ChangeLog

# ChangeLog for net-nds/openldap
# Copyright 1999-2008 Gentoo Foundation; Distributed under the GPL v2
# $Header: /var/cvsroot/gentoo-x86/net-nds/openldap/ChangeLog,v 1.323 2008/06/20 15:48:28 loki_val Exp $

20 Jun 2008; Peter Alfredsen
openldap-2.3.41-r1.ebuild:
Add -D_GNU_SOURCE for using struct ucred. Bug 228457.

*openldap-2.4.10 (11 Jun 2008)

11 Jun 2008; Tiziano Müller
+openldap-2.4.10.ebuild:
Version bump which adds back the contrib modules, fixes the bdb usage,
etc.

*openldap-2.3.41-r1 (21 May 2008)

21 May 2008; Caleb Tennis +openldap-2.3.41-r1.ebuild:
do a revbump. This incorporates fixes from bug 219069 that allows db 4.6 to
be installed on the system while linking against a lower version

18 Mar 2008; Jeroen Roovers openldap-2.3.41.ebuild:
Stable for HPPA (bug #209677).

07 Mar 2008; Steve Dibb openldap-2.3.41.ebuild:
amd64 stable, security bug 209677

05 Mar 2008; Tobias Scherbaum
openldap-2.3.41.ebuild:
ppc stable, bug #209677

05 Mar 2008; Raúl Porcel openldap-2.3.41.ebuild:
alpha/ia64/sparc stable wrt #209677

05 Mar 2008; Christian Faulhammer
openldap-2.3.41.ebuild:
stable x86, bug 209677

05 Mar 2008; Brent Baude openldap-2.3.41.ebuild:
Marking openldap-2.3.41 ppc64 for bug 209677

*openldap-2.3.41 (04 Mar 2008)

04 Mar 2008; Markus Ullmann +openldap-2.3.41.ebuild:
Version bump for security bug #209677

26 Jan 2008; Sven Wegener openldap-2.4.7.ebuild:
Add selinux to IUSE, we use it in *DEPEND.

13 Jan 2008; Ulrich Mueller -openldap-2.3.35-r1.ebuild,
-openldap-2.3.39-r1.ebuild:
Remove old revisions wrt bug #201690.

13 Jan 2008; Markus Ullmann openldap-2.3.39-r2.ebuild,
openldap-2.3.40-r1.ebuild:
Add samba flag warning for bug #196045

13 Jan 2008; Markus Ullmann openldap-2.3.39-r2.ebuild:
Stable on amd64 with welps permission

13 Jan 2008; Markus Ullmann openldap-2.3.39-r2.ebuild,
openldap-2.3.40-r1.ebuild:
Drop readline dep as it's not needed any more

13 Jan 2008; Markus Ullmann openldap-2.3.39-r2.ebuild,
openldap-2.3.40-r1.ebuild, openldap-2.4.7.ebuild:
Fix lib preservation for bug #205220

*openldap-2.4.7 (13 Jan 2008)

13 Jan 2008; Markus Ullmann
+files/openldap-2.4-disable-bdb46.patch,
+files/openldap-2.4-ppolicy.patch, +openldap-2.4.7.ebuild:
Version bump to new 2.4 series

10 Jan 2008; Raúl Porcel openldap-2.3.39-r2.ebuild:
alpha/ia64 stable wrt #201690

10 Jan 2008; Markus Ullmann openldap-2.3.39-r2.ebuild:
Stable on sparc

*openldap-2.3.40-r1 (09 Jan 2008)

09 Jan 2008; Markus Ullmann -openldap-2.3.40.ebuild,
+openldap-2.3.40-r1.ebuild:
Revbump to fix docert accidentally re-introduced in .40

09 Jan 2008; Brent Baude openldap-2.3.39-r2.ebuild:
Marking openldap-2.3.39-r2 ppc64 for bug 201690

09 Jan 2008; Brent Baude openldap-2.3.39-r2.ebuild:
Marking openldap-2.3.39-r2 ppc for bug 201690

09 Jan 2008; Jeroen Roovers openldap-2.3.39-r2.ebuild:
Stable for HPPA (bug #201690).

09 Jan 2008; Christian Faulhammer
openldap-2.3.39-r2.ebuild:
stable x86, bug 201690

*openldap-2.3.40 (06 Jan 2008)

06 Jan 2008; Markus Ullmann +openldap-2.3.40.ebuild:
Version bump with added openldap-2.4 sync support

*openldap-2.3.39-r2 (27 Dec 2007)

27 Dec 2007; Ulrich Mueller +openldap-2.3.39-r2.ebuild:
Replace docert with install_cert in pkg_postinst, bug #201690.

25 Dec 2007; Markus Ullmann Manifest:
Make repoman happy

25 Dec 2007; Markus Ullmann -openldap-2.2.28-r7.ebuild,
-openldap-2.3.37.ebuild, -openldap-2.3.38.ebuild, -openldap-2.3.39.ebuild:
Drop old

28 Nov 2007; Chris Gianelloni
openldap-2.3.39-r1.ebuild:
Stable on amd64 wrt bug #197446.

27 Nov 2007; Raúl Porcel openldap-2.3.39-r1.ebuild:
alpha/ia64/sparc stable wrt security #197446

27 Nov 2007; Christian Faulhammer
openldap-2.3.39-r1.ebuild:
stable x86, security bug 197446

27 Nov 2007; Jeroen Roovers openldap-2.3.39-r1.ebuild:
Stable for HPPA (bug #197446). Fixed quoting and whitespace issues.

27 Nov 2007; Brent Baude openldap-2.3.39-r1.ebuild:
Marking openldap-2.3.39-r1 ppc64 stable for bug 197446

26 Nov 2007; Brent Baude openldap-2.3.39-r1.ebuild:
Marking openldap-2.3.39-r1 ppc for bug 197446

*openldap-2.3.39-r1 (08 Nov 2007)

08 Nov 2007; Markus Ullmann +openldap-2.3.39-r1.ebuild:
Another dep restriction and enable syncprov overlay by default without
overlays useflag as that is widely used and causes confusion if compiled as
module

02 Nov 2007; Mike Frysinger openldap-2.3.39.ebuild:
Add a blocker to db-4.6 since it was unmasked for a little while and can
easily still live on peoples systems #197542.

*openldap-2.3.39 (29 Oct 2007)

29 Oct 2007; Markus Ullmann +openldap-2.3.39.ebuild:
Version bump

17 Oct 2007; Chris Gianelloni
openldap-2.3.38.ebuild:
Stable on amd64 wrt bug #195180.

12 Oct 2007; Markus Rothe openldap-2.3.38.ebuild:
Stable on ppc64; bug #195180

11 Oct 2007; Lars Weiler openldap-2.3.38.ebuild:
stable ppc, bug #195180

09 Oct 2007; Raúl Porcel openldap-2.3.38.ebuild:
alpha/ia64/sparc stable wrt #195180

09 Oct 2007; Christian Faulhammer openldap-2.3.38.ebuild:
stable x86, bug 195180

09 Oct 2007; Jeroen Roovers openldap-2.3.38.ebuild:
Stable for HPPA (bug #195180).

*openldap-2.3.38 (06 Sep 2007)

06 Sep 2007; Markus Ullmann -openldap-2.3.30-r2.ebuild,
-openldap-2.3.35-r2.ebuild, -openldap-2.3.36.ebuild,
+openldap-2.3.38.ebuild:
Cleanup and version bump

*openldap-2.3.37 (23 Jul 2007)

23 Jul 2007; Markus Ullmann +openldap-2.3.37.ebuild:
Version bump, just minor bugfixes

13 Jul 2007; Roy Marples openldap-2.3.36.ebuild:
Keyworded ~sparc-fbsd

*openldap-2.3.36 (02 Jul 2007)

02 Jul 2007; Markus Ullmann +openldap-2.3.36.ebuild:
Version bump, upstream info: only bugfixes

*openldap-2.3.35-r2 (04 Jun 2007)

04 Jun 2007; Markus Ullmann +openldap-2.3.35-r2.ebuild:
Fix lanman bug #178651

02 Jun 2007; nixnut openldap-2.3.35-r1.ebuild:
Stable on ppc wrt bug 180012

02 Jun 2007; Markus Ullmann -openldap-2.3.34-r1.ebuild,
-openldap-2.3.35.ebuild:
Drop old versions

31 May 2007; Raúl Porcel openldap-2.3.35-r1.ebuild:
x86 stable wrt #180012

31 May 2007; Raúl Porcel openldap-2.3.35-r1.ebuild:
alpha/ia64 stable wrt #180012

31 May 2007; Daniel Gryniewicz
openldap-2.3.35-r1.ebuild:
Marked stable on amd64 for bug #180012

30 May 2007; Markus Ullmann openldap-2.3.35-r1.ebuild:
Stable on arm

29 May 2007; Gustavo Zacarias
openldap-2.3.35-r1.ebuild:
Stable on sparc wrt #180012

29 May 2007; Brent Baude openldap-2.3.35-r1.ebuild:
Marking openldap-2.3.35-r1 ppc64 stable for bug 180012

29 May 2007; Jeroen Roovers openldap-2.3.35-r1.ebuild:
Stable for HPPA (bug #180012).

17 May 2007; Roy Marples openldap-2.3.35-r1.ebuild:
Include the correct db.h on FreeBSD.
Fix install to use -o and not -u for SSL certs.

*openldap-2.3.35-r1 (25 Apr 2007)

25 Apr 2007; Robin H. Johnson
+openldap-2.3.35-r1.ebuild:
Fix slapd.conf source location. Move SSL generation back into pkg_postinst
to avoid a potential security problem.

*openldap-2.3.35 (10 Apr 2007)

10 Apr 2007; Markus Ullmann -openldap-2.3.34.ebuild,
+openldap-2.3.35.ebuild:
Version bump

06 Apr 2007; Markus Ullmann -openldap-2.3.33.ebuild:
Drop old version

*openldap-2.3.34-r1 (06 Apr 2007)

06 Apr 2007; Markus Ullmann
+files/openldap-2.3.34-slapd-conf, +openldap-2.3.34-r1.ebuild:
Add built backends module population to config file and fix bug #163652 ,
bug #172998 and bug #170648

26 Mar 2007; Markus Ullmann
-openldap-2.1.30-r10.ebuild:
Drop 2.1

*openldap-2.3.34 (26 Mar 2007)

26 Mar 2007; Markus Ullmann +openldap-2.3.34.ebuild:
Version bump

16 Feb 2007; Markus Ullmann openldap-2.2.28-r7.ebuild,
-openldap-2.3.27-r3.ebuild, openldap-2.3.30-r2.ebuild,
openldap-2.3.33.ebuild:
Fix liblber wrt bug #164626 and drop unneeded version

20 Jan 2007; Markus Ullmann openldap-2.1.30-r10.ebuild:
Fix a patch call

*openldap-2.3.33 (19 Jan 2007)

19 Jan 2007; Markus Ullmann -openldap-2.3.32.ebuild,
+openldap-2.3.33.ebuild:
Version bump (should fix bug #162587 as well)

16 Jan 2007; Markus Ullmann
-files/openldap-2.1.27-db40.patch,
-files/openldap-2.1.27-perlthreadsfix.patch,
-files/openldap-2.1.30-autoconf-archived-fix.patch,
-files/openldap-2.1.30-autoconf25.patch,
-files/openldap-2.1.30-db40.patch, -files/openldap-2.1.30-glibc24.patch,
-files/openldap-2.1.30-m4_underquoted.patch,
-files/openldap-2.1.30-rpath.patch, -files/openldap-2.1.30-tests.patch,
-files/openldap-2.1.30-tls-activedirectory-hang-fix.patch,
-files/openldap-2.1.30-ximian_connector.patch,
-files/openldap-2.2.14-db40.patch,
-files/openldap-2.2.26-tls-fix-connection-test.patch,
-files/openldap-2.2.28-autoconf-archived-fix.patch,
-files/openldap-2.2.28-cleartext-passwords.patch,
-files/openldap-2.2.28-r1-configure.in-rpath.patch,
-files/openldap-2.2.28-tests.patch,
-files/openldap-2.2.28-ximian_connector.patch,
-files/openldap-2.3.27-CVE-2006-5779.patch, openldap-2.1.30-r10.ebuild,
openldap-2.2.28-r7.ebuild:
As older versions have a constant patchset, move that out to mirrors

*openldap-2.3.32 (16 Jan 2007)

16 Jan 2007; Markus Ullmann -files/2.0/slapd,
-files/2.0/slapd.conf, -files/2.0/slurpd, +files/slapd-confd,
+files/slapd-initd, +files/slurpd-initd, -openldap-2.1.30-r8.ebuild,
-openldap-2.1.30-r9.ebuild, openldap-2.1.30-r10.ebuild,
-openldap-2.2.28-r5.ebuild, -openldap-2.2.28-r6.ebuild,
openldap-2.2.28-r7.ebuild, -openldap-2.3.24-r1.ebuild,
-openldap-2.3.30-r1.ebuild, openldap-2.3.30-r2.ebuild,
-openldap-2.3.31-r1.ebuild, +openldap-2.3.32.ebuild:
Version bump and ebuild cleanup

16 Jan 2007; Markus Ullmann openldap-2.2.28-r7.ebuild,
openldap-2.3.30-r2.ebuild, openldap-2.3.31-r1.ebuild:
Fix preserve libs position

13 Jan 2007; Markus Ullmann openldap-2.1.30-r10.ebuild,
openldap-2.2.28-r7.ebuild, openldap-2.3.30-r2.ebuild:
Stable on arm

09 Jan 2007; Petteri Räty
openldap-2.3.31-r1.ebuild:
Fixed pkg_postinst to use elog instead of einfo and point to the right doc
directory.

08 Jan 2007; Peter Weller (welp)
openldap-2.1.30-r10.ebuild, openldap-2.2.28-r7.ebuild,
openldap-2.3.30-r2.ebuild:
openldap-2.3.30-r2, 2.1.30-r10, and 2.2.28-r7 stable on amd64 wrt bug #159508

08 Jan 2007; Christian Faulhammer
openldap-2.1.30-r10.ebuild, openldap-2.2.28-r7.ebuild,
openldap-2.3.30-r2.ebuild:
stable x86, bug #159508

08 Jan 2007; Bryan Østergaard
openldap-2.1.30-r10.ebuild, openldap-2.2.28-r7.ebuild,
openldap-2.3.30-r2.ebuild:
Stable on Alpha + IA64, bug 159508.

08 Jan 2007; Markus Rothe openldap-2.1.30-r10.ebuild,
openldap-2.2.28-r7.ebuild, openldap-2.3.30-r2.ebuild:
Stable on ppc64; bug #159508

08 Jan 2007; Tobias Scherbaum
openldap-2.1.30-r10.ebuild, openldap-2.2.28-r7.ebuild:
Stable on ppc wrt bug #159508.

08 Jan 2007; Markus Ullmann openldap-2.1.30-r10.ebuild:
ssl cert magic

08 Jan 2007; Jeroen Roovers openldap-2.2.28-r7.ebuild:
Stable for HPPA (bug #159508).

08 Jan 2007; Jason Wever openldap-2.1.30-r10.ebuild,
openldap-2.2.28-r7.ebuild, openldap-2.3.30-r2.ebuild:
Stable on SPARC wrt security bug #159508.

08 Jan 2007; Jeroen Roovers openldap-2.1.30-r10.ebuild:
Stable for HPPA (bug #159508).

08 Jan 2007; Jeroen Roovers openldap-2.3.30-r2.ebuild:
Stable for HPPA (bug #159508).

07 Jan 2007; Tobias Scherbaum
openldap-2.3.30-r2.ebuild:
Stable on ppc wrt bug #159508.

*openldap-2.3.31-r1 (06 Jan 2007)
*openldap-2.3.30-r2 (06 Jan 2007)
*openldap-2.2.28-r7 (06 Jan 2007)
*openldap-2.1.30-r10 (06 Jan 2007)

06 Jan 2007; Markus Ullmann -files/gencert.sh,
+openldap-2.1.30-r10.ebuild, +openldap-2.2.28-r7.ebuild,
+openldap-2.3.30-r2.ebuild, -openldap-2.3.31.ebuild,
+openldap-2.3.31-r1.ebuild:
Fixing enewuser placement, some further quotation (all done now, yey),
security bug #159508 and add -j1 temporarily until upstream fixes parallel
make issues

25 Dec 2006; Markus Ullmann openldap-2.1.30-r9.ebuild,
openldap-2.2.28-r6.ebuild, openldap-2.3.30-r1.ebuild,
openldap-2.3.31.ebuild:
more quotation fixes and fix bug #156090

23 Dec 2006; Markus Ullmann -files/gencert.sh-2.2.27,
openldap-2.1.30-r9.ebuild, openldap-2.2.28-r5.ebuild,
openldap-2.2.28-r6.ebuild, openldap-2.3.30-r1.ebuild,
openldap-2.3.31.ebuild:
Ebuild clean up, don't build 2.1 libs when building 2.2, just preserve if
needed

23 Dec 2006; Markus Ullmann -openldap-2.1.30-r6.ebuild,
-openldap-2.1.30-r7.ebuild, openldap-2.1.30-r8.ebuild,
-openldap-2.2.28-r3.ebuild, -openldap-2.2.28-r4.ebuild,
openldap-2.2.28-r5.ebuild, -openldap-2.3.24-r2.ebuild,
-openldap-2.3.27.ebuild, -openldap-2.3.27-r1.ebuild,
-openldap-2.3.27-r2.ebuild, openldap-2.3.27-r3.ebuild,
-openldap-2.3.30.ebuild:
arm stable wrt bug# 154349 and security cleanup

*openldap-2.3.31 (23 Dec 2006)

23 Dec 2006; Markus Ullmann +openldap-2.3.31.ebuild:
Version bump

*openldap-2.3.30-r1 (27 Nov 2006)

27 Nov 2006; Benjamin Smee
+openldap-2.3.30-r1.ebuild:
bumped to fix an overlays bug, need to be compiled in

27 Nov 2006; openldap-2.1.30-r8.ebuild,
openldap-2.2.28-r5.ebuild, openldap-2.3.27-r3.ebuild:
stable on amd64 wrt security bug 154349

*openldap-2.3.30 (26 Nov 2006)

26 Nov 2006; Michael Hanselmann
+openldap-2.3.30.ebuild:
Bump to 2.3.30, approved by robbat2.

24 Nov 2006; Bryan Østergaard
openldap-2.1.30-r8.ebuild, openldap-2.2.28-r5.ebuild,
openldap-2.3.27-r3.ebuild:
Stable on Alpha + ia64, bug 154348.

24 Nov 2006; Gustavo Zacarias
openldap-2.1.30-r8.ebuild, openldap-2.2.28-r5.ebuild,
openldap-2.3.27-r3.ebuild:
Stable on sparc wrt security #154349

22 Nov 2006; René Nussbaumer
openldap-2.1.30-r8.ebuild, openldap-2.2.28-r5.ebuild:
Stable on hppa. See bug #154349.

22 Nov 2006; Tobias Scherbaum
openldap-2.1.30-r8.ebuild, openldap-2.2.28-r5.ebuild,
openldap-2.3.27-r3.ebuild:
ppc stable, bug #154349

22 Nov 2006; Christian Faulhammer
openldap-2.3.27-r3.ebuild:
stable x86, security bug #154349

22 Nov 2006; Christian Faulhammer
openldap-2.2.28-r5.ebuild:
stable x86, security bug #154349

22 Nov 2006; Christian Faulhammer
openldap-2.1.30-r8.ebuild:
stable x86, security bug #154349

22 Nov 2006; Jeroen Roovers openldap-2.3.27-r3.ebuild:
2.3.27-r3 stable for HPPA (bug #154349).

22 Nov 2006; Robin H. Johnson
openldap-2.1.30-r6.ebuild, openldap-2.1.30-r8.ebuild:
Fix cosmetic typo noted on bug #154349.

21 Nov 2006; Brent Baude openldap-2.1.30-r8.ebuild,
openldap-2.2.28-r5.ebuild:
Marking openldap-2.2.28-r5 & openldap-2.1.30-r8 ppc64 for bug 154349

21 Nov 2006; Brent Baude openldap-2.3.27-r3.ebuild:
Marking openldap-2.3.27-r3 ppc64 stable for bug 154349

*openldap-2.3.27-r3 (21 Nov 2006)
*openldap-2.2.28-r6 (21 Nov 2006)
*openldap-2.2.28-r5 (21 Nov 2006)
*openldap-2.1.30-r9 (21 Nov 2006)
*openldap-2.1.30-r8 (21 Nov 2006)

21 Nov 2006; Robin H. Johnson
+files/openldap-2.3.27-CVE-2006-5779.patch, +openldap-2.1.30-r8.ebuild,
+openldap-2.1.30-r9.ebuild, +openldap-2.2.28-r5.ebuild,
+openldap-2.2.28-r6.ebuild, +openldap-2.3.27-r3.ebuild:
CVE-2006-5779, bug #154349. Please note that all revision sets (both stable
and unstable features) have been bumped. See the bug for the stability
target matrix.

19 Oct 2006; Aron Griffis openldap-2.3.27-r2.ebuild:
Mark 2.3.27-r2 stable on ia64. #144862

18 Oct 2006; Markus Ullmann openldap-2.3.27-r2.ebuild:
arm stable wrt bug #144862

18 Oct 2006; Markus Ullmann openldap-2.1.30-r6.ebuild,
openldap-2.2.28-r3.ebuild:
more has_version perl fixes

15 Oct 2006; Thomas Cort openldap-2.3.27-r2.ebuild:
Stable on alpha wrt security Bug #144862.

15 Oct 2006; Guy Martin openldap-2.3.27-r2.ebuild:
Stable on hppa.

15 Oct 2006; Bryan Østergaard
openldap-2.3.27-r2.ebuild:
Add back lost ~ia64 keyword.

13 Oct 2006; Jeroen Roovers
files/digest-openldap-2.3.24-r1, files/digest-openldap-2.3.24-r2,
Manifest:
Fixed the openldap-2.3.24.tgz digest for real this time.

13 Oct 2006; Jeroen Roovers ChangeLog:
Fixed digest

08 Oct 2006; Simon Stelling openldap-2.3.27.ebuild,
openldap-2.3.27-r2.ebuild:
stable on amd64

06 Oct 2006; Jason Wever openldap-2.3.27-r2.ebuild:
Stable on SPARC wrt security bug #144862.

05 Oct 2006; Tobias Scherbaum
openldap-2.3.27-r2.ebuild:
ppc stable, bug #144862

05 Oct 2006; Markus Rothe openldap-2.3.27-r2.ebuild:
Stable on ppc64; bug #144862

05 Oct 2006; Joshua Jackson openldap-2.3.27-r2.ebuild:
Stable x86; bug #144862

04 Oct 2006; Markus Ullmann +openldap-2.3.27.ebuild:
Broken latest stable script lead to miss latest x86 stable, reverting

04 Oct 2006; Markus Ullmann -openldap-2.1.30-r2.ebuild,
-openldap-2.1.30-r5.ebuild, -openldap-2.2.23-r1.ebuild,
-openldap-2.3.21.ebuild, -openldap-2.3.21-r1.ebuild,
-openldap-2.3.23.ebuild, -openldap-2.3.27.ebuild:
Cleanup

*openldap-2.3.27-r2 (04 Oct 2006)

04 Oct 2006; +openldap-2.3.27-r2.ebuild:
Fixing compile problems w/ USE flag samba/kerberos ( bug #135238 )

*openldap-2.3.27-r1 (01 Oct 2006)

01 Oct 2006; Robin H. Johnson
+openldap-2.3.27-r1.ebuild:
Bug #147189 - fix dependancies for USE=minimal. Bug #136786 - tidy use
USE=minimal build.

19 Sep 2006; Joshua Jackson openldap-2.3.27.ebuild:
Stable x86; bug #144862

18 Sep 2006; Benjamin Smee
openldap-2.3.24-r2.ebuild:
small fix for .24-r2 ebuild

*openldap-2.3.27 (18 Sep 2006)

18 Sep 2006; Benjamin Smee +openldap-2.3.27.ebuild:
Version bump

11 Sep 2006; Markus Ullmann openldap-2.1.30-r7.ebuild,
openldap-2.2.28-r4.ebuild, openldap-2.3.21.ebuild,
openldap-2.3.21-r1.ebuild, openldap-2.3.23.ebuild,
openldap-2.3.24-r1.ebuild, openldap-2.3.24-r2.ebuild:
Fixing built_with_use checks for non-existant IUSE ( bug #147134 ) and merge
failure with minimal useflag on first installation ( bug #143473 )

05 Sep 2006; Joshua Kinard openldap-2.3.24-r1.ebuild:
Marked stable on mips.

16 Jun 2006; Markus Ullmann openldap-2.3.24-r1.ebuild,
openldap-2.3.24-r2.ebuild:
Minor fix on migration howto wrt bug #136863 and arm love

15 Jun 2006; Markus Ullmann openldap-2.3.24-r1.ebuild:
Minor fix for populated tree detection, thanks to cardoe on #gentoo-dev for
troubleshooting it

12 Jun 2006; Markus Rothe openldap-2.3.24-r1.ebuild:
Stable on ppc64

11 Jun 2006; Joshua Jackson openldap-2.3.24-r1.ebuild:
stable on x86; security bug #134010

05 Jun 2006; Jason Wever openldap-2.3.24-r1.ebuild:
Stable on SPARC wrt security bug #134010.

04 Jun 2006; Thomas Cort openldap-2.3.24-r1.ebuild:
Stable on amd64 wrt security Bug #134010.

04 Jun 2006; Thomas Cort openldap-2.3.24-r1.ebuild:
Stable on alpha wrt security Bug #134010.

04 Jun 2006; Rene Nussbaumer
openldap-2.3.24-r1.ebuild:
Stable on hppa. See bug #134010.

03 Jun 2006; openldap-2.3.24-r1.ebuild:
Stable on ppc; bug #134010

*openldap-2.3.24-r2 (03 Jun 2006)
*openldap-2.3.24-r1 (03 Jun 2006)

03 Jun 2006; -openldap-2.3.24.ebuild,
+openldap-2.3.24-r1.ebuild, +openldap-2.3.24-r2.ebuild:
Moving 2.3.24 to -r2, Adding 2.3.24-r1 as stable candidate, 2.3.24-r2 is the
overlay-test version wrt bug #134010

02 Jun 2006; Markus Rothe openldap-2.3.24.ebuild:
Stable on ppc64; bug #134010

02 Jun 2006; Tobias Scherbaum
openldap-2.3.24.ebuild:
ppc stable, bug #134010

01 Jun 2006; Thomas Cort openldap-2.3.24.ebuild:
Stable on alpha wrt security Bug #134010.

30 May 2006; Markus Ullmann openldap-2.3.24.ebuild:
Testing keyword on arm

*openldap-2.3.24 (30 May 2006)

30 May 2006; Markus Ullmann
+files/openldap-2.3.24-contrib-smbk5pwd.patch, +openldap-2.3.24.ebuild:
Version bump, closing bug #116045, security bug #134010, bug #134505 and bug
#134919

*openldap-2.3.23 (18 May 2006)

18 May 2006; Markus Ullmann metadata.xml,
+openldap-2.3.23.ebuild:
Version bump and Versiontagcheck improved

06 May 2006; Markus Ullmann
+files/openldap-2.1.30-glibc24.patch, openldap-2.2.28-r4.ebuild:
Adding glibc2.4 patch for old version wrt bug #126259

06 May 2006; Markus Ullmann openldap-2.3.21-r1.ebuild:
Modified Version-Tag checker and added some skip option wrt bug #132246

*openldap-2.3.21-r1 (06 May 2006)

06 May 2006; Markus Ullmann
+files/openldap-2.3.21-ppolicy.patch, +openldap-2.3.21-r1.ebuild:
Adding overlays support wrt bug #132263, thanks to Chris Covington and Dean
Baender

03 May 2006; Benjamin Smee openldap-2.3.21.ebuild:
trivial fix for bug #132100

02 May 2006; Markus Ullmann openldap-2.3.21.ebuild:
Reordering einfos to have better information for users

01 May 2006; Markus Ullmann openldap-2.3.21.ebuild:
Small fix in lib preservation for 2.3.21

29 Apr 2006; Michael Hanselmann
openldap-2.2.28-r3.ebuild:
Stable on mips.

28 Apr 2006; Jason Wever openldap-2.3.21.ebuild:
Added ~sparc keyword wrt bug #130975.

27 Apr 2006; Alec Warner Manifest:
Fixing SHA256 digest, pass four

24 Apr 2006; Patrick McLean openldap-2.3.21.ebuild:
Added ~amd64 (bug #130975).

23 Apr 2006; Markus Rothe openldap-2.3.21.ebuild:
Added ~ppc64; bug #130975

23 Apr 2006; Tobias Scherbaum ChangeLog:
Added to ~ppc, bug #130975

23 Apr 2006; Markus Ullmann -openldap-2.3.18.ebuild,
-openldap-2.3.19.ebuild, -openldap-2.3.20.ebuild:
Cleaning up / renewing digest

23 Apr 2006; Markus Ullmann openldap-2.3.21.ebuild:
Readding versiontag pathfix for 2.3

20 Apr 2006; Diego Pettenò
openldap-2.2.28-r4.ebuild:
Add ~x86-fbsd keyword.

*openldap-2.3.21 (20 Apr 2006)

20 Apr 2006; Markus Ullmann +openldap-2.3.21.ebuild:
Version bump, added versiontag reader, preserving old libs instead of
rebuilding them

09 Mar 2006; Mike Frysinger openldap-2.2.28-r3.ebuild,
openldap-2.2.28-r4.ebuild, openldap-2.3.18.ebuild, openldap-2.3.19.ebuild,
openldap-2.3.20.ebuild:
Use revdep-rebuild --library instead of revdep-rebuild --soname #125506 by
Carsten Lohrke.

*openldap-2.3.20 (19 Feb 2006)

19 Feb 2006; Markus Ullmann +openldap-2.3.20.ebuild:
Version bump

*openldap-2.3.19 (30 Jan 2006)

30 Jan 2006; Markus Ullmann +openldap-2.3.19.ebuild:
Version bump

30 Jan 2006; Markus Ullmann metadata.xml:
Added self as co-maintainer

*openldap-2.3.18 (18 Jan 2006)

18 Jan 2006; Benjamin Smee files/2.0/slapd.conf,
+openldap-2.3.18.ebuild:
Version bump for 2.3 and change of conf.d file

*openldap-2.3.17 (14 Jan 2006)

14 Jan 2006; Benjamin Smee
+files/DB_CONFIG.fast.example, +openldap-2.3.17.ebuild:
Added 2.3 hardmasked for testing. Bug #107686

*openldap-2.2.28-r4 (13 Jan 2006)

13 Jan 2006; Benjamin Smee
+files/openldap-2.2.28-autoconf-archived-fix.patch,
+files/openldap-2.2.28-cleartext-passwords.patch,
+files/openldap-2.2.28-tests.patch, +openldap-2.2.28-r4.ebuild:
new 2.2 version to fix bugs #105380 , #110412 , #112554, #114544 , #115741 ,
#115872 - thanks to Markus Ullmann

*openldap-2.1.30-r7 (13 Jan 2006)

13 Jan 2006; Benjamin Smee
+files/openldap-2.1.30-autoconf-archived-fix.patch,
+files/openldap-2.1.30-m4_underquoted.patch,
+files/openldap-2.1.30-tests.patch, +openldap-2.1.30-r7.ebuild:
new 2.1 version to fix bugs #77330 , #105065 , #105380 , #110412 , #114544 ,
#115741 , #115792 , #115872 - thanks to Markus Ullmann

13 Dec 2005; Fernando J. Pereda
openldap-2.1.30-r6.ebuild, openldap-2.2.28-r3.ebuild:
stable on alpha wrt bug #105380

10 Dec 2005; Jason Wever openldap-2.1.30-r6.ebuild,
openldap-2.2.28-r3.ebuild:
Stable on SPARC wrt bug #105380.

09 Dec 2005; Simon Stelling openldap-2.1.30-r6.ebuild:
stable on amd64 wrt bug 105380

08 Dec 2005; Mark Loeser openldap-2.1.30-r6.ebuild,
openldap-2.2.28-r3.ebuild:
Stable on x86; bug #105380

07 Dec 2005; openldap-2.2.28-r3.ebuild:
Marked stable on amd64

06 Dec 2005; Michael Hanselmann
openldap-2.1.30-r6.ebuild, openldap-2.2.28-r3.ebuild:
Stable on hppa, ppc.

06 Dec 2005; Markus Rothe openldap-2.1.30-r6.ebuild,
openldap-2.2.28-r3.ebuild:
Stable on ppc64; bug #105380

*openldap-2.1.30-r6 (06 Dec 2005)

06 Dec 2005; Robin H. Johnson
+openldap-2.1.30-r6.ebuild:
Backported: Bug #105380 - RPATH. Bug #113770 - Selinux support.

*openldap-2.2.28-r3 (06 Dec 2005)

06 Dec 2005; Robin H. Johnson
+files/openldap-2.1.30-autoconf25.patch,
+files/openldap-2.1.30-rpath.patch, +openldap-2.2.28-r3.ebuild:
Bug #105380 - RPATH again. Bug #113770 - Selinux support.

03 Dec 2005; Robin H. Johnson
openldap-2.2.28-r2.ebuild:
Change sys-lib/db DEPEND to ensure db4.2 with TXN patch is brought in.

*openldap-2.2.28-r2 (03 Dec 2005)

03 Dec 2005; Robin H. Johnson
+files/openldap-2.2.28-r1-configure.in-rpath.patch,
+openldap-2.2.28-r2.ebuild:
Fix for RPATH bug #105380, thanks to Markus Ullmann
for the patch.

16 Oct 2005; Rene Nussbaumer
openldap-2.2.28.ebuild:
Stable on hppa.

03 Oct 2005; Michael Hanselmann
openldap-2.2.28-r1.ebuild:
Added to ~mips.

02 Oct 2005; MATSUU Takuto openldap-2.2.28.ebuild:
Stable on sh.

22 Sep 2005; Robin H. Johnson openldap-2.1.26.ebuild,
openldap-2.1.27.ebuild, openldap-2.1.27-r1.ebuild, openldap-2.1.30.ebuild,
openldap-2.1.30-r1.ebuild, openldap-2.1.30-r2.ebuild,
openldap-2.1.30-r3.ebuild, openldap-2.1.30-r4.ebuild,
openldap-2.1.30-r5.ebuild, openldap-2.2.14.ebuild, openldap-2.2.19.ebuild,
openldap-2.2.23.ebuild, openldap-2.2.23-r1.ebuild, openldap-2.2.24.ebuild,
openldap-2.2.26.ebuild, openldap-2.2.26-r1.ebuild,
openldap-2.2.26-r2.ebuild, openldap-2.2.27.ebuild,
openldap-2.2.27-r1.ebuild, openldap-2.2.28.ebuild,
openldap-2.2.28-r1.ebuild:
Bug #103421, use -1 instead of /bin/false for enewuser to allow working on
freebsd.

17 Sep 2005; Robin H. Johnson openldap-2.2.26.ebuild,
openldap-2.2.26-r1.ebuild, openldap-2.2.26-r2.ebuild,
openldap-2.2.27.ebuild, openldap-2.2.27-r1.ebuild, openldap-2.2.28.ebuild,
openldap-2.2.28-r1.ebuild:
Bug #106242, typo in the upgrade detection code.

15 Sep 2005; Aron Griffis openldap-2.2.28.ebuild:
Mark 2.2.28 stable on alpha

14 Sep 2005; Gustavo Zacarias
openldap-2.2.28.ebuild:
Stable on sparc

12 Sep 2005; Michael Hanselmann
openldap-2.2.28.ebuild:
Stable on ppc.

08 Sep 2005; Robin H. Johnson
+files/openldap-2.2.6-ntlm.patch, openldap-2.2.28-r1.ebuild:
Bug #105209, slightly different NTLM patch, ported by upstream this time,
should fix things for other people better :-).

08 Sep 2005; Aron Griffis openldap-2.2.28.ebuild:
Mark 2.2.28 stable on ia64

*openldap-2.2.28-r1 (07 Sep 2005)

07 Sep 2005; Robin H. Johnson
+files/openldap-2.2.28-ximian_connector.patch, +openldap-2.2.28-r1.ebuild:
Bug #105144, patch for NTLM support, candidate for quick move to stable.

07 Sep 2005; Robin H. Johnson openldap-2.2.28.ebuild:
Force upgrade to die.

06 Sep 2005; Markus Rothe openldap-2.2.28.ebuild:
Stable on ppc64

06 Sep 2005; Robin H. Johnson openldap-2.2.28.ebuild:
Get rid of message complaining that /etc/openldap/slapd.conf might not exist.

05 Sep 2005; Robin H. Johnson openldap-2.2.28.ebuild:
Move to stable x86 now, after much testing. Pay attension to the upgrade
fail-out if you run an LDAP server!

25 Aug 2005; Aron Griffis openldap-2.1.30-r5.ebuild:
stable on ia64

*openldap-2.2.28 (24 Aug 2005)

24 Aug 2005; Robin H. Johnson
+openldap-2.2.28.ebuild:
Version bump.

03 Aug 2005; Robin H. Johnson
openldap-2.1.30-r5.ebuild, openldap-2.2.27-r1.ebuild:
Bug #100579, USE=minimal Perl is bad for the perl backend.

27 Jul 2005; Robin H. Johnson
openldap-2.2.27-r1.ebuild:
Depend on newer libtool to avoid bug with CC variable being empty still.

13 Jul 2005; Rob Holland openldap-2.1.30-r5.ebuild:
stable x86. fix sec bug #96767

13 Jul 2005; Michael Hanselmann
openldap-2.1.30-r5.ebuild:
Stable on hppa.

11 Jul 2005; Simon Stelling openldap-2.1.30-r5.ebuild:
stable on amd64 wrt bug 96767

07 Jul 2005; Markus Rothe openldap-2.1.30-r5.ebuild:
Stable on ppc64; bug #96767

06 Jul 2005; Michael Hanselmann
openldap-2.1.30-r5.ebuild:
Stable on ppc.

05 Jul 2005; Sven Wegener openldap-2.2.23-r1.ebuild:
QA: Added kerberos to IUSE.

04 Jul 2005; Jason Wever openldap-2.1.30-r5.ebuild:
Stable on SPARC wrt security bug #96767.

*openldap-2.2.27-r1 (03 Jul 2005)
*openldap-2.1.30-r5 (03 Jul 2005)

03 Jul 2005; Robin H. Johnson
+files/openldap-2.2.26-tls-fix-connection-test.patch,
+openldap-2.1.30-r5.ebuild, +openldap-2.2.27-r1.ebuild:
Security Bug #96767, ssl not being used always. Note that both 2.1.30-r5 and
2.2.27-r1 have the patch.

*openldap-2.2.27 (03 Jul 2005)

03 Jul 2005; Robin H. Johnson
+files/gencert.sh-2.2.27, +openldap-2.2.27.ebuild:
Fixed bugs #93074, #97782, #87591. This means that the nasty double-build
problem is now solved! New gencert.sh thanks to xmerlin. USE=minimal support
to skip building the servers. This is a strong candidate for going stable
after the 30 day period.

06 Jun 2005; Markus Rothe openldap-2.1.30-r4.ebuild:
Stable on ppc64

30 May 2005; Robin H. Johnson
openldap-2.2.26-r2.ebuild:
Fix bug #94415, -fPIC needed for correct kerberos build stuff.

26 May 2005; Herbie Hopkins openldap-2.2.26-r2.ebuild:
more multilib fixes..

21 May 2005; Simon Stelling openldap-2.2.26-r2.ebuild:
fixed multilib-strict issues

*openldap-2.2.26-r2 (21 May 2005)

21 May 2005; Robin H. Johnson
+openldap-2.2.26-r2.ebuild:
More lib compatibility stuff, and instructions about revdep-rebuild.

*openldap-2.2.26-r1 (19 May 2005)

19 May 2005; Robin H. Johnson
+openldap-2.2.26-r1.ebuild:
Add 2.2.26 version that builds a liblber from openldap-2.1.

18 May 2005; Robin H. Johnson openldap-2.2.14.ebuild,
openldap-2.2.19.ebuild, openldap-2.2.23.ebuild, openldap-2.2.23-r1.ebuild,
openldap-2.2.24.ebuild, openldap-2.2.26.ebuild:
Fix keywords for other arches on 2.2 series.

19 May 2005; Robin H. Johnson openldap-2.2.26.ebuild:
Add reminder about revdep-rebuild.

16 May 2005; Rene Nussbaumer
openldap-2.1.30-r4.ebuild:
stable on hppa

30 Apr 2005; Robin H. Johnson openldap-2.2.26.ebuild:
Fix up detection.

*openldap-2.2.26 (30 Apr 2005)

30 Apr 2005; Robin H. Johnson
+openldap-2.2.26.ebuild:
Version bump, fix for bug #90959.

25 Apr 2005; Bryan Østergaard
openldap-2.1.30-r4.ebuild:
Stable on alpha.

20 Apr 2005; Michael Hanselmann
openldap-2.1.30-r4.ebuild:
Stable on ppc.

20 Apr 2005; Herbie Hopkins openldap-2.1.30-r4.ebuild:
Stable on amd64, wrt bug #89012

15 Apr 2005; Gustavo Zacarias
openldap-2.1.30-r4.ebuild:
Stable on sparc

13 Apr 2005; Robin H. Johnson
openldap-2.1.30-r4.ebuild:
2.1.30-r4 stable on x86.

09 Apr 2005; Markus Rothe openldap-2.1.30-r2.ebuild:
Stable on ppc64

*openldap-2.2.24 (20 Mar 2005)

20 Mar 2005; Robin H. Johnson
+openldap-2.2.24.ebuild:
New upstream version. Fixed Bugs #82584, #85974. Ebuild now checks properly
for upgrading.

28 Feb 2005; Aron Griffis openldap-2.1.30-r2.ebuild,
openldap-2.1.30-r3.ebuild, openldap-2.1.30-r4.ebuild,
openldap-2.2.14.ebuild, openldap-2.2.19.ebuild, openldap-2.2.23-r1.ebuild,
openldap-2.2.23.ebuild:
add ia64 keywords

17 Feb 2005; Robin H. Johnson
openldap-2.1.30-r4.ebuild, openldap-2.2.23-r1.ebuild:
Bug #72186: ensure proper building.

*openldap-2.2.23-r1 (14 Feb 2005)

14 Feb 2005; Robin H. Johnson
+openldap-2.2.23-r1.ebuild:
Special version for seemant ;-). Makes some of the extra stuff as modules,
and builds some of contrib.

*openldap-2.2.23 (14 Feb 2005)

14 Feb 2005; Robin H. Johnson
+openldap-2.2.23.ebuild:
Add in 2.2.23 for testing. Still hardmasked.

23 Jan 2005; Robin H. Johnson openldap-2.1.26.ebuild,
openldap-2.1.27-r1.ebuild, openldap-2.1.27.ebuild,
openldap-2.1.30-r1.ebuild, openldap-2.1.30-r2.ebuild,
openldap-2.1.30-r3.ebuild, openldap-2.1.30-r4.ebuild,
openldap-2.1.30.ebuild, openldap-2.2.14.ebuild, openldap-2.2.19.ebuild:
Fix bug #79216.

29 Dec 2004; Ciaran McCreesh :
Change encoding to UTF-8 for GLEP 31 compliance

06 Dec 2004; Robin H. Johnson
openldap-2.1.30-r3.ebuild, openldap-2.1.30-r4.ebuild,
openldap-2.2.14.ebuild, openldap-2.2.19.ebuild:
More docs for 2.2 upgrade, fix slight glitch in slapd.conf.

*openldap-2.1.30-r4 (01 Dec 2004)

01 Dec 2004; Robin H. Johnson
+files/openldap-2.1.30-tls-activedirectory-hang-fix.patch,
files/2.0/slapd, +openldap-2.1.30-r4.ebuild:
Fix bugs #67080 (2.1.30-r4) and #71268 (init-script).

*openldap-2.2.19 (01 Dec 2004)

01 Dec 2004; Robin H. Johnson
+openldap-2.2.19.ebuild:
Latest 2.2 ebuild, for testing only. See ebuild for upgrade notes.

07 Nov 2004; Joshua Kinard openldap-2.1.30-r2.ebuild:
Marked stable on mips.

05 Oct 2004; Guy Martin openldap-2.1.30-r2.ebuild:
Stable on hppa.

03 Oct 2004; Bryan Østergaard openldap-2.1.30-r2.ebuild:
Stable on alpha.

*openldap-2.1.30-r2 (25 Sep 2004)

25 Sep 2004; Jason Wever openldap-2.1.30-r2.ebuild:
Stable on sparc.

22 Aug 2004; Jason Wever openldap-2.1.30-r1.ebuild:
Stable on sparc.

*openldap-2.1.30-r3 (22 Aug 2004)

22 Aug 2004; Robin H. Johnson
+openldap-2.1.30-r3.ebuild:
Bug #55706, add BDB checkpoints to config.

22 Aug 2004; Joshua Kinard openldap-2.1.30-r1.ebuild:
Marked stable on mips.

18 Aug 2004; Aron Griffis openldap-2.1.30-r1.ebuild:
stable on alpha

05 Aug 2004; Alastair Tse
+files/openldap-2.1.30-ximian_connector.patch:
adding ximian connector patches to expose more of the ldap api (#58320)

18 Jul 2004; Robin H. Johnson openldap-2.1.26.ebuild,
openldap-2.1.27-r1.ebuild, openldap-2.1.27.ebuild,
openldap-2.1.30-r1.ebuild, openldap-2.1.30.ebuild:
stable 2.1.30-r1 on x86, fixup ebuilds to mirror://.

*openldap-2.2.14 (09 Jul 2004)

09 Jul 2004; Robin H. Johnson openldap-2.2.14.ebuild:
initial 2.2 ebuild, not for public consumption yet.

24 Jun 2004; Aron Griffis openldap-2.1.26.ebuild,
openldap-2.1.27-r1.ebuild, openldap-2.1.27.ebuild,
openldap-2.1.30-r1.ebuild, openldap-2.1.30.ebuild:
QA - fix use invocation

*openldap-2.1.30-r1 (20 Jun 2004)

20 Jun 2004; Robin H. Johnson
openldap-2.1.30-r1.ebuild, files/openldap-2.2.14-db40.patch,
files/openldap-2.2.14-perlthreadsfix.patch:
move make test to src_test.

12 Jun 2004; Tom Gall openldap-2.1.30.ebuild:
stable on ppc64 bug 53766

06 Jun 2004; Guy Martin openldap-2.1.30.ebuild:
Marked stable on hppa.

21 May 2004; Robin H. Johnson files/2.0/slapd,
files/2.0/slurpd:
fix bug #51594, no version bump for now.

12 May 2004; Michael McCabe openldap-2.1.30.ebuild:
Added s390 keywords

*openldap-2.1.30 (28 Apr 2004)

28 Apr 2004; Robin H. Johnson openldap-2.1.30.ebuild,
files/openldap-2.1.30-db40.patch:
new version with changes from bug #42427. direct kerberos is deprecated
upstream.

24 Apr 2004; Robin H. Johnson
openldap-2.0.25-r1.ebuild, openldap-2.0.25-r2.ebuild,
openldap-2.0.25-r3.ebuild, openldap-2.0.27-r4.ebuild,
openldap-2.0.27-r5.ebuild, openldap-2.0.27.ebuild, openldap-2.1.21.ebuild,
openldap-2.1.22-r1.ebuild, openldap-2.1.22.ebuild, openldap-2.1.23.ebuild,
files/kerberos-2.0.diff.bz2, files/kerberos-2.1.diff.bz2,
files/openldap-2.0.27-db3-gentoo.patch,
files/openldap-2.1.22-perlsedfoo.patch, files/rfc2252-bork.patch,
files/slapd-2.1-r1.rc6, files/slapd-2.1.conf, files/slapd-2.1.rc6,
files/slapd.rc6, files/slurpd-2.1.rc6, files/slurpd.rc6:
remove old versions incl old 2.0 series.

30 Mar 2004; Lars Weiler openldap-2.1.27-r1.ebuild:
stable on ppc, as requested in bug #26728

*openldap-2.1.27-r1 (28 Mar 2004)

28 Mar 2004; Robin H. Johnson
openldap-2.1.27-r1.ebuild, files/openldap-2.1.27-db40.patch:
add in more db40 fixes, new revision as it may change where your openldap is
linked against.

24 Mar 2004; Michael Sterrett
openldap-2.1.22-r1.ebuild, openldap-2.1.23.ebuild, openldap-2.1.26.ebuild,
openldap-2.1.27.ebuild:
don't use deprecated ? : use syntax

23 Mar 2004; Joshua Kinard openldap-2.1.27.ebuild:
Marked stable on mips.

10 Mar 2004; Jason Wever openldap-2.1.26.ebuild:
Stable on sparc.

09 Mar 2004; openldap-2.1.26.ebuild:
stable on alpha and ia64

08 Mar 2004; Robin H. Johnson openldap-2.1.23.ebuild,
openldap-2.1.26.ebuild, openldap-2.1.27.ebuild:
ppc64 keywords removed pending deps: app-crypt/mit-krb5, app-crypt/heimdal,
dev-libs/cyrus-sasl, dev-db/unixODBC

*openldap-2.1.27 (08 Mar 2004)

08 Mar 2004; Robin H. Johnson openldap-2.1.27.ebuild,
files/openldap-2.1.27-perlthreadsfix.patch:
fix bug #43021, change kerberos deps to virtual instead of app-crypt/mit-krb5
(which breaks heimdal). fix bug #42966, version bump. newer, more portable fix
for bug #31202 (also fixes a weird problem case).

27 Feb 2004; Joshua Kinard openldap-2.1.26.ebuild:
Added ~mips to KEYWORDS to satisfy repoman deps.

15 Feb 2004; Robin H. Johnson openldap-2.1.26.ebuild:
add more notes on bug #41297 fix, from bug #41039.

11 Feb 2004; Robin H. Johnson openldap-2.1.26.ebuild:
fix bug #41297. fix bug #31202.

08 Feb 2004; Robin H. Johnson openldap-2.1.26.ebuild:
bug #26728, security bump, held up for a long time by DB4.1

04 Feb 2004; Robin H. Johnson openldap-2.1.26.ebuild:
fix bug #40417

*openldap-2.1.26 (27 Jan 2004)
*openldap-2.0.27-r5 (27 Jan 2004)

27 Jan 2004; Robin H. Johnson
openldap-2.0.27-r5.ebuild, openldap-2.1.26.ebuild:
fix bug #33718, and version bump to new openldap

06 Jan 2004; openldap-2.0.27-r4.ebuild:
Stable on alpha and ia64

22 Dec 2003; Robin H. Johnson
openldap-2.1.22-r1.ebuild, openldap-2.1.22.ebuild, openldap-2.1.23.ebuild:
Fix IUSE in 2.1.2[23] as per bug #34769.

13 Dec 2003; Jason Wever openldap-2.0.27-r4.ebuild:
Marked stable on sparc.

05 Dec 2003; Robin H. Johnson openldap-2.1.23.ebuild:
change the version depend on berkdb to 4.1.25_p1-r3 and fix a nasty bug with
DEPEND

06 Nov 2003; Robin H. Johnson
openldap-2.0.25-r3.ebuild, openldap-2.0.27-r4.ebuild,
openldap-2.1.21.ebuild, openldap-2.1.22-r1.ebuild, openldap-2.1.22.ebuild,
openldap-2.1.23.ebuild, files/gencert.sh:
: instead of . for chown

28 Oct 2003; Robin H. Johnson metadata.xml:
add metadata.xml

*openldap-2.1.23 (28 Oct 2003)

28 Oct 2003; Robin H. Johnson openldap-2.1.23.ebuild:
version bump

28 Oct 2003; Robin H. Johnson
openldap-2.1.22-r1.ebuild:
fix bug #31037

*openldap-2.1.22-r1 (12 Oct 2003)

12 Oct 2003; Robin H. Johnson
openldap-2.1.22-r1.ebuild, files/openldap-2.1.22-perlsedfoo.patch:
add new patch for openldap-2.1 to compile properly again, and cleanup ebuild

26 Jul 2003; Nick Hadaway openldap-2.0.25-r3.ebuild:
Backporting features from the 2.0.27-r4 ebuild so 1.0 profiles are
caught up.

23 Jul 2003; Nick Hadaway openldap-2.0.27-r4.ebuild,
rfc2252-bork.patch:
Added a comment in postinst re: upgrading from ldap builds which ran
as root. Also included a patch suggested by Jean Jordaan on bug
#24271 which fixes a b0rked rfc2252.

13 Jul 2003; Nick Hadaway openldap-2.0.27-r4.ebuild,
openldap-2.1.22.ebuild:
Added chown ldap:ldap /var/lib/openldap-{data,ldbm,slurp} to
pkg_postinst. closes bug #24407

12 Jul 2003; Nick Hadaway openldap-2.0.27-r4.ebuild:
Adding support for linking to SASLv1. (SASL1=yes) Not putting this
behind a use variable as people are expecting to link against SASLv2
normally.

10 Jul 2003; Robin H. Johnson openldap-2.1.22.ebuild:
AF_UNIX and process title support.

09 Jul 2003; Nick Hadaway openldap-2.1.22.ebuild:
Version bump. Added ebuild changes made to 2.0.27-r4 to 2.1.22.
Still waiting for db4 to become a reality in gentoo.

09 Jul 2003; Nick Hadaway openldap-2.0.27-r4.ebuild,
files/2.0/slapd, files/2.0/slapd.conf:
Updated example to include ldapi. Added eval to the slapd init.d
so the %2f is parsed properly. Changed the location of the slapd.args
in the default config and installed config. Thanks to robbat2 for
working this solution out. Marking stable for x86.

08 Jul 2003; Nick Hadaway openldap-2.0.27-r4:
Fixed the conf.d slapd filename and added some code to pkg_postinst
so correct permissions are passed to directories/files affected by the
upgrade from running as root to running as user/group ldap.

*openldap-2.1.22 (10 Jul 2003)

13 Jul 2003; Daniel Ahlberg :
Added missing changelog entry.

*openldap-2.0.25-r2 (22 Jun 2003)

22 Jun 2003; Alastair Tse openldap-2.0.25-r1.ebuild,
openldap-2.0.25-r2.ebuild:
add openldap-2.0.25 back because it will break 1.0 profiles

*openldap-2.1.21 (14 Jun 2003)

14 Jun 2003; Nick Hadaway openldap-2.1.21.ebuild,
files/digest-openldap-2.1.21, files/2.0/slapd, files/2.0/slapd.conf:
Bug fixes as noted in bug #22657. Version bump.

*openldap-2.0.27-r4 (28 May 2003)

28 May 2003; Grant Goodyear openldap-2.0.27-r4.ebuild:
Added MDK password fix, changed behavior wrt gdbm/berkdb USE variables to be
more sensible. Also now generate self-signed ssl cert.

28 May 2003; Grant Goodyear openldap-2.1.12.ebuild,
openldap-2.1.19.ebuild, openldap-2.1.20.ebuild:
Changed goofy "-x86" masks to "~x86", but added >=net-nds/openldap-2.1
to package.mask. That way package.unmask will work properly.

*openldap-2.1.20 (27 May 2003)

27 May 2003; Grant Goodyear openldap-2.1.20.ebuild,
files/gencert.sh:
New version w/ a number of changes:
* self-signed ssl cert created at install time
* order of linking changed so that passwd + ldap works properly
# if "berkdb" and "gdbm" in USE then berkdb used in the ebuild.

12 May 2003; Jason Wever openldap-2.0.27-r3.ebuild:
Added ~sparc to keywords.

*openldap-2.1.19 (11 May 2003)

11 May 2003; Alastair Tse openldap-2.1.19.ebuild:
wholesale changes to how this ebuild is installed. fixes :
- wrong pid file directory in both config and init.d (#13057)
- debugging enabled for syslogging (#16131)
- version bumped 2.1 series and omit redundant kerberos patch (#16341)
- fixed /var/tmp paths in *.la (#12084)

*openldap-2.0.27-r3 (11 May 2003)

11 May 2003; Alastair Tse openldap-2.0.27-r3.ebuild,
files/2.0/slapd, files/2.0/slapd.conf, files/2.0/slurpd:

wholesale changes to how this ebuild is installed. fixes :
- wrong pid file directory in both config and init.d (#13057)
- debugging enabled for syslogging (#16131)
- fixed /var/tmp paths in *.la (#12084)

14 Apr 2003; Will Woods openldap-2.0.27-r1.ebuild,
openldap-2.0.27-r2.ebuild, openldap-2.0.27.ebuild:
added alpha to KEYWORDS as appropriate

23 Feb 2003; Nick Hadaway openldap-2.0.27*.ebuild :
Changed --disable-sasl to --without-cyrus-sasl as noted by Matt
on bug #16144

*openldap-2.1.12 (04 Feb 2003)

04 Feb 2003; Nick Hadaway openldap-2.1.12.ebuild,
files/digest-openldap-2.1.12, files/kerberos-2.1.diff.bz2 :
Fixed typos like in 2.0.27-r2 and added the kainz kerberos diff for 2.1
2.1.12 is now considered stable so when db4 moves, so will openldap.

*openldap-2.0.27-r2 (29 Jan 2003)

17 Apr 2003; Aron Griffis openldap-2.0.27-r2.ebuild:
Add ~alpha to KEYWORDS

04 Feb 2003; Nick Hadaway openldap-2.0.27-r2.ebuild,
files/kerberos-2.0.diff.bz2 :
Added a kerberos configure change as suggested by kainz.

29 Jan 2003; Nick Hadaway openldap-2.0.27-r2.ebuild,
files/digest-openldap-2.0.27-r2 files/slapd-2.1-r1.rc6,
files/slapd-2.1.conf :
Fixes some typos in -r1 and adds a slapd.conf based on suggestions
by claer@unixlover.com on bug #8780

*openldap-2.0.27-r1 (01 Jan 2002)
*openldap-2.1.10 (01 Jan 2002)

03 Jan 2002; Nick Hadaway openldap-2.1.10.ebuild :
Added dependancy on net-libs/openslp.

02 Jan 2002; Nick Hadaway openldap-2.0.27-r1.ebuild,
openldap-2.1.10.ebuild. files/slapd-2.1.rc6 :
Added --enable-ldap to openldap-2.1.10 and changed the ldap data dir
from /var/state/openldap/openldap-ldbm to /var/lib/openldap-data.
Both of these fixes/updates come from Eric Renfro. Many thanks!

01 Jan 2002; Nick Hadaway openldap-2.0.27-r1.ebuild,
openldap-2.1.10.ebuild, files/digest-openldap-2.0.27-r1,
files/digest-openldap-2.1.10, files/slapd-2.1.rc6,
files/slurpd-2.1.rc6 :
Version bump in the 2.1 series. These latest ebuilds are now setup
so that ldap services drop root privileges on startup. Please
comment on bug #8780.

*openldap-2.1.9 (18 Dec 2002)

18 Dec 2002; Nick Hadaway openldap-2.1.9.ebuild,
files/digest-openldap-2.1.9 :
Version bump.

06 Dec 2002; Rodney Rees : changed sparc ~sparc keywords

03 Dec 2002; Will Woods openldap-1.2.13-r6.ebuild:
Added ~alpha keyword and src_unpack() with gnuconfig_update.

*openldap-2.0.27 (25 Nov 2002)

21 Dec 2002; Nick Hadaway openldap-2.0.27.ebuild :
db4 is not required for this version. Also fixed readline
dependancy as to not squash the 1.0 profile.

27 Nov 2002; Nick Hadaway openldap-2.0.27.ebuild,
files/digest-openldap-2.0.27 :
Updated stable series of openldap.

*openldap-2.1.8 (25 Nov 2002)

25 Nov 2002; Nick Hadaway openldap-2.1.8.ebuilod,
files/digest-openldap-2.1.8 :
New ebuild of openldap. Lots of configure updates. Needs lots of
testing. The ebuild depends on db4 so all arches are marked - until
db4 is marked unstable for testing.

*openldap-2.0.25-r3 (21 Sept 2002)

11 Oct 2002; Nick Hadaway openldap-2.0.25-r3.ebuild :
Removed sasl support as saslv2 support is not complete in this and
causes a circular dependancy with cyrus-sasl. cyrus-sasl still has
ldap support built in.

21 Sept 2002; Grant Goodyear openldap-2.0.25-r3.ebuild
Replaced entire make install section w/ "make DESTDIR=${D} install".
The previous version was putting ${D} in the /etc/openldap files, and
the simple fix seems to have solved the problem. I also checked, and
sysconfdir seems to be working correctly, so I don't think I've broken
Seemant's fix.

*openldap-2.0.25-r2 (15 Aug 2002)

16 Sep 2002; Seemant Kulleen openldap-2.0.25-r2.ebuild
Fixed sysconfdir to /etc so that config files go into the /etc/openldap
directory instead of /etc/openldap/openldap. Thanks to:
gdjohn@egregious.org.uk (Gareth John) in bug #7986

07 Sep 2002; Seemant Kulleen
openldap-2.0.25-r2.ebuild :
Fixed the use flags so that they are not prefixed with "ldap-" as
discovered by jap1@ionet.net (Jacob Perkins) and kevin@aptbasilicata.it
(j2ee) in bug #7597

15 Aug 2002; Nick Hadaway
openldap-2.0.25-r2.ebuild, files/digest-openldap-2.0.25-r2 :
Updated ebuild based on suggestions by Eric Renfro via bug report
#6488

*openldap-2.0.25-r1 (29 Jul 2002)

12 Aug 2002; Mark Guertin :
Added ppc to keywords

29 Jul 2002; Nick Hadaway
openldap-2.0.25-r1, files/slapd.rc6, files/digest-openldap-2.0.25-r1 :
Updated ebuild for proper USE flag to configure option generation. Fixed
a typo in slapd.rc6. Bumping to -r1 due to the many changes in the ebuild
since the first 2.0.25 release.

*openldap-2.0.25 (17 Jul 2002)

26 Jul 2002; Nick Hadaway files/slapd.rc6 :
Added --pidfile /var/state/openldap/slapd.pid to files/slapd.rc6 to supress
error messages when shutting doesn slapd.

26 Jul 2002; Nick Hadaway
re-modified ebuild so localstatedir=/var/state/openldap to match with the
default slapd config file. /var/state/openldap/openldap-ldbm and
/var/state/openldap/openldap-slurp are also created correctly.
Bug #5557 re-visited.

26 Jul 2002; Nick Hadaway
modified ebuild to create a /var/state/openldap to conicide with default
configuration of where databases are stored. Closes bug #5557.

17 Jul 2002; Nick Hadaway
openldap-2.0.25.ebuild, file/digest-openldap-2.0.25 :
Version bump to latest stable vesion. Also added support for SASL by
request on bug #5104.

*openldap-2.0.23 (20 Apr 2002)

20 Apr 2002; Ryan Phillips openldap-2.0.23 :
Updated package

*openldap-2.0.21 (1 Feb 2002)

1 Feb 2002; G.Bevin ChangeLog :
Added initial ChangeLog which should be updated whenever the package is
updated in any way. This changelog is targetted to users. This means that the
comments should well explained and written in clean English. The details about
writing correct changelogs are explained in the skel.ChangeLog file which you
can find in the root directory of the portage repository.

Manifest

AUX DB_CONFIG.fast.example 746 RMD160 03d179d1c58d695c442eb5e3e69c245f3c2f2358 SHA1 c76a2a9f346a733ed6617d42229b434ce723c59e SHA256 69fc9aa6e4f0b888bc02d3f75642fe1ebf9345c685257a5c1236b2e79ed56e0b
AUX openldap-2.2.14-perlthreadsfix.patch 614 RMD160 6e868aa5a5cc4e80c0340af25d18d010b342ed15 SHA1 3bb05c7ed511e8464331619ce23064d236a5fe82 SHA256 bb719cc1fed47ff0f111c960f3295781ae6f0d9e98b4266a87751044b4bb3175
AUX openldap-2.2.6-ntlm.patch 5011 RMD160 317f4b6dc9589826739a14a8ad7200ed287c87be SHA1 29b8e9c4835235c976f026cd5883228b77581083 SHA256 1f7e766bcafb412ec336aad7e07295d6d62d2e2a62b6804b07b06a5056102243
AUX openldap-2.3.21-ppolicy.patch 402 RMD160 72da1c4a886a329607608f8fa07857874ea8973a SHA1 0c6fe313ad06ccee5a96402fc116cf243d37146b SHA256 97feaaff03e839aaad402024082ba62fb2cbe0c721664a85af8674ebb28d7dbd
AUX openldap-2.3.24-contrib-smbk5pwd.patch 1631 RMD160 01e394da82c2ca8493d0dc15c400675545f463bb SHA1 33781455168d2041f3ec00bbaf2da4ffbe411396 SHA256 277990c6bc9e00c29bc5123d5074e1a741a224e884f92651b301375b02edc70e
AUX openldap-2.3.34-slapd-conf 2058 RMD160 08f15fb982898dbcda7b969c57c8a754f0f80516 SHA1 50c33317437852b0e116ff5a458f2ac977e46ede SHA256 1ade2725c6eab238ec0e546dda871fe70170a920a96b254096ffb1095037fdb6
AUX openldap-2.4-disable-bdb46.patch 10249 RMD160 d989e7298722c99d104c96eb36dbb5923a00b2c7 SHA1 8a9c8f2f7b53bfdc1c478d3d7f59227c4e24e37f SHA256 b765619b06be4a3a48f8057527818af2ee9a4628c265cf02ed72797de1d1b014
AUX openldap-2.4-ppolicy.patch 455 RMD160 653695a9853bb7e1c9f53a779cb7ac2755edaf4e SHA1 8f419fddf0abf1fef48732b04617293c3ca1ed36 SHA256 355a8239355fcc5863ba7430d73af7ccad9e0211ae56180011d15d7418aa5b27
AUX slapd-confd 436 RMD160 764d5e2915d9af33fd1db2489ceac6d953750984 SHA1 a16b4674b45ac1e1c8a8f9e84ad0de519c81aa11 SHA256 1ccb8a3b78b65b125b24779dd065cf8000e2d5e4da267bb0a892e730edd2055d
AUX slapd-initd 584 RMD160 a759c9f99141587feff2df6193377f0c0ca2eb0a SHA1 80dfa52d417822d2d2e8f94a1ed849e8104f5084 SHA256 fecf5eeef83811bd91aca5884aa7f9c8608ce9416be2fa8a1eb7ea5b540175f7
AUX slurpd-initd 494 RMD160 9f3a06bcab2e4ce8e66783af506d26595bbbdcd2 SHA1 8ab66a984510fa91755cbcbac29883cea1435db7 SHA256 b23e010f701620ec34c39cd215891c7c0afc773341392a1e762e84166d9863ff
DIST openldap-2.3.39.tgz 3807707 RMD160 cd6f652dc68786ca7d2b9f1b2d389e22ec17e3a0 SHA1 e87e60b1269f51d753d88df9b51745a66730a5d4 SHA256 0fc5431b9ca5a5c39e27607668112d8e9533aa68463087251682c1d1fb60b55b
DIST openldap-2.3.40.tgz 3803330 RMD160 f8c0afd2a8207a55f5698e665104359d846bd8fe SHA1 a96e819662ff459015695a02f3a9f49451829e6c SHA256 ea7251be452611dbca106a7981ff706bf998aac4def7c224c613c46b1629aa51
DIST openldap-2.3.41.tgz 3800142 RMD160 441c7456c9fb5b3cd964c30c246849a9886ab368 SHA1 89f3c9818aa6364c74519fa774a776d72efba8aa SHA256 56fd1ee690df2d1ff164f6ba554fedfcfc13049d95dbdc440af11e56b0dfea0a
DIST openldap-2.4.10.tgz 4453204 RMD160 ce070f88eeecdf2418ec74d25526003f5a6fe404 SHA1 7363e50c7b199abc2ce09228d8533a7a16b7bbff SHA256 e460b1ef2a7a50ec8d7bd70c29d5cb3191f091fab50b96a7e10454ee8e4d0902
DIST openldap-2.4.7.tgz 4217144 RMD160 22942db03c278c941de8f00a99f251d378b34bd8 SHA1 e12d96327980abbe07c9187f3fd238c47098943a SHA256 ee3f22f3e32c3e302a584ab219bf54674e07747b86f14c3a5b696f22d3fd37ab
EBUILD openldap-2.3.39-r2.ebuild 17583 RMD160 7b6265856a3b93187c734a4749cff2675d1f0819 SHA1 e8b36a5db39d9ceeefd4765b8038f826ee62a54a SHA256 dd11a1d81b6b2556e9d5723ad01eac65a4ade12e9a6cb45ac0b44538f6ca33b7
EBUILD openldap-2.3.40-r1.ebuild 17593 RMD160 a06539e7cac1de85bb48ebbf9134d42dea94919f SHA1 c4bdb726bd4fd8cfa7514ca81c903fd5a46518aa SHA256 3561a4b84bc003fe5fe3c43c9d48067f272f995f2930781ac040b8e1be462aec
EBUILD openldap-2.3.41-r1.ebuild 17759 RMD160 d090cc892c2bfed850d84aa61d80683e6d104c6a SHA1 8372fe77cc4eef2827dcf7d2c1563e9e90652026 SHA256 dfc6f8a1a4df8fa74e2a4fdd3c2b1a002d737fc3ed80b6897a0588f8a77e85fe
EBUILD openldap-2.3.41.ebuild 17580 RMD160 ce8a3b8de91832bfe8d8e73849342d11c2ddad05 SHA1 8f4187adc9041373ed180ebf57b1d3be474a7ed0 SHA256 ed2f3028f5e0edb2577f4e31df123e9718c4ef33fad5a4425b8a3bff372a8f28
EBUILD openldap-2.4.10.ebuild 13767 RMD160 c804d99c02990333ca8dec6194f0c74d931f0799 SHA1 a226949ff1f7ad34f60ebc5c88dad6418562ae19 SHA256 d30a7fb766f7a94c20791c528197d2c7a8142fdc6fab9ea2afb3a2395f78ac8b
EBUILD openldap-2.4.7.ebuild 10985 RMD160 a74a2ba0b3d12e2c7ed2592da7b611f216eec602 SHA1 6dd9a9ea3b4bc11a0883431aef9ec950da7fb9c7 SHA256 0f6801ea9037b16a900b0bcde3c26f6b1d20a80c068ae13488a672dfb31eca63
MISC ChangeLog 54767 RMD160 105582e7bc5ae501cfa895da9f10171459bd56b8 SHA1 eb71b14d446e324125193e991a9dddf40a01660d SHA256 3751fe2d503ae13b57544c6ce4b2f10d68e9b1d8dceea16b020b5f71601cf596
MISC metadata.xml 240 RMD160 3dfef965b1bac3faa4abfec78fb98b0ed5a9ddaf SHA1 21c64f9ef102b6649bccfca61f06d7b328ef1727 SHA256 fecb6db825d33099fa9f18392db0b7a5ab89a4895ac6ca0f8a2313f348dfaaa6

files

metadata.xml

ldap

ldap-bugs@gentoo.org

openldap-2.3.39-r2.ebuild

# Copyright 1999-2008 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/net-nds/openldap/openldap-2.3.39-r2.ebuild,v 1.12 2008/01/13 22:22:25 jokey Exp $

WANT_AUTOCONF="latest"
WANT_AUTOMAKE="latest"
AT_M4DIR="./build"
inherit autotools db-use eutils flag-o-matic multilib ssl-cert toolchain-funcs versionator

DESCRIPTION="LDAP suite of application and development tools"
HOMEPAGE="http://www.OpenLDAP.org/"
SRC_URI="mirror://openldap/openldap-release/${P}.tgz"

LICENSE="OPENLDAP"
SLOT="0"
KEYWORDS="alpha amd64 arm hppa ia64 ~mips ppc ppc64 s390 sh sparc ~sparc-fbsd x86 ~x86-fbsd"
IUSE="berkdb crypt debug gdbm ipv6 kerberos minimal odbc overlays perl samba sasl slp smbkrb5passwd ssl tcpd selinux"

# note that the 'samba' USE flag pulling in OpenSSL is NOT an error. OpenLDAP
# uses OpenSSL for LanMan/NTLM hashing (which is used in some enviroments, like
# mine at work)!
# Robin H. Johnson March 8, 2004

RDEPEND="sys-libs/ncurses
tcpd? ( sys-apps/tcp-wrappers )
ssl? ( dev-libs/openssl )
sasl? ( dev-libs/cyrus-sasl )
!minimal? (
odbc? ( dev-db/unixODBC )
slp? ( net-libs/openslp )
perl? ( dev-lang/perl )
samba? ( dev-libs/openssl )
kerberos? ( virtual/krb5 )
berkdb? ( >=sys-libs/db-4.2.52_p2-r1 !=sys-libs/db-4.6* )
!berkdb? (
gdbm? ( sys-libs/gdbm )
!gdbm? ( >=sys-libs/db-4.2.52_p2-r1 !=sys-libs/db-4.6* )
)
smbkrb5passwd? (
dev-libs/openssl
app-crypt/heimdal
)
)
selinux? ( sec-policy/selinux-openldap )"
DEPEND="${RDEPEND}"

# for tracking versions
OPENLDAP_VERSIONTAG=".version-tag"
OPENLDAP_DEFAULTDIR_VERSIONTAG="/var/lib/openldap-data"

openldap_upgrade_howto() {
eerror
eerror "A (possible old) installation of OpenLDAP was detected,"
eerror "installation will not proceed for now."
eerror
eerror "As major version upgrades can corrupt your database,"
eerror "you need to dump your database and re-create it afterwards."
eerror ""
d="$(date -u +%s)"
l="/root/ldapdump.${d}"
i="${l}.raw"
eerror " 1. /etc/init.d/slurpd stop ; /etc/init.d/slapd stop"
eerror " 2. slapcat -l ${i}"
eerror " 3. egrep -v '^entryCSN:' <${i} >${l}"
eerror " 4. mv /var/lib/openldap-data/ /var/lib/openldap-data-backup/"
eerror " 5. emerge --update \=net-nds/${PF}"
eerror " 6. etc-update, and ensure that you apply the changes"
eerror " 7. slapadd -l ${l}"
eerror " 8. chown ldap:ldap /var/lib/openldap-data/*"
eerror " 9. /etc/init.d/slapd start"
eerror "10. check that your data is intact."
eerror "11. set up the new replication system."
eerror
die "You need to upgrade your database first"
}

openldap_find_versiontags() {
# scan for all datadirs
openldap_datadirs=""
if [ -f "${ROOT}"/etc/openldap/slapd.conf ]; then
openldap_datadirs="$(awk '{if($1 == "directory") print $2 }' ${ROOT}/etc/openldap/slapd.conf)"
fi
openldap_datadirs="${openldap_datadirs} ${OPENLDAP_DEFAULTDIR_VERSIONTAG}"

einfo
einfo "Scanning datadir(s) from slapd.conf and"
einfo "the default installdir for Versiontags"
einfo "(${OPENLDAP_DEFAULTDIR_VERSIONTAG} may appear twice)"
einfo

# scan datadirs if we have a version tag
openldap_found_tag=0
for each in ${openldap_datadirs}; do
CURRENT_TAGDIR=${ROOT}`echo ${each} | sed "s:\/::"`
CURRENT_TAG=${CURRENT_TAGDIR}/${OPENLDAP_VERSIONTAG}
if [ -d ${CURRENT_TAGDIR} ] && [ ${openldap_found_tag} == 0 ] ; then
einfo "- Checking ${each}..."
if [ -r ${CURRENT_TAG} ] ; then
# yey, we have one :)
einfo " Found Versiontag in ${each}"
source ${CURRENT_TAG}
if [ "${OLDPF}" == "" ] ; then
eerror "Invalid Versiontag found in ${CURRENT_TAGDIR}"
eerror "Please delete it"
eerror
die "Please kill the invalid versiontag in ${CURRENT_TAGDIR}"
fi

OLD_MAJOR=`get_version_component_range 2-3 ${OLDPF}`

# are we on the same branch?
if [ "${OLD_MAJOR}" != "${PV:0:3}" ] ; then
ewarn " Versiontag doesn't match current major release!"
if [[ `ls -a ${CURRENT_TAGDIR} | wc -l` -gt 5 ]] ; then
eerror " Versiontag says other major and you (probably) have datafiles!"
echo
openldap_upgrade_howto
else
einfo " No real problem, seems there's no database."
fi
else
einfo " Versiontag is fine here :)"
fi
else
einfo " Non-tagged dir ${each}"
if [[ `ls -a ${each} | wc -l` > 5 ]] ; then
einfo " EEK! Non-empty non-tagged datadir, counting `ls -a ${each} | wc -l` files"
echo

eerror
eerror "Your OpenLDAP Installation has a non tagged datadir that"
eerror "possibly contains a database at ${CURRENT_TAGDIR}"
eerror
eerror "Please export data if any entered and empty or remove"
eerror "the directory, installation has been stopped so you"
eerror "can take required action"
eerror
eerror "For a HOWTO on exporting the data, see instructions in the ebuild"
eerror
die "Please move the datadir ${CURRENT_TAGDIR} away"
fi
fi
einfo
fi
done

echo
einfo
einfo "All datadirs are fine, proceeding with merge now..."
einfo

}

pkg_setup() {
if has_version "<=dev-lang/perl-5.8.8_rc1" && built_with_use dev-lang/perl minimal ; then
die "You must have a complete (USE='-minimal') Perl install to use the perl backend!"
fi

if use samba && ! use ssl ; then
eerror "LAN manager passwords need ssl flag set"
die "Please set ssl useflag"
fi

if use minimal && has_version "net-nds/openldap" && built_with_use net-nds/openldap minimal ; then
einfo
einfo "Skipping scan for previous datadirs as requested by minimal useflag"
einfo
else
openldap_find_versiontags
fi

enewgroup ldap 439
enewuser ldap 439 -1 /usr/$(get_libdir)/openldap ldap
}

src_unpack() {
unpack ${A}

# According to MDK, the link order needs to be changed so that
# on systems w/ MD5 passwords the system crypt library is used
# (the net result is that "passwd" can be used to change ldap passwords w/
# proper pam support)
sed -i -e 's/$(SECURITY_LIBS) $(LDIF_LIBS) $(LUTIL_LIBS)/$(LUTIL_LIBS) $(SECURITY_LIBS) $(LDIF_LIBS)/' \
"${S}"/servers/slapd/Makefile.in

# supersedes old fix for bug #31202
EPATCH_OPTS="-p1 -d ${S}" epatch "${FILESDIR}"/${PN}-2.2.14-perlthreadsfix.patch

# ensure correct SLAPI path by default
sed -i -e 's,\(#define LDAPI_SOCK\).*,\1 "/var/run/openldap/slapd.sock",' \
"${S}"/include/ldap_defaults.h

EPATCH_OPTS="-p0 -d ${S}"

# ximian connector 1.4.7 ntlm patch
epatch "${FILESDIR}"/${PN}-2.2.6-ntlm.patch

# bug #132263
if use overlays ; then
epatch "${FILESDIR}"/${PN}-2.3.21-ppolicy.patch
fi

# fix up stuff for newer autoconf that simulates autoconf-2.13, but doesn't
# do it perfectly.
cd "${S}"/build
ln -s shtool install
ln -s shtool install.sh
einfo "Making sure upstream build strip does not do stripping too early"
sed -i.orig \
-e '/^STRIP/s,-s,,g' \
top.mk || die "Failed to block stripping"

# bug #116045
# patch contrib modules
if ! use minimal ; then
cd "${S}"/contrib
epatch "${FILESDIR}"/${PN}-2.3.24-contrib-smbk5pwd.patch
fi
}

src_compile() {
local myconf

# HDB is only available with BerkDB
myconf_berkdb='--enable-bdb --enable-ldbm-api=berkeley --enable-hdb=mod'
myconf_gdbm='--disable-bdb --enable-ldbm-api=gdbm --disable-hdb'

use debug && myconf="${myconf} --enable-debug" # there is no disable-debug

# enable slapd/slurpd servers if not doing a minimal build
if ! use minimal ; then
myconf="${myconf} --enable-slapd --enable-slurpd"
# base backend stuff
myconf="${myconf} --enable-ldbm"
if use berkdb ; then
einfo "Using Berkeley DB for local backend"
myconf="${myconf} ${myconf_berkdb}"
# We need to include the slotted db.h dir for FreeBSD
append-cppflags -I$(db_includedir)
elif use gdbm ; then
einfo "Using GDBM for local backend"
myconf="${myconf} ${myconf_gdbm}"
else
ewarn "Neither gdbm or berkdb USE flags present, falling back to"
ewarn "Berkeley DB for local backend"
myconf="${myconf} ${myconf_berkdb}"
# We need to include the slotted db.h dir for FreeBSD
append-cppflags -I$(db_includedir)
fi
# extra backend stuff
myconf="${myconf} --enable-passwd=mod --enable-phonetic=mod"
myconf="${myconf} --enable-dnssrv=mod --enable-ldap"
myconf="${myconf} --enable-meta=mod --enable-monitor=mod"
myconf="${myconf} --enable-null=mod --enable-shell=mod"
myconf="${myconf} --enable-relay=mod"
myconf="${myconf} $(use_enable perl perl mod)"
myconf="${myconf} $(use_enable odbc sql mod)"
# slapd options
myconf="${myconf} $(use_enable crypt) $(use_enable slp)"
myconf="${myconf} --enable-rewrite --enable-rlookups"
myconf="${myconf} --enable-aci --enable-modules"
myconf="${myconf} --enable-cleartext --enable-slapi"
myconf="${myconf} $(use_enable samba lmpasswd)"
# slapd overlay options
myconf="${myconf} --enable-dyngroup --enable-proxycache"
use overlays && myconf="${myconf} --enable-overlays=mod"
myconf="${myconf} --enable-syncprov"
else
myconf="${myconf} --disable-slapd --disable-slurpd"
myconf="${myconf} --disable-bdb --disable-ldbm"
myconf="${myconf} --disable-hdb --disable-monitor"
myconf="${myconf} --disable-slurpd --disable-overlays"
myconf="${myconf} --disable-relay"
fi

# basic functionality stuff
myconf="${myconf} --enable-syslog --enable-dynamic"
myconf="${myconf} --enable-local --enable-proctitle"

myconf="${myconf} $(use_enable ipv6)"
myconf="${myconf} $(use_with sasl cyrus-sasl) $(use_enable sasl spasswd)"
myconf="${myconf} $(use_enable tcpd wrappers) $(use_with ssl tls)"

if [ $(get_libdir) != "lib" ] ; then
append-ldflags -L/usr/$(get_libdir)
fi

STRIP=/bin/true \
econf \
--enable-static \
--enable-shared \
--libexecdir=/usr/$(get_libdir)/openldap \
${myconf} || die "configure failed"

# Adding back -j1 as upstream didn't answer on parallel make issue yet
emake -j1 depend || die "make depend failed"
emake -j1 || die "make failed"

# openldap/contrib
tc-export CC
if ! use minimal ; then
# dsaschema
einfo "Building contributed dsaschema"
cd "${S}"/contrib/slapd-modules/dsaschema
${CC} -shared -I../../../include ${CFLAGS} -fPIC \
-Wall -o libdsaschema-plugin.so dsaschema.c || \
die "failed to compile dsaschema module"
# kerberos passwd
if use kerberos ; then
einfo "Building contributed pw-kerberos"
cd "${S}"/contrib/slapd-modules/passwd/ && \
${CC} -shared -I../../../include ${CFLAGS} -fPIC \
-DHAVE_KRB5 -o pw-kerberos.so kerberos.c || \
die "failed to compile kerberos password module"
fi
# netscape mta-md5 password
einfo "Building contributed pw-netscape"
cd "${S}"/contrib/slapd-modules/passwd/ && \
${CC} -shared -I../../../include ${CFLAGS} -fPIC \
-o pw-netscape.so netscape.c || \
die "failed to compile netscape password module"
# smbk5pwd overlay
# Note: this modules builds, but may not work with
# Gentoo's MIT-Kerberos. It was designed for Heimdal
# Kerberos.
if use smbkrb5passwd ; then
einfo "Building contributed smbk5pwd"
local mydef
local mykrb5inc
mydef="-DDO_SAMBA -DDO_KRB5"
mykrb5inc="-I/usr/include/heimdal/"
cd "${S}"/contrib/slapd-modules/smbk5pwd && \
libexecdir="/usr/$(get_libdir)/openldap" \
DEFS="${mydef}" KRB5_INC="${mykrb5inc}" emake || \
die "failed to compile smbk5pwd module"
fi
# addrdnvalues
einfo "Building contributed addrdnvalues"
cd "${S}"/contrib/slapi-plugins/addrdnvalues/ && \
${CC} -shared -I../../../include ${CFLAGS} -fPIC \
-o libaddrdnvalues-plugin.so addrdnvalues.c || \
die "failed to compile addrdnvalues plugin"
fi
}

src_test() {
einfo "Doing tests"
cd tests ; make tests || die "make tests failed"
}

src_install() {
emake DESTDIR="${D}" install || die "make install failed"

dodoc ANNOUNCEMENT CHANGES COPYRIGHT README "${FILESDIR}"/DB_CONFIG.fast.example
docinto rfc ; dodoc doc/rfc/*.txt

# openldap modules go here
# TODO: write some code to populate slapd.conf with moduleload statements
keepdir /usr/$(get_libdir)/openldap/openldap/

# make state directories
local dirlist="data"
if ! use minimal; then
dirlist="${dirlist} slurp ldbm"
fi
for x in ${dirlist}; do
keepdir /var/lib/openldap-${x}
fowners ldap:ldap /var/lib/openldap-${x}
fperms 0700 /var/lib/openldap-${x}
done

echo "OLDPF='${PF}'" > "${D}${OPENLDAP_DEFAULTDIR_VERSIONTAG}/${OPENLDAP_VERSIONTAG}"
echo "# do NOT delete this. it is used" >> "${D}${OPENLDAP_DEFAULTDIR_VERSIONTAG}/${OPENLDAP_VERSIONTAG}"
echo "# to track versions for upgrading." >> "${D}${OPENLDAP_DEFAULTDIR_VERSIONTAG}/${OPENLDAP_VERSIONTAG}"

# manually remove /var/tmp references in .la
# because it is packaged with an ancient libtool
#for x in "${D}"/usr/$(get_libdir)/lib*.la; do
# sed -i -e "s:-L${S}[/]*libraries::" ${x}
#done

# change slapd.pid location in configuration file
keepdir /var/run/openldap
fowners ldap:ldap /var/run/openldap
fperms 0755 /var/run/openldap

if ! use minimal; then
# use our config
rm "${D}"etc/openldap/slapd.con*
insinto /etc/openldap
newins "${FILESDIR}"/${PN}-2.3.34-slapd-conf slapd.conf
configfile="${D}"etc/openldap/slapd.conf

# populate with built backends
ebegin "populate config with built backends"
for x in "${D}"usr/$(get_libdir)/openldap/openldap/back_*.so; do
elog "Adding $(basename ${x})"
sed -e "/###INSERTDYNAMICMODULESHERE###$/a# moduleload\t$(basename ${x})" -i "${configfile}"
done
sed -e "s:###INSERTDYNAMICMODULESHERE###$:# modulepath\t/usr/$(get_libdir)/openldap/openldap:" -i "${configfile}"
fowners root:ldap /etc/openldap/slapd.conf
fperms 0640 /etc/openldap/slapd.conf
cp "${configfile}" "${configfile}".default
eend

# install our own init scripts
newinitd "${FILESDIR}"/slapd-initd slapd
newinitd "${FILESDIR}"/slurpd-initd slurpd
newconfd "${FILESDIR}"/slapd-confd slapd

if [ $(get_libdir) != lib ]; then
sed -e "s,/usr/lib/,/usr/$(get_libdir)/," -i "${D}"etc/init.d/{slapd,slurpd}
fi

# install contributed modules
docinto /
if [ -e "${S}"/contrib/slapd-modules/dsaschema/libdsaschema-plugin.so ];
then
cd "${S}"/contrib/slapd-modules/dsaschema/
newdoc README README.contrib.dsaschema
exeinto /usr/$(get_libdir)/openldap/openldap
doexe libdsaschema-plugin.so || \
die "failed to install dsaschema module"
fi
if [ -e "${S}"/contrib/slapd-modules/passwd/pw-kerberos.so ]; then
cd "${S}"/contrib/slapd-modules/passwd/
newdoc README README.contrib.passwd
exeinto /usr/$(get_libdir)/openldap/openldap
doexe pw-kerberos.so || \
die "failed to install kerberos passwd module"
fi
if [ -e "${S}"/contrib/slapd-modules/passwd/pw-netscape.so ]; then
cd "${S}"/contrib/slapd-modules/passwd/
newdoc README README.contrib.passwd
exeinto /usr/$(get_libdir)/openldap/openldap
doexe "${S}"/contrib/slapd-modules/passwd/pw-netscape.so || \
die "failed to install Netscape MTA-MD5 passwd module"
fi
if [ -e "${S}"/contrib/slapd-modules/smbk5pwd/.libs/smbk5pwd.so ]; then
cd "${S}"/contrib/slapd-modules/smbk5pwd
newdoc README README.contrib.smbk5pwd
libexecdir="/usr/$(get_libdir)/openldap" \
emake DESTDIR="${D}" install-mod || \
die "failed to install smbk5pwd overlay module"
fi
if [ -e "${S}"/contrib/slapd-tools/statslog ]; then
cd "${S}"/contrib/slapd-tools
exeinto /usr/bin
newexe statslog ldapstatslog || \
die "failed to install ldapstatslog script"
fi
if [ -e "${S}"/contrib/slapi-plugins/addrdnvalues/libaddrdnvalues-plugin.so ];
then
cd "${S}"/contrib/slapi-plugins/addrdnvalues
newdoc README README.contrib.addrdnvalues
exeinto /usr/$(get_libdir)/openldap/openldap
doexe libaddrdnvalues-plugin.so || \
die "failed to install addrdnvalues plugin"
fi
fi
}

pkg_preinst() {
# keep old libs if any
LIBSUFFIXES=".so.2.0.130 -2.2.so.7"
for LIBSUFFIX in ${LIBSUFFIXES} ; do
for each in liblber libldap libldap_r ; do
preserve_old_lib "usr/$(get_libdir)/${each}${LIBSUFFIX}"
done
done
}

pkg_postinst() {
if ! use minimal ; then
# You cannot build SSL certificates during src_install that will make
# binary packages containing your SSL key, which is both a security risk
# and a misconfiguration if multiple machines use the same key and cert.
# Additionally, it overwrites
if use ssl; then
install_cert /etc/openldap/ssl/ldap
chown ldap:ldap "${ROOT}"etc/openldap/ssl/ldap.*
ewarn "Self-signed SSL certificates are treated harshly by OpenLDAP 2.[12]"
ewarn "Self-signed SSL certificates are treated harshly by OpenLDAP 2.[12]"
ewarn "add 'TLS_REQCERT never' if you want to use them."
fi
# These lines force the permissions of various content to be correct
chown ldap:ldap "${ROOT}"var/run/openldap
chmod 0755 "${ROOT}"var/run/openldap
chown root:ldap "${ROOT}"etc/openldap/slapd.conf{,.default}
chmod 0640 "${ROOT}"etc/openldap/slapd.conf{,.default}
chown ldap:ldap "${ROOT}"var/lib/openldap-{data,ldbm,slurp}
fi

# Reference inclusion bug #77330
echo
elog
elog "Getting started using OpenLDAP? There is some documentation available:"
elog "Gentoo Guide to OpenLDAP Authentication"
elog "(http://www.gentoo.org/doc/en/ldap-howto.xml)"
elog

# note to bug #110412
echo
elog
elog "An example file for tuning BDB backends with openldap is:"
elog "/usr/share/doc/${PF}/DB_CONFIG.fast.example.gz"
elog

LIBSUFFIXES=".so.2.0.130 -2.2.so.7"
for LIBSUFFIX in ${LIBSUFFIXES} ; do
for each in liblber libldap libldap_r ; do
preserve_old_lib_notify "usr/$(get_libdir)/${each}${LIBSUFFIX}"
done
done
}

openldap-2.3.40-r1.ebuild

# Copyright 1999-2008 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/net-nds/openldap/openldap-2.3.40-r1.ebuild,v 1.4 2008/01/13 22:22:25 jokey Exp $

WANT_AUTOCONF="latest"
WANT_AUTOMAKE="latest"
AT_M4DIR="./build"
inherit autotools db-use eutils flag-o-matic multilib ssl-cert toolchain-funcs versionator

DESCRIPTION="LDAP suite of application and development tools"
HOMEPAGE="http://www.OpenLDAP.org/"
SRC_URI="mirror://openldap/openldap-release/${P}.tgz"

LICENSE="OPENLDAP"
SLOT="0"
KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~sparc-fbsd ~x86 ~x86-fbsd"
IUSE="berkdb crypt debug gdbm ipv6 kerberos minimal odbc overlays perl samba sasl slp smbkrb5passwd ssl tcpd selinux"

# note that the 'samba' USE flag pulling in OpenSSL is NOT an error. OpenLDAP
# uses OpenSSL for LanMan/NTLM hashing (which is used in some enviroments, like
# mine at work)!
# Robin H. Johnson March 8, 2004

RDEPEND="sys-libs/ncurses
tcpd? ( sys-apps/tcp-wrappers )
ssl? ( dev-libs/openssl )
sasl? ( dev-libs/cyrus-sasl )
!minimal? (
odbc? ( dev-db/unixODBC )
slp? ( net-libs/openslp )
perl? ( dev-lang/perl )
samba? ( dev-libs/openssl )
kerberos? ( virtual/krb5 )
berkdb? ( >=sys-libs/db-4.2.52_p2-r1 !=sys-libs/db-4.6* )
!berkdb? (
gdbm? ( sys-libs/gdbm )
!gdbm? ( >=sys-libs/db-4.2.52_p2-r1 !=sys-libs/db-4.6* )
)
smbkrb5passwd? (
dev-libs/openssl
app-crypt/heimdal
)
)
selinux? ( sec-policy/selinux-openldap )"
DEPEND="${RDEPEND}"

# for tracking versions
OPENLDAP_VERSIONTAG=".version-tag"
OPENLDAP_DEFAULTDIR_VERSIONTAG="/var/lib/openldap-data"

openldap_upgrade_howto() {
eerror
eerror "A (possible old) installation of OpenLDAP was detected,"
eerror "installation will not proceed for now."
eerror
eerror "As major version upgrades can corrupt your database,"
eerror "you need to dump your database and re-create it afterwards."
eerror ""
d="$(date -u +%s)"
l="/root/ldapdump.${d}"
i="${l}.raw"
eerror " 1. /etc/init.d/slurpd stop ; /etc/init.d/slapd stop"
eerror " 2. slapcat -l ${i}"
eerror " 3. egrep -v '^entryCSN:' <${i} >${l}"
eerror " 4. mv /var/lib/openldap-data/ /var/lib/openldap-data-backup/"
eerror " 5. emerge --update \=net-nds/${PF}"
eerror " 6. etc-update, and ensure that you apply the changes"
eerror " 7. slapadd -l ${l}"
eerror " 8. chown ldap:ldap /var/lib/openldap-data/*"
eerror " 9. /etc/init.d/slapd start"
eerror "10. check that your data is intact."
eerror "11. set up the new replication system."
eerror
die "You need to upgrade your database first"
}

openldap_find_versiontags() {
# scan for all datadirs
openldap_datadirs=""
if [ -f "${ROOT}"/etc/openldap/slapd.conf ]; then
openldap_datadirs="$(awk '{if($1 == "directory") print $2 }' ${ROOT}/etc/openldap/slapd.conf)"
fi
openldap_datadirs="${openldap_datadirs} ${OPENLDAP_DEFAULTDIR_VERSIONTAG}"

einfo
einfo "Scanning datadir(s) from slapd.conf and"
einfo "the default installdir for Versiontags"
einfo "(${OPENLDAP_DEFAULTDIR_VERSIONTAG} may appear twice)"
einfo

# scan datadirs if we have a version tag
openldap_found_tag=0
for each in ${openldap_datadirs}; do
CURRENT_TAGDIR=${ROOT}`echo ${each} | sed "s:\/::"`
CURRENT_TAG=${CURRENT_TAGDIR}/${OPENLDAP_VERSIONTAG}
if [ -d ${CURRENT_TAGDIR} ] && [ ${openldap_found_tag} == 0 ] ; then
einfo "- Checking ${each}..."
if [ -r ${CURRENT_TAG} ] ; then
# yey, we have one :)
einfo " Found Versiontag in ${each}"
source ${CURRENT_TAG}
if [ "${OLDPF}" == "" ] ; then
eerror "Invalid Versiontag found in ${CURRENT_TAGDIR}"
eerror "Please delete it"
eerror
die "Please kill the invalid versiontag in ${CURRENT_TAGDIR}"
fi

OLD_MAJOR=`get_version_component_range 2-3 ${OLDPF}`

# are we on the same branch?
if [ "${OLD_MAJOR}" != "${PV:0:3}" ] ; then
ewarn " Versiontag doesn't match current major release!"
if [[ `ls -a ${CURRENT_TAGDIR} | wc -l` -gt 5 ]] ; then
eerror " Versiontag says other major and you (probably) have datafiles!"
echo
openldap_upgrade_howto
else
einfo " No real problem, seems there's no database."
fi
else
einfo " Versiontag is fine here :)"
fi
else
einfo " Non-tagged dir ${each}"
if [[ `ls -a ${each} | wc -l` > 5 ]] ; then
einfo " EEK! Non-empty non-tagged datadir, counting `ls -a ${each} | wc -l` files"
echo

eerror
eerror "Your OpenLDAP Installation has a non tagged datadir that"
eerror "possibly contains a database at ${CURRENT_TAGDIR}"
eerror
eerror "Please export data if any entered and empty or remove"
eerror "the directory, installation has been stopped so you"
eerror "can take required action"
eerror
eerror "For a HOWTO on exporting the data, see instructions in the ebuild"
eerror
die "Please move the datadir ${CURRENT_TAGDIR} away"
fi
fi
einfo
fi
done

echo
einfo
einfo "All datadirs are fine, proceeding with merge now..."
einfo

}

pkg_setup() {
if has_version "<=dev-lang/perl-5.8.8_rc1" && built_with_use dev-lang/perl minimal ; then
die "You must have a complete (USE='-minimal') Perl install to use the perl backend!"
fi

if use samba && ! use ssl ; then
eerror "LAN manager passwords need ssl flag set"
die "Please set ssl useflag"
fi

if use minimal && has_version "net-nds/openldap" && built_with_use net-nds/openldap minimal ; then
einfo
einfo "Skipping scan for previous datadirs as requested by minimal useflag"
einfo
else
openldap_find_versiontags
fi

enewgroup ldap 439
enewuser ldap 439 -1 /usr/$(get_libdir)/openldap ldap
}

src_unpack() {
unpack ${A}

# According to MDK, the link order needs to be changed so that
# on systems w/ MD5 passwords the system crypt library is used
# (the net result is that "passwd" can be used to change ldap passwords w/
# proper pam support)
sed -i -e 's/$(SECURITY_LIBS) $(LDIF_LIBS) $(LUTIL_LIBS)/$(LUTIL_LIBS) $(SECURITY_LIBS) $(LDIF_LIBS)/' \
"${S}"/servers/slapd/Makefile.in

# supersedes old fix for bug #31202
EPATCH_OPTS="-p1 -d ${S}" epatch "${FILESDIR}"/${PN}-2.2.14-perlthreadsfix.patch

# ensure correct SLAPI path by default
sed -i -e 's,\(#define LDAPI_SOCK\).*,\1 "/var/run/openldap/slapd.sock",' \
"${S}"/include/ldap_defaults.h

EPATCH_OPTS="-p0 -d ${S}"

# ximian connector 1.4.7 ntlm patch
epatch "${FILESDIR}"/${PN}-2.2.6-ntlm.patch

# bug #132263
if use overlays ; then
epatch "${FILESDIR}"/${PN}-2.3.21-ppolicy.patch
fi

# fix up stuff for newer autoconf that simulates autoconf-2.13, but doesn't
# do it perfectly.
cd "${S}"/build
ln -s shtool install
ln -s shtool install.sh
einfo "Making sure upstream build strip does not do stripping too early"
sed -i.orig \
-e '/^STRIP/s,-s,,g' \
top.mk || die "Failed to block stripping"

# bug #116045
# patch contrib modules
if ! use minimal ; then
cd "${S}"/contrib
epatch "${FILESDIR}"/${PN}-2.3.24-contrib-smbk5pwd.patch
fi
}

src_compile() {
local myconf

# HDB is only available with BerkDB
myconf_berkdb='--enable-bdb --enable-ldbm-api=berkeley --enable-hdb=mod'
myconf_gdbm='--disable-bdb --enable-ldbm-api=gdbm --disable-hdb'

use debug && myconf="${myconf} --enable-debug" # there is no disable-debug

# enable slapd/slurpd servers if not doing a minimal build
if ! use minimal ; then
myconf="${myconf} --enable-slapd --enable-slurpd"
# base backend stuff
myconf="${myconf} --enable-ldbm"
if use berkdb ; then
einfo "Using Berkeley DB for local backend"
myconf="${myconf} ${myconf_berkdb}"
# We need to include the slotted db.h dir for FreeBSD
append-cppflags -I$(db_includedir)
elif use gdbm ; then
einfo "Using GDBM for local backend"
myconf="${myconf} ${myconf_gdbm}"
else
ewarn "Neither gdbm or berkdb USE flags present, falling back to"
ewarn "Berkeley DB for local backend"
myconf="${myconf} ${myconf_berkdb}"
# We need to include the slotted db.h dir for FreeBSD
append-cppflags -I$(db_includedir)
fi
# extra backend stuff
myconf="${myconf} --enable-passwd=mod --enable-phonetic=mod"
myconf="${myconf} --enable-dnssrv=mod --enable-ldap"
myconf="${myconf} --enable-meta=mod --enable-monitor=mod"
myconf="${myconf} --enable-null=mod --enable-shell=mod"
myconf="${myconf} --enable-relay=mod"
myconf="${myconf} $(use_enable perl perl mod)"
myconf="${myconf} $(use_enable odbc sql mod)"
# slapd options
myconf="${myconf} $(use_enable crypt) $(use_enable slp)"
myconf="${myconf} --enable-rewrite --enable-rlookups"
myconf="${myconf} --enable-aci --enable-modules"
myconf="${myconf} --enable-cleartext --enable-slapi"
myconf="${myconf} $(use_enable samba lmpasswd)"
# slapd overlay options
myconf="${myconf} --enable-dyngroup --enable-proxycache"
use overlays && myconf="${myconf} --enable-overlays=mod"
myconf="${myconf} --enable-syncprov"
else
myconf="${myconf} --disable-slapd --disable-slurpd"
myconf="${myconf} --disable-bdb --disable-ldbm"
myconf="${myconf} --disable-hdb --disable-monitor"
myconf="${myconf} --disable-slurpd --disable-overlays"
myconf="${myconf} --disable-relay"
fi

# basic functionality stuff
myconf="${myconf} --enable-syslog --enable-dynamic"
myconf="${myconf} --enable-local --enable-proctitle"

myconf="${myconf} $(use_enable ipv6)"
myconf="${myconf} $(use_with sasl cyrus-sasl) $(use_enable sasl spasswd)"
myconf="${myconf} $(use_enable tcpd wrappers) $(use_with ssl tls)"

if [ $(get_libdir) != "lib" ] ; then
append-ldflags -L/usr/$(get_libdir)
fi

STRIP=/bin/true \
econf \
--enable-static \
--enable-shared \
--libexecdir=/usr/$(get_libdir)/openldap \
${myconf} || die "configure failed"

# Adding back -j1 as upstream didn't answer on parallel make issue yet
emake -j1 depend || die "make depend failed"
emake -j1 || die "make failed"

# openldap/contrib
tc-export CC
if ! use minimal ; then
# dsaschema
einfo "Building contributed dsaschema"
cd "${S}"/contrib/slapd-modules/dsaschema
${CC} -shared -I../../../include ${CFLAGS} -fPIC \
-Wall -o libdsaschema-plugin.so dsaschema.c || \
die "failed to compile dsaschema module"
# kerberos passwd
if use kerberos ; then
einfo "Building contributed pw-kerberos"
cd "${S}"/contrib/slapd-modules/passwd/ && \
${CC} -shared -I../../../include ${CFLAGS} -fPIC \
-DHAVE_KRB5 -o pw-kerberos.so kerberos.c || \
die "failed to compile kerberos password module"
fi
# netscape mta-md5 password
einfo "Building contributed pw-netscape"
cd "${S}"/contrib/slapd-modules/passwd/ && \
${CC} -shared -I../../../include ${CFLAGS} -fPIC \
-o pw-netscape.so netscape.c || \
die "failed to compile netscape password module"
# smbk5pwd overlay
# Note: this modules builds, but may not work with
# Gentoo's MIT-Kerberos. It was designed for Heimdal
# Kerberos.
if use smbkrb5passwd ; then
einfo "Building contributed smbk5pwd"
local mydef
local mykrb5inc
mydef="-DDO_SAMBA -DDO_KRB5"
mykrb5inc="-I/usr/include/heimdal/"
cd "${S}"/contrib/slapd-modules/smbk5pwd && \
libexecdir="/usr/$(get_libdir)/openldap" \
DEFS="${mydef}" KRB5_INC="${mykrb5inc}" emake || \
die "failed to compile smbk5pwd module"
fi
# addrdnvalues
einfo "Building contributed addrdnvalues"
cd "${S}"/contrib/slapi-plugins/addrdnvalues/ && \
${CC} -shared -I../../../include ${CFLAGS} -fPIC \
-o libaddrdnvalues-plugin.so addrdnvalues.c || \
die "failed to compile addrdnvalues plugin"
fi
}

src_test() {
einfo "Doing tests"
cd tests ; make tests || die "make tests failed"
}

src_install() {
emake DESTDIR="${D}" install || die "make install failed"

dodoc ANNOUNCEMENT CHANGES COPYRIGHT README "${FILESDIR}"/DB_CONFIG.fast.example
docinto rfc ; dodoc doc/rfc/*.txt

# openldap modules go here
# TODO: write some code to populate slapd.conf with moduleload statements
keepdir /usr/$(get_libdir)/openldap/openldap/

# make state directories
local dirlist="data"
if ! use minimal; then
dirlist="${dirlist} slurp ldbm"
fi
for x in ${dirlist}; do
keepdir /var/lib/openldap-${x}
fowners ldap:ldap /var/lib/openldap-${x}
fperms 0700 /var/lib/openldap-${x}
done

echo "OLDPF='${PF}'" > "${D}${OPENLDAP_DEFAULTDIR_VERSIONTAG}/${OPENLDAP_VERSIONTAG}"
echo "# do NOT delete this. it is used" >> "${D}${OPENLDAP_DEFAULTDIR_VERSIONTAG}/${OPENLDAP_VERSIONTAG}"
echo "# to track versions for upgrading." >> "${D}${OPENLDAP_DEFAULTDIR_VERSIONTAG}/${OPENLDAP_VERSIONTAG}"

# manually remove /var/tmp references in .la
# because it is packaged with an ancient libtool
#for x in "${D}"/usr/$(get_libdir)/lib*.la; do
# sed -i -e "s:-L${S}[/]*libraries::" ${x}
#done

# change slapd.pid location in configuration file
keepdir /var/run/openldap
fowners ldap:ldap /var/run/openldap
fperms 0755 /var/run/openldap

if ! use minimal; then
# use our config
rm "${D}"etc/openldap/slapd.con*
insinto /etc/openldap
newins "${FILESDIR}"/${PN}-2.3.34-slapd-conf slapd.conf
configfile="${D}"etc/openldap/slapd.conf

# populate with built backends
ebegin "populate config with built backends"
for x in "${D}"usr/$(get_libdir)/openldap/openldap/back_*.so; do
elog "Adding $(basename ${x})"
sed -e "/###INSERTDYNAMICMODULESHERE###$/a# moduleload\t$(basename ${x})" -i "${configfile}"
done
sed -e "s:###INSERTDYNAMICMODULESHERE###$:# modulepath\t/usr/$(get_libdir)/openldap/openldap:" -i "${configfile}"
fowners root:ldap /etc/openldap/slapd.conf
fperms 0640 /etc/openldap/slapd.conf
cp "${configfile}" "${configfile}".default
eend

# install our own init scripts
newinitd "${FILESDIR}"/slapd-initd slapd
newinitd "${FILESDIR}"/slurpd-initd slurpd
newconfd "${FILESDIR}"/slapd-confd slapd

if [ $(get_libdir) != lib ]; then
sed -e "s,/usr/lib/,/usr/$(get_libdir)/," -i "${D}"etc/init.d/{slapd,slurpd}
fi

# install contributed modules
docinto /
if [ -e "${S}"/contrib/slapd-modules/dsaschema/libdsaschema-plugin.so ];
then
cd "${S}"/contrib/slapd-modules/dsaschema/
newdoc README README.contrib.dsaschema
exeinto /usr/$(get_libdir)/openldap/openldap
doexe libdsaschema-plugin.so || \
die "failed to install dsaschema module"
fi
if [ -e "${S}"/contrib/slapd-modules/passwd/pw-kerberos.so ]; then
cd "${S}"/contrib/slapd-modules/passwd/
newdoc README README.contrib.passwd
exeinto /usr/$(get_libdir)/openldap/openldap
doexe pw-kerberos.so || \
die "failed to install kerberos passwd module"
fi
if [ -e "${S}"/contrib/slapd-modules/passwd/pw-netscape.so ]; then
cd "${S}"/contrib/slapd-modules/passwd/
newdoc README README.contrib.passwd
exeinto /usr/$(get_libdir)/openldap/openldap
doexe "${S}"/contrib/slapd-modules/passwd/pw-netscape.so || \
die "failed to install Netscape MTA-MD5 passwd module"
fi
if [ -e "${S}"/contrib/slapd-modules/smbk5pwd/.libs/smbk5pwd.so ]; then
cd "${S}"/contrib/slapd-modules/smbk5pwd
newdoc README README.contrib.smbk5pwd
libexecdir="/usr/$(get_libdir)/openldap" \
emake DESTDIR="${D}" install-mod || \
die "failed to install smbk5pwd overlay module"
fi
if [ -e "${S}"/contrib/slapd-tools/statslog ]; then
cd "${S}"/contrib/slapd-tools
exeinto /usr/bin
newexe statslog ldapstatslog || \
die "failed to install ldapstatslog script"
fi
if [ -e "${S}"/contrib/slapi-plugins/addrdnvalues/libaddrdnvalues-plugin.so ];
then
cd "${S}"/contrib/slapi-plugins/addrdnvalues
newdoc README README.contrib.addrdnvalues
exeinto /usr/$(get_libdir)/openldap/openldap
doexe libaddrdnvalues-plugin.so || \
die "failed to install addrdnvalues plugin"
fi
fi
}

pkg_preinst() {
# keep old libs if any
LIBSUFFIXES=".so.2.0.130 -2.2.so.7"
for LIBSUFFIX in ${LIBSUFFIXES} ; do
for each in liblber libldap libldap_r ; do
preserve_old_lib "usr/$(get_libdir)/${each}${LIBSUFFIX}"
done
done
}

pkg_postinst() {
if ! use minimal ; then
# You cannot build SSL certificates during src_install that will make
# binary packages containing your SSL key, which is both a security risk
# and a misconfiguration if multiple machines use the same key and cert.
# Additionally, it overwrites
if use ssl; then
install_cert /etc/openldap/ssl/ldap
chown ldap:ldap "${ROOT}"etc/openldap/ssl/ldap.*
ewarn "Self-signed SSL certificates are treated harshly by OpenLDAP 2.[12]"
ewarn "Self-signed SSL certificates are treated harshly by OpenLDAP 2.[12]"
ewarn "add 'TLS_REQCERT never' if you want to use them."
fi
# These lines force the permissions of various content to be correct
chown ldap:ldap "${ROOT}"var/run/openldap
chmod 0755 "${ROOT}"var/run/openldap
chown root:ldap "${ROOT}"etc/openldap/slapd.conf{,.default}
chmod 0640 "${ROOT}"etc/openldap/slapd.conf{,.default}
chown ldap:ldap "${ROOT}"var/lib/openldap-{data,ldbm,slurp}
fi

# Reference inclusion bug #77330
echo
elog
elog "Getting started using OpenLDAP? There is some documentation available:"
elog "Gentoo Guide to OpenLDAP Authentication"
elog "(http://www.gentoo.org/doc/en/ldap-howto.xml)"
elog

# note to bug #110412
echo
elog
elog "An example file for tuning BDB backends with openldap is:"
elog "/usr/share/doc/${PF}/DB_CONFIG.fast.example.gz"
elog

LIBSUFFIXES=".so.2.0.130 -2.2.so.7"
for LIBSUFFIX in ${LIBSUFFIXES} ; do
for each in liblber libldap libldap_r ; do
preserve_old_lib_notify "usr/$(get_libdir)/${each}${LIBSUFFIX}"
done
done
}

openldap-2.3.41-r1.ebuild

# Copyright 1999-2008 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/net-nds/openldap/openldap-2.3.41-r1.ebuild,v 1.2 2008/06/20 15:48:28 loki_val Exp $

EAPI="1"

WANT_AUTOCONF="latest"
WANT_AUTOMAKE="latest"
AT_M4DIR="./build"
inherit autotools db-use eutils flag-o-matic multilib ssl-cert toolchain-funcs versionator

DESCRIPTION="LDAP suite of application and development tools"
HOMEPAGE="http://www.OpenLDAP.org/"
SRC_URI="mirror://openldap/openldap-release/${P}.tgz"

LICENSE="OPENLDAP"
SLOT="0"
KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~sparc-fbsd ~x86 ~x86-fbsd"
IUSE="berkdb crypt debug gdbm ipv6 kerberos minimal odbc overlays perl samba sasl slp smbkrb5passwd ssl tcpd selinux"

# note that the 'samba' USE flag pulling in OpenSSL is NOT an error. OpenLDAP
# uses OpenSSL for LanMan/NTLM hashing (which is used in some enviroments, like
# mine at work)!
# Robin H. Johnson March 8, 2004

RDEPEND="sys-libs/ncurses
tcpd? ( sys-apps/tcp-wrappers )
ssl? ( dev-libs/openssl )
sasl? ( dev-libs/cyrus-sasl )
!minimal? (
odbc? ( dev-db/unixODBC )
slp? ( net-libs/openslp )
perl? ( dev-lang/perl )
samba? ( dev-libs/openssl )
kerberos? ( virtual/krb5 )
berkdb? (
|| ( sys-libs/db:4.5
sys-libs/db:4.4
sys-libs/db:4.3
>=sys-libs/db-4.2.52_p2-r1:4.2
)
)
!berkdb? (
gdbm? ( sys-libs/gdbm )
!gdbm? (
|| ( sys-libs/db:4.5
sys-libs/db:4.4
sys-libs/db:4.3
>=sys-libs/db-4.2.52_p2-r1:4.2
)
)
)
smbkrb5passwd? (
dev-libs/openssl
app-crypt/heimdal
)
)
selinux? ( sec-policy/selinux-openldap )"
DEPEND="${RDEPEND}"

# for tracking versions
OPENLDAP_VERSIONTAG=".version-tag"
OPENLDAP_DEFAULTDIR_VERSIONTAG="/var/lib/openldap-data"

openldap_upgrade_howto() {
eerror
eerror "A (possible old) installation of OpenLDAP was detected,"
eerror "installation will not proceed for now."
eerror
eerror "As major version upgrades can corrupt your database,"
eerror "you need to dump your database and re-create it afterwards."
eerror ""
d="$(date -u +%s)"
l="/root/ldapdump.${d}"
i="${l}.raw"
eerror " 1. /etc/init.d/slurpd stop ; /etc/init.d/slapd stop"
eerror " 2. slapcat -l ${i}"
eerror " 3. egrep -v '^entryCSN:' <${i} >${l}"
eerror " 4. mv /var/lib/openldap-data/ /var/lib/openldap-data-backup/"
eerror " 5. emerge --update \=net-nds/${PF}"
eerror " 6. etc-update, and ensure that you apply the changes"
eerror " 7. slapadd -l ${l}"
eerror " 8. chown ldap:ldap /var/lib/openldap-data/*"
eerror " 9. /etc/init.d/slapd start"
eerror "10. check that your data is intact."
eerror "11. set up the new replication system."
eerror
die "You need to upgrade your database first"
}

openldap_find_versiontags() {
# scan for all datadirs
openldap_datadirs=""
if [ -f "${ROOT}"/etc/openldap/slapd.conf ]; then
openldap_datadirs="$(awk '{if($1 == "directory") print $2 }' ${ROOT}/etc/openldap/slapd.conf)"
fi
openldap_datadirs="${openldap_datadirs} ${OPENLDAP_DEFAULTDIR_VERSIONTAG}"

einfo
einfo "Scanning datadir(s) from slapd.conf and"
einfo "the default installdir for Versiontags"
einfo "(${OPENLDAP_DEFAULTDIR_VERSIONTAG} may appear twice)"
einfo

# scan datadirs if we have a version tag
openldap_found_tag=0
for each in ${openldap_datadirs}; do
CURRENT_TAGDIR=${ROOT}`echo ${each} | sed "s:\/::"`
CURRENT_TAG=${CURRENT_TAGDIR}/${OPENLDAP_VERSIONTAG}
if [ -d ${CURRENT_TAGDIR} ] && [ ${openldap_found_tag} == 0 ] ; then
einfo "- Checking ${each}..."
if [ -r ${CURRENT_TAG} ] ; then
# yey, we have one :)
einfo " Found Versiontag in ${each}"
source ${CURRENT_TAG}
if [ "${OLDPF}" == "" ] ; then
eerror "Invalid Versiontag found in ${CURRENT_TAGDIR}"
eerror "Please delete it"
eerror
die "Please kill the invalid versiontag in ${CURRENT_TAGDIR}"
fi

OLD_MAJOR=`get_version_component_range 2-3 ${OLDPF}`

# are we on the same branch?
if [ "${OLD_MAJOR}" != "${PV:0:3}" ] ; then
ewarn " Versiontag doesn't match current major release!"
if [[ `ls -a ${CURRENT_TAGDIR} | wc -l` -gt 5 ]] ; then
eerror " Versiontag says other major and you (probably) have datafiles!"
echo
openldap_upgrade_howto
else
einfo " No real problem, seems there's no database."
fi
else
einfo " Versiontag is fine here :)"
fi
else
einfo " Non-tagged dir ${each}"
if [[ `ls -a ${each} | wc -l` > 5 ]] ; then
einfo " EEK! Non-empty non-tagged datadir, counting `ls -a ${each} | wc -l` files"
echo

eerror
eerror "Your OpenLDAP Installation has a non tagged datadir that"
eerror "possibly contains a database at ${CURRENT_TAGDIR}"
eerror
eerror "Please export data if any entered and empty or remove"
eerror "the directory, installation has been stopped so you"
eerror "can take required action"
eerror
eerror "For a HOWTO on exporting the data, see instructions in the ebuild"
eerror
die "Please move the datadir ${CURRENT_TAGDIR} away"
fi
fi
einfo
fi
done

echo
einfo
einfo "All datadirs are fine, proceeding with merge now..."
einfo

}

pkg_setup() {
if has_version "<=dev-lang/perl-5.8.8_rc1" && built_with_use dev-lang/perl minimal ; then
die "You must have a complete (USE='-minimal') Perl install to use the perl backend!"
fi

if use samba && ! use ssl ; then
eerror "LAN manager passwords need ssl flag set"
die "Please set ssl useflag"
fi

if use minimal && has_version "net-nds/openldap" && built_with_use net-nds/openldap minimal ; then
einfo
einfo "Skipping scan for previous datadirs as requested by minimal useflag"
einfo
else
openldap_find_versiontags
fi

enewgroup ldap 439
enewuser ldap 439 -1 /usr/$(get_libdir)/openldap ldap
}

src_unpack() {
unpack ${A}

# According to MDK, the link order needs to be changed so that
# on systems w/ MD5 passwords the system crypt library is used
# (the net result is that "passwd" can be used to change ldap passwords w/
# proper pam support)
sed -i -e 's/$(SECURITY_LIBS) $(LDIF_LIBS) $(LUTIL_LIBS)/$(LUTIL_LIBS) $(SECURITY_LIBS) $(LDIF_LIBS)/' \
"${S}"/servers/slapd/Makefile.in

# supersedes old fix for bug #31202
EPATCH_OPTS="-p1 -d ${S}" epatch "${FILESDIR}"/${PN}-2.2.14-perlthreadsfix.patch

# ensure correct SLAPI path by default
sed -i -e 's,\(#define LDAPI_SOCK\).*,\1 "/var/run/openldap/slapd.sock",' \
"${S}"/include/ldap_defaults.h

EPATCH_OPTS="-p0 -d ${S}"

# ximian connector 1.4.7 ntlm patch
epatch "${FILESDIR}"/${PN}-2.2.6-ntlm.patch

# bug #132263
if use overlays ; then
epatch "${FILESDIR}"/${PN}-2.3.21-ppolicy.patch
fi

# fix up stuff for newer autoconf that simulates autoconf-2.13, but doesn't
# do it perfectly.
cd "${S}"/build
ln -s shtool install
ln -s shtool install.sh
einfo "Making sure upstream build strip does not do stripping too early"
sed -i.orig \
-e '/^STRIP/s,-s,,g' \
top.mk || die "Failed to block stripping"

# bug #116045
# patch contrib modules
if ! use minimal ; then
cd "${S}"/contrib
epatch "${FILESDIR}"/${PN}-2.3.24-contrib-smbk5pwd.patch
fi
}

src_compile() {
local myconf

#Fix for glibc-2.8 and ucred. Bug 228457.
append-flags -D_GNU_SOURCE

# HDB is only available with BerkDB
myconf_berkdb='--enable-bdb --enable-ldbm-api=berkeley --enable-hdb=mod'
myconf_gdbm='--disable-bdb --enable-ldbm-api=gdbm --disable-hdb'

use debug && myconf="${myconf} --enable-debug" # there is no disable-debug

# enable slapd/slurpd servers if not doing a minimal build
if ! use minimal ; then
myconf="${myconf} --enable-slapd --enable-slurpd"
# base backend stuff
myconf="${myconf} --enable-ldbm"
if use berkdb ; then
einfo "Using Berkeley DB for local backend"
myconf="${myconf} ${myconf_berkdb}"
# We need to include the slotted db.h dir for FreeBSD
append-cppflags -I$(db_includedir 4.5 4.4 4.3 4.2 )
elif use gdbm ; then
einfo "Using GDBM for local backend"
myconf="${myconf} ${myconf_gdbm}"
else
ewarn "Neither gdbm or berkdb USE flags present, falling back to"
ewarn "Berkeley DB for local backend"
myconf="${myconf} ${myconf_berkdb}"
# We need to include the slotted db.h dir for FreeBSD
append-cppflags -I$(db_includedir 4.5 4.4 4.3 4.2 )
fi
# extra backend stuff
myconf="${myconf} --enable-passwd=mod --enable-phonetic=mod"
myconf="${myconf} --enable-dnssrv=mod --enable-ldap"
myconf="${myconf} --enable-meta=mod --enable-monitor=mod"
myconf="${myconf} --enable-null=mod --enable-shell=mod"
myconf="${myconf} --enable-relay=mod"
myconf="${myconf} $(use_enable perl perl mod)"
myconf="${myconf} $(use_enable odbc sql mod)"
# slapd options
myconf="${myconf} $(use_enable crypt) $(use_enable slp)"
myconf="${myconf} --enable-rewrite --enable-rlookups"
myconf="${myconf} --enable-aci --enable-modules"
myconf="${myconf} --enable-cleartext --enable-slapi"
myconf="${myconf} $(use_enable samba lmpasswd)"
# slapd overlay options
myconf="${myconf} --enable-dyngroup --enable-proxycache"
use overlays && myconf="${myconf} --enable-overlays=mod"
myconf="${myconf} --enable-syncprov"
else
myconf="${myconf} --disable-slapd --disable-slurpd"
myconf="${myconf} --disable-bdb --disable-ldbm"
myconf="${myconf} --disable-hdb --disable-monitor"
myconf="${myconf} --disable-slurpd --disable-overlays"
myconf="${myconf} --disable-relay"
fi

# basic functionality stuff
myconf="${myconf} --enable-syslog --enable-dynamic"
myconf="${myconf} --enable-local --enable-proctitle"

myconf="${myconf} $(use_enable ipv6)"
myconf="${myconf} $(use_with sasl cyrus-sasl) $(use_enable sasl spasswd)"
myconf="${myconf} $(use_enable tcpd wrappers) $(use_with ssl tls)"

if [ $(get_libdir) != "lib" ] ; then
append-ldflags -L/usr/$(get_libdir)
fi

STRIP=/bin/true \
econf \
--enable-static \
--enable-shared \
--libexecdir=/usr/$(get_libdir)/openldap \
${myconf} || die "configure failed"

emake depend || die "make depend failed"
emake || die "make failed"

# openldap/contrib
tc-export CC
if ! use minimal ; then
# dsaschema
einfo "Building contributed dsaschema"
cd "${S}"/contrib/slapd-modules/dsaschema
${CC} -shared -I../../../include ${CFLAGS} -fPIC \
-Wall -o libdsaschema-plugin.so dsaschema.c || \
die "failed to compile dsaschema module"
# kerberos passwd
if use kerberos ; then
einfo "Building contributed pw-kerberos"
cd "${S}"/contrib/slapd-modules/passwd/ && \
${CC} -shared -I../../../include ${CFLAGS} -fPIC \
-DHAVE_KRB5 -o pw-kerberos.so kerberos.c || \
die "failed to compile kerberos password module"
fi
# netscape mta-md5 password
einfo "Building contributed pw-netscape"
cd "${S}"/contrib/slapd-modules/passwd/ && \
${CC} -shared -I../../../include ${CFLAGS} -fPIC \
-o pw-netscape.so netscape.c || \
die "failed to compile netscape password module"
# smbk5pwd overlay
# Note: this modules builds, but may not work with
# Gentoo's MIT-Kerberos. It was designed for Heimdal
# Kerberos.
if use smbkrb5passwd ; then
einfo "Building contributed smbk5pwd"
local mydef
local mykrb5inc
mydef="-DDO_SAMBA -DDO_KRB5"
mykrb5inc="-I/usr/include/heimdal/"
cd "${S}"/contrib/slapd-modules/smbk5pwd && \
libexecdir="/usr/$(get_libdir)/openldap" \
DEFS="${mydef}" KRB5_INC="${mykrb5inc}" emake || \
die "failed to compile smbk5pwd module"
fi
# addrdnvalues
einfo "Building contributed addrdnvalues"
cd "${S}"/contrib/slapi-plugins/addrdnvalues/ && \
${CC} -shared -I../../../include ${CFLAGS} -fPIC \
-o libaddrdnvalues-plugin.so addrdnvalues.c || \
die "failed to compile addrdnvalues plugin"
fi
}

src_test() {
einfo "Doing tests"
cd tests ; make tests || die "make tests failed"
}

src_install() {
emake DESTDIR="${D}" install || die "make install failed"

dodoc ANNOUNCEMENT CHANGES COPYRIGHT README "${FILESDIR}"/DB_CONFIG.fast.example
docinto rfc ; dodoc doc/rfc/*.txt

# openldap modules go here
# TODO: write some code to populate slapd.conf with moduleload statements
keepdir /usr/$(get_libdir)/openldap/openldap/

# make state directories
local dirlist="data"
if ! use minimal; then
dirlist="${dirlist} slurp ldbm"
fi
for x in ${dirlist}; do
keepdir /var/lib/openldap-${x}
fowners ldap:ldap /var/lib/openldap-${x}
fperms 0700 /var/lib/openldap-${x}
done

echo "OLDPF='${PF}'" > "${D}${OPENLDAP_DEFAULTDIR_VERSIONTAG}/${OPENLDAP_VERSIONTAG}"
echo "# do NOT delete this. it is used" >> "${D}${OPENLDAP_DEFAULTDIR_VERSIONTAG}/${OPENLDAP_VERSIONTAG}"
echo "# to track versions for upgrading." >> "${D}${OPENLDAP_DEFAULTDIR_VERSIONTAG}/${OPENLDAP_VERSIONTAG}"

# manually remove /var/tmp references in .la
# because it is packaged with an ancient libtool
#for x in "${D}"/usr/$(get_libdir)/lib*.la; do
# sed -i -e "s:-L${S}[/]*libraries::" ${x}
#done

# change slapd.pid location in configuration file
keepdir /var/run/openldap
fowners ldap:ldap /var/run/openldap
fperms 0755 /var/run/openldap

if ! use minimal; then
# use our config
rm "${D}"etc/openldap/slapd.con*
insinto /etc/openldap
newins "${FILESDIR}"/${PN}-2.3.34-slapd-conf slapd.conf
configfile="${D}"etc/openldap/slapd.conf

# populate with built backends
ebegin "populate config with built backends"
for x in "${D}"usr/$(get_libdir)/openldap/openldap/back_*.so; do
elog "Adding $(basename ${x})"
sed -e "/###INSERTDYNAMICMODULESHERE###$/a# moduleload\t$(basename ${x})" -i "${configfile}"
done
sed -e "s:###INSERTDYNAMICMODULESHERE###$:# modulepath\t/usr/$(get_libdir)/openldap/openldap:" -i "${configfile}"
fowners root:ldap /etc/openldap/slapd.conf
fperms 0640 /etc/openldap/slapd.conf
cp "${configfile}" "${configfile}".default
eend

# install our own init scripts
newinitd "${FILESDIR}"/slapd-initd slapd
newinitd "${FILESDIR}"/slurpd-initd slurpd
newconfd "${FILESDIR}"/slapd-confd slapd

if [ $(get_libdir) != lib ]; then
sed -e "s,/usr/lib/,/usr/$(get_libdir)/," -i "${D}"etc/init.d/{slapd,slurpd}
fi

# install contributed modules
docinto /
if [ -e "${S}"/contrib/slapd-modules/dsaschema/libdsaschema-plugin.so ];
then
cd "${S}"/contrib/slapd-modules/dsaschema/
newdoc README README.contrib.dsaschema
exeinto /usr/$(get_libdir)/openldap/openldap
doexe libdsaschema-plugin.so || \
die "failed to install dsaschema module"
fi
if [ -e "${S}"/contrib/slapd-modules/passwd