add patch11 for fix krbv4_ldap_auth issue
  625. * Fri Nov 24 2006 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 2.3.27-0vl2.1
  626. - add patch10 for fix CVE-2006-5779
  627. * Sun Sep 03 2006 NAKAMURA Kenta <kenta@vinelinux.org> 2.3.27-0vl2
  628. - use filter-requires-openldap.sh instead of find-requires
  629. * Sun Aug 27 2006 NAKAMURA Kenta <kenta@vinelinux.org> 2.3.27-0vl1
  630. - new upstream release
  631. * Sat Aug 26 2006 NAKAMURA Kenta <kenta@vinelinux.org> 2.3.24-0vl4
  632. - restored rfc822-MailMember.schema
  633. - update config.patch
  634. - removed a scriptlet that save and restore the database
  635. * Sat Aug 19 2006 NAKAMURA Kenta <kenta@vinelinux.org> 2.3.24-0vl3
  636. - removed internal bdb
  637. - removed autoconf-2.13.1 and automake-1.4a
  638. * Tue Jul 11 2006 NAKAMURA Kenta <kenta@vinelinux.org> 2.3.24-0vl2
  639. - removed compat-openldap subpackage
  640. * Sun Jul 02 2006 Satoshi MACHINO <machino@vinelinux.org> 2.3.24-0vl1
  641. - New upstream release
  642. - merged to fedora's package(openldap-2.3.24-2)
  643. -- build sql backend as a loadable module
  644. -- move ucdata to the -servers subpackage where it belongs
  645. -- add compat-openldap subpackage
  646. -- update administrator guide
  647. -- build a separate, static set of libraries for openldap-devel with the
  648. non-standard ntlm bind patch applied, for use by
  649. the evolution-connector package (#125579), and installing them under
  650. %%{evolution_connector_prefix} (%{evolution_connector_prefix})
  651. -- add libtool-ltdl-devel buildprereqs
  652. -- Upgrade internal bdb to db-4.4.20. For a clean upgrade, this will
  653. require that users slapcat their databases into a temp file, move
  654. /var/lib/ldap someplace safe, upgrade the openldap rpms, then
  655. slapadd the temp file.
  656. -- fix ldap.init
  657. -- add two upstream patches for db-4.4.20
  658. * Wed Nov 2 2005 Ryoichi INAGAKI <ryo1@bc.wakwak.com> 2.1.30-0vl2
  659. - rebuild for VineSeed Plus
  660. - added Japanese summary
  661. * Sat Apr 17 2004 Satoshi MACHINO <machino@vinelinux.org> 2.1.30-0vl1
  662. - new upstream version (openldap-2.1.30)
  663. -- Fixed slapd userdb checkpass bub (ITS#3048)
  664. -- Fixed back-ldbm IDL delete bug (ITS#3048)
  665. -- Fixed libldap schema parsing bug (ITS#2920, ITS#3065)
  666. -- Fixed liblutil NS MTA MD5 passwd len bug (ITS#2899)
  667. -- Removed lint (ITS#3086)
  668. -- Documentation updated slapd.conf(5) manpage (ITS#2525)
  669. * Thu Apr 08 2004 Satoshi MACHINO <machino@vinelinux.org> 2.1.29-0vl2
  670. - fixed ldap.ini
  671. * Sun Mar 28 2004 Satoshi MACHINO <machino@vinelinux.org> 2.1.29-0vl1
  672. - new upstream version (openldap-2.1.29)
  673. * Wed Mar 24 2004 Satoshi MACHINO <machino@vinelinux.org> 2.1.28-0vl1
  674. - new upstream version (openldap-2.1.28)
  675. * Mon Mar 22 2004 Satoshi MACHINO <machino@vinelinux.org> 2.1.27-0vl1
  676. - new upstream version (openldap-2.1.27)
  677. * Sat Jan 24 2004 Satoshi MACHINO <machino@vinelinux.org> 2.1.26-0vl1
  678. - new upstream version (openldap-2.1.26)
  679. - don't use libtool in make
  680. * Sun Oct 26 2003 Satoshi MACHINO <machino@vinelinux.org> 2.1.23-0vl1
  681. - new upstream version (openldap-2.1.23)
  682. - updated migration tools to version 45
  683. - used libtool
  684. * Sun Jul 20 2003 Satoshi MACHINO <machino@vinelinux.org> 2.1.22-0vl2
  685. - for VineSeedPlus
  686. - fixed BuildPreReq
  687. * Sat Jul 19 2003 Satoshi MACHINO <machino@vinelinux.org> 2.1.22-0vl1
  688. - for VinePlus
  689. - new upstream version (openldap-2.1.22)
  690. * Thu May 29 2003 Satoshi MACHINO <machino@vinelinux.org> 2.1.21-0vl1
  691. - new upstream version (openldap-2.1.21)
  692. * Tue May 20 2003 Satoshi MACHINO <machino@vinelinux.org> 2.1.20-0vl1
  693. - new upstream version
  694. * Thu May 15 2003 Satoshi MACHINO <machino@vinelinux.org> 2.1.19-1vl1
  695. - new upstream version
  696. - merged spec file to 2.1.19-1
  697. -- switch to db with crypto
  698. -- install the db utils for the bundled libdb as %%{_sbindir}/slapd_db_*
  699. -- install slapcat/slapadd from 2.0.x for migration purposes
  700. * Mon Jan 27 2003 Satoshi MACHINO <machino@vinelinux.org> 2.1.12-0vl1
  701. - updated to openldap-2.1.12
  702. -- dropped ldapfriendly
  703. * Fri Sep 06 2002 Satoshi MACHINO <machino@vinelinux.org> 2.1.4-0vl1
  704. - updated to openldap-2.1.4
  705. - updated guide.html
  706. * Fri Sep 06 2002 Satoshi MACHINO <machino@vinelinux.org> 2.1.3-4vl1
  707. - updated to openldap-2.1.3
  708. - added db-4.0.14
  709. - updated migration tools to version 44
  710. - merged openldap-2.1.3-4
  711. -- updated patch0, patch1, patch3 and patch6
  712. -- dropped patch7 and patch10
  713. -- enable the ldbm/berkeley backend as well
  714. -- use an ldbm/berkeley database as the default
  715. -- don't install slapadd-gdbm
  716. -- allow ldapv2 binds by default
  717. -- set TLS_CACERTFILE in the default ldap.conf file
  718. * Tue Jun 11 2002 Satoshi MACHINO <machino@vinelinux.org> 2.0.25-0vl1
  719. - updated to openldap-2.0.25
  720. * Mon Jun 10 2002 Satoshi MACHINO <machino@vinelinux.org> 2.0.24-0vl1
  721. - updated to openldap-2.0.24
  722. - updated migration tools to version 40
  723. - dropped autoconf source
  724. - dropped some patches
  725. * Sat Feb 16 2002 Satoshi MACHINO <machino@vinelinux.org> 2.0.23-0vl1
  726. - updated openldap-2.0.23
  727. * Wed Feb 06 2002 Satoshi MACHINO <machino@vinelinux.org> 2.0.22-0vl1
  728. - updated openldap-2.0.22
  729. * Mon Jan 21 2002 Satoshi MACHINO <machino@vinelinux.org> 2.0.21-0vl1
  730. - updated openldap-2.0.21
  731. * Wed Nov 07 2001 Satoshi MACHINO <machino@vinelinux.org> 2.0.18-0vl1
  732. - updated openldap-2.0.18
  733. * Sun Oct 14 2001 Satoshi MACHINO <machino@vinelinux.org> 2.0.17-0vl1
  734. - updated openldap-2.0.17
  735. - updated MigrationTools-38-instdir.patch
  736. - updated openldap-2.0.17-config.patch
  737. - removed openldap-2.0.3-krb5-1.1.patch
  738. * Sat Sep 22 2001 Satoshi MACHINO <machino@vinelinux.org> 2.0.14-1vl1
  739. - update to migration tools 39
  740. - removed patch libtool.patch and linkage.patch
  741. * Wed Sep 19 2001 Satoshi MACHINO <machino@vinelinux.org> 2.0.14-0vl0
  742. - updated openldap-2.0.14
  743. * Mon Jul 16 2001 MATSUBAYASHI 'Shaolin' Kohji <shaolin@vinelinux.org>
  744. - 2.0.11-0vl2
  745. - rebuilt with openssl-0.9.6b
  746. * Sun May 27 2001 Satoshi MACHINO <machino@vinelinux.org> 2.0.11-0vl1
  747. - updated
  748. * Thu Apr 12 2001 Akira TAGOH <tagoh@gnome.gr.jp> 2.0.7-14vl3
  749. - Fixed resolve libraries path.
  750. * Wed Apr 11 2001 Satoshi MACHINO <machino@vinelinux.org> 2.0.7-14vl2
  751. - added openldap-2.0.7-config-vine.patch
  752. - removed openldap-2.0.7-config.patch
  753. * Tue Apr 10 2001 Satoshi MACHINO <machino@vinelinux.org> 2.0.7-14vl1
  754. - merged Rawhide's OpenLDAP Package
  755. back out pidfile patches, which interact weirdly with Linux threads
  756. mark non-standard schema as such by moving them to a different directory
  757. update to MigrationTools 36, adds netgroup support
  758. fix thinko in that last patch
  759. try to work around some buffering problems
  760. gettextize the init script
  761. move the RFCs to the base package (#21701)
  762. add support for additional OPTIONS, SLAPD_OPTIONS, and SLURPD_OPTIONS in
  763. a /etc/sysconfig/ldap file (#23549)
  764. change automount object OID from 1.3.6.1.1.1.2.9 to 1.3.6.1.1.1.2.13,
  765. per mail from the ldap-nis mailing list
  766. force -fPIC so that shared libraries don't fall over
  767. add Norbert Klasen's patch (via Del) to fix searches using ldaps URLs
  768. (OpenLDAP ITS #889)
  769. add "-h ldaps:///" to server init when TLS is enabled, in order to support
  770. ldaps in addition to the regular STARTTLS (suggested by Del)
  771. correct mismatched-dn-cn bug in migrate_automount.pl
  772. update to the correct OIDs for automount and automountInformation
  773. add notes on upgrading
  774. * Sat Nov 25 2000 Satoshi MACHINO <machino@vinelinux.org> 2.0.7-1vl2
  775. - fixed VersionedDependencies to used _noVersionedDependencies 1 in .rpmmacros
  776. * Sat Nov 18 2000 MACHINO, satoshi <machino@vinelinux.org> 2.0.7-1vl1
  777. - build for Vine Linux
  778. - removed kerberos
  779. - fixed config dir
  780. - fixed _sysconfdir
  781. * Tue Nov 7 2000 Nalin Dahyabhai <nalin@redhat.com>
  782. - update to 2.0.7
  783. - drop chdir patch (went mainstream)
  784. * Thu Nov 2 2000 Nalin Dahyabhai <nalin@redhat.com>
  785. - change automount object classes from auxiliary to structural
  786. * Tue Oct 31 2000 Nalin Dahyabhai <nalin@redhat.com>
  787. - update to Migration Tools 27
  788. - change the sense of the last simple patch
  789. * Wed Oct 25 2000 Nalin Dahyabhai <nalin@redhat.com>
  790. - reorganize the patch list to separate MigrationTools and OpenLDAP patches
  791. - switch to Luke Howard's rfc822MailMember schema instead of the aliases.schema
  792. - configure slapd to run as the non-root user "ldap" (#19370)
  793. - chdir() before chroot() (we don't use chroot, though) (#19369)
  794. - disable saving of the pid file because the parent thread which saves it and
  795. the child thread which listens have different pids
  796. * Wed Oct 11 2000 Nalin Dahyabhai <nalin@redhat.com>
  797. - add missing required attributes to conversion scripts to comply with schema
  798. - add schema for mail aliases, autofs, and kerberosSecurityObject rooted in
  799. our own OID tree to define attributes and classes migration scripts expect
  800. - tweak automounter migration script
  801. * Mon Oct 9 2000 Nalin Dahyabhai <nalin@redhat.com>
  802. - try adding the suffix first when doing online migrations
  803. - force ldapadd to use simple authentication in migration scripts
  804. - add indexing of a few attributes to the default configuration
  805. - add commented-out section on using TLS to default configuration
  806. * Thu Oct 5 2000 Nalin Dahyabhai <nalin@redhat.com>
  807. - update to 2.0.6
  808. - add buildprereq on cyrus-sasl-devel, krb5-devel, openssl-devel
  809. - take the -s flag off of slapadd invocations in migration tools
  810. - add the cosine.schema to the default server config, needed by inetorgperson
  811. * Wed Oct 4 2000 Nalin Dahyabhai <nalin@redhat.com>
  812. - add the nis.schema and inetorgperson.schema to the default server config
  813. - make ldapadd a hard link to ldapmodify because they're identical binaries
  814. * Fri Sep 22 2000 Nalin Dahyabhai <nalin@redhat.com>
  815. - update to 2.0.4
  816. * Fri Sep 15 2000 Nalin Dahyabhai <nalin@redhat.com>
  817. - remove prereq on /etc/init.d (#17531)
  818. - update to 2.0.3
  819. - add saucer to the included clients
  820. * Wed Sep 6 2000 Nalin Dahyabhai <nalin@redhat.com>
  821. - update to 2.0.1
  822. * Fri Sep 1 2000 Nalin Dahyabhai <nalin@redhat.com>
  823. - update to 2.0.0
  824. - patch to build against MIT Kerberos 1.1 and later instead of 1.0.x
  825. * Tue Aug 22 2000 Nalin Dahyabhai <nalin@redhat.com>
  826. - remove that pesky default password
  827. - change "Copyright:" to "License:"
  828. * Sun Aug 13 2000 Nalin Dahyabhai <nalin@redhat.com>
  829. - adjust permissions in files lists
  830. - move libexecdir from %%{_prefix}/sbin to %%{_sbindir}
  831. * Fri Aug 11 2000 Nalin Dahyabhai <nalin@redhat.com>
  832. - add migrate_automount.pl to the migration scripts set
  833. * Tue Aug 8 2000 Nalin Dahyabhai <nalin@redhat.com>
  834. - build a semistatic slurpd with threads, everything else without
  835. - disable reverse lookups, per email on OpenLDAP mailing lists
  836. - make sure the execute bits are set on the shared libraries
  837. * Mon Jul 31 2000 Nalin Dahyabhai <nalin@redhat.com>
  838. - change logging facility used from local4 to daemon (#11047)
  839. * Thu Jul 27 2000 Nalin Dahyabhai <nalin@redhat.com>
  840. - split off clients and servers to shrink down the package and remove the
  841. base package's dependency on Perl
  842. - make certain that the binaries have sane permissions
  843. * Mon Jul 17 2000 Nalin Dahyabhai <nalin@redhat.com>
  844. - move the init script back
  845. * Thu Jul 13 2000 Nalin Dahyabhai <nalin@redhat.com>
  846. - tweak the init script to only source /etc/sysconfig/network if it's found
  847. * Wed Jul 12 2000 Prospector <bugzilla@redhat.com>
  848. - automatic rebuild
  849. * Mon Jul 10 2000 Nalin Dahyabhai <nalin@redhat.com>
  850. - switch to gdbm; I'm getting off the db merry-go-round
  851. - tweak the init script some more
  852. - add instdir to @INC in migration scripts
  853. * Thu Jul 6 2000 Nalin Dahyabhai <nalin@redhat.com>
  854. - tweak init script to return error codes properly
  855. - change initscripts dependency to one on /etc/init.d
  856. * Tue Jul 4 2000 Nalin Dahyabhai <nalin@redhat.com>
  857. - prereq initscripts
  858. - make migration scripts use mktemp
  859. * Tue Jun 27 2000 Nalin Dahyabhai <nalin@redhat.com>
  860. - do condrestart in post and stop in preun
  861. - move init script to /etc/init.d
  862. * Fri Jun 16 2000 Nalin Dahyabhai <nalin@redhat.com>
  863. - update to 1.2.11
  864. - add condrestart logic to init script
  865. - munge migration scripts so that you don't have to be
  866. /usr/share/openldap/migration to run them
  867. - add code to create pid files in /var/run
  868. * Mon Jun 5 2000 Nalin Dahyabhai <nalin@redhat.com>
  869. - FHS tweaks
  870. - fix for compiling with libdb2
  871. * Thu May 4 2000 Bill Nottingham <notting@redhat.com>
  872. - minor tweak so it builds on ia64
  873. * Wed May 3 2000 Nalin Dahyabhai <nalin@redhat.com>
  874. - more minimalistic fix for bug #11111 after consultation with OpenLDAP team
  875. - backport replacement for the ldapuser patch
  876. * Tue May 2 2000 Nalin Dahyabhai <nalin@redhat.com>
  877. - fix segfaults from queries with commas in them in in.xfingerd (bug #11111)
  878. * Tue Apr 25 2000 Nalin Dahyabhai <nalin@redhat.com>
  879. - update to 1.2.10
  880. - add revamped version of patch from kos@bastard.net to allow execution as
  881. any non-root user
  882. - remove test suite from %%build because of weirdness in the build system
  883. * Wed Apr 12 2000 Nalin Dahyabhai <nalin@redhat.com>
  884. - move the defaults for databases and whatnot to /var/lib/ldap (bug #10714)
  885. - fix some possible string-handling problems
  886. * Mon Feb 14 2000 Bill Nottingham <notting@redhat.com>
  887. - start earlier, stop later.
  888. * Thu Feb 3 2000 Nalin Dahyabhai <nalin@redhat.com>
  889. - auto rebuild in new environment (release 4)
  890. * Tue Feb 1 2000 Nalin Dahyabhai <nalin@redhat.com>
  891. - add -D_REENTRANT to make threaded stuff more stable, even though it looks
  892. like the sources define it, too
  893. - mark *.ph files in migration tools as config files
  894. * Fri Jan 21 2000 Nalin Dahyabhai <nalin@redhat.com>
  895. - update to 1.2.9
  896. * Mon Sep 13 1999 Bill Nottingham <notting@redhat.com>
  897. - strip files
  898. * Sat Sep 11 1999 Bill Nottingham <notting@redhat.com>
  899. - update to 1.2.7
  900. - fix some bugs from bugzilla (#4885, #4887, #4888, #4967)
  901. - take include files out of base package
  902. * Fri Aug 27 1999 Jeff Johnson <jbj@redhat.com>
  903. - missing ;; in init script reload) (#4734).
  904. * Tue Aug 24 1999 Cristian Gafton <gafton@redhat.com>
  905. - move stuff from /usr/libexec to /usr/sbin
  906. - relocate config dirs to /etc/openldap
  907. * Mon Aug 16 1999 Bill Nottingham <notting@redhat.com>
  908. - initscript munging
  909. * Wed Aug 11 1999 Cristian Gafton <gafton@redhat.com>
  910. - add the migration tools to the package
  911. * Fri Aug 06 1999 Cristian Gafton <gafton@redhat.com>
  912. - upgrade to 1.2.6
  913. - add rc.d script
  914. - split -devel package
  915. * Sun Feb 07 1999 Preston Brown <pbrown@redhat.com>
  916. - upgrade to latest stable (1.1.4), it now uses configure macro.
  917. * Fri Jan 15 1999 Bill Nottingham <notting@redhat.com>
  918. - build on arm, glibc2.1
  919. * Wed Oct 28 1998 Preston Brown <pbrown@redhat.com>
  920. - initial cut.
  921. - patches for signal handling on the alpha