Commit Graph

216 Commits

Author SHA256 Message Date
Michael Ströder
3c3f552ff2 update to 2.5.9
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=293
2021-10-25 22:49:48 +00:00
Michael Ströder
45462c64fa update to 2.5.8
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=292
2021-10-11 19:19:33 +00:00
Michael Ströder
18364f265d Accepting request 914040 from home:phiwag:branches:network:ldap
Since version 2.5.7 the update from the 2.4 release series to 2.5 has 
become easier: existing MDB databases can be upgraded (this was already 
the case before, but the documentation was slightly too cautious). 
Additionally, slapcat in version 2.5 can read databases from version 2.4, 
which wasn't possible in earlier 2.5 releases.

- Update to upstream version 2.5.7
	Fixed lloadd client state tracking (ITS#9624)
	Fixed slapd bconfig to canonicalize structuralObjectclass (ITS#9611)
	Fixed slapd-ldif duplicate controls response (ITS#9497)
	Fixed slapd-mdb multival crash when attribute is missing an equality matchingrule (ITS#9621)
	Fixed slapd-mdb compatibility with OpenLDAP 2.4 MDB databases (ITS#8958)
	Fixed slapd-mdb idlexp maximum size handling (ITS#9637)
	Fixed slapd-monitor number of ops executing with asynchronous backends (ITS#9628)
	Fixed slapd-sql to add support for ppolicy attributes (ITS#9629)
	Fixed slapd-sql to close transactions after bind and search (ITS#9630)
	Fixed slapo-accesslog to make reqMod optional (ITS#9569)
	Fixed slapo-ppolicy logging when pwdChangedTime attribute is not present (ITS#9625)
	Documentation
		slapd-mdb(5) note max idlexp size is 30, not 31 (ITS#9637)
		slapo-accesslog(5) note that reqMod is optional (ITS#9569)
		Add ldapvc(1) man page (ITS#9549)
		Add guide section on load balancer (ITS#9443)
		Updated guide to document multiprovider as replacement for mirrormode (ITS#9200)
		Updated guide to clarify slapd-mdb upgrade requirements (ITS#9200)
		Updated guide to document removal of deprecated options from client tools (ITS#9200)

- Major version update to 2.5.6
  See https://www.openldap.org/software/release/announce.html for a list of
  changes.
- The threaded version of the OpenLDAP libraries, libldap_r, has been merged
  with libldap with 2.5. Removed all related downstream changes.
  Introduce a new compatibility symlink in the other direction: libldap_r
  pointing to libldap.
- Removed the ppolicy-check-password module. It is unmaintained and does not
  build any more.

OBS-URL: https://build.opensuse.org/request/show/914040
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=290
2021-08-26 20:16:29 +00:00
Michael Ströder
2604d4bc2f Accepting request 897299 from home:stroeder:branches:network:ldap
updated to 2.4.59

OBS-URL: https://build.opensuse.org/request/show/897299
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=288
2021-06-04 04:59:48 +00:00
Michael Ströder
a3ffef5182 update to 2.4.58
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=286
2021-03-16 20:23:16 +00:00
Michael Ströder
25833921cb Accepting request 864145 from home:stroeder:branches:network:ldap
updated to 2.4.57

OBS-URL: https://build.opensuse.org/request/show/864145
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=284
2021-01-18 20:45:05 +00:00
Michael Ströder
63d2effee4 Accepting request 856589 from home:stroeder:branches:network:ldap
- added openldap2.keyring and source signature file

OBS-URL: https://build.opensuse.org/request/show/856589
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=282
2020-12-17 04:23:59 +00:00
Michael Ströder
c0e4cb715e updated to 2.4.56
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=280
2020-11-11 12:14:04 +00:00
Michael Ströder
617ae2b561 Accepting request 844183 from home:firstyear:branches:network:ldap
- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh

OBS-URL: https://build.opensuse.org/request/show/844183
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=278
2020-10-27 01:14:55 +00:00
Michael Ströder
fc56a37d6c Accepting request 844168 from home:stroeder:branches:network:ldap
updated to 2.4.55

OBS-URL: https://build.opensuse.org/request/show/844168
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=277
2020-10-26 22:33:07 +00:00
Michael Ströder
b2e21ad84a Accepting request 841354 from home:stroeder:branches:network:ldap
updated to 2.4.54

OBS-URL: https://build.opensuse.org/request/show/841354
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=275
2020-10-12 21:07:22 +00:00
Michael Ströder
4720dd0502 updated to 2.4.53
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=273
2020-09-07 16:10:19 +00:00
Michael Ströder
e281cb7dc3 Accepting request 830371 from home:stroeder:branches:network:ldap
updated to 2.4.52

OBS-URL: https://build.opensuse.org/request/show/830371
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=271
2020-08-28 23:04:13 +00:00
Michael Ströder
37de44c207 Accepting request 828345 from home:kukuk:container
- Switch from shadow to sysusers to generate ldap account
- Remove if's for code older than SLE12 (Even SLE12 builds no longer)
- Remove 12 years old sasl2 migration code

OBS-URL: https://build.opensuse.org/request/show/828345
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=270
2020-08-21 07:12:10 +00:00
Michael Ströder
4754d1883c Accepting request 826784 from home:kukuk:container
- Drop obsolete, not working DB_CONFIG
- Remove init.d header from start script, does not work
- Use bash for start script as syntax is not POSIX sh supported
- Remove UPDATE_NEEDED section in start script, does never match

OBS-URL: https://build.opensuse.org/request/show/826784
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=268
2020-08-15 07:05:10 +00:00
Michael Ströder
06ccfa2bad Accepting request 825908 from home:stroeder:branches:network:ldap
updated to 2.4.51

OBS-URL: https://build.opensuse.org/request/show/825908
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=264
2020-08-12 07:12:45 +00:00
Michael Ströder
19b4b4470b Accepting request 812601 from home:gmbr3:branches:Base:System3
- Revert changes to libexecdir

OBS-URL: https://build.opensuse.org/request/show/812601
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=262
2020-06-08 13:44:06 +00:00
Michael Ströder
4cf5ab1af6 Accepting request 812208 from home:stroeder:network
- More .spec cleanups

OBS-URL: https://build.opensuse.org/request/show/812208
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=261
2020-06-07 13:53:40 +00:00
Michael Ströder
cb00a4da51 Accepting request 812105 from home:gmbr3:branches:Base:System3
- Fixes for %_libexecdir changing to /usr/libexec
- Spec file cleanups

OBS-URL: https://build.opensuse.org/request/show/812105
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=260
2020-06-07 09:35:33 +00:00
William Brown
7341d09271 Accepting request 800820 from home:stroeder:branches:network:ldap
- updated to 2.4.50
- added 0014-ITS-8650-fix-debug-usage.patch
- enabled new contrib overlay pw-argon2
- replaced FTP by HTTPS download URL for source
- removed 0009-Fix-ldap-host-lookup-ipv6.patch (see bsc#1171127)

OBS-URL: https://build.opensuse.org/request/show/800820
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=258
2020-05-07 03:10:47 +00:00
Michael Ströder
447aef3759 Accepting request 768939 from home:stroeder:branches:network:ldap
updated to 2.4.49

OBS-URL: https://build.opensuse.org/request/show/768939
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=256
2020-01-31 10:56:52 +00:00
Michael Ströder
fd6933af62 Accepting request 762856 from home:stroeder:branches:network:ldap
- added back-port patch
  0013_openldap-its9124_fix_crash_with_cancel_exop.patch
  to fix OpenLDAP ITS#9124

OBS-URL: https://build.opensuse.org/request/show/762856
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=254
2020-01-10 14:50:39 +00:00
Michael Ströder
f161b5a476 Accepting request 758863 from home:stroeder:branches:network:ldap
- use BuildRequires:  pkgconfig(krb5) instead of krb5-devel-mini

OBS-URL: https://build.opensuse.org/request/show/758863
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=252
2020-01-01 17:19:14 +00:00
Dominique Leuenberger
528152a73b Accepting request 720498 from home:marxin:static
Use FAT LTO objects in order to provide proper static library.

OBS-URL: https://build.opensuse.org/request/show/720498
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=250
2019-08-13 08:20:19 +00:00
Michael Ströder
d40995658b Accepting request 718551 from home:stroeder:branches:network:ldap
removal of SuSEfirewall2 service

OBS-URL: https://build.opensuse.org/request/show/718551
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=248
2019-07-25 12:57:50 +00:00
Michael Ströder
d549f863e2 Accepting request 718342 from home:stroeder:branches:network:ldap
- Update to upstream release 2.4.48 with security fixes:
  * CVE-2019-13057 (ITS#9038):
    rootdn of any db can assert any identity
  * CVE-2019-13565 (ITS#9052):
    Unauthorized access caused by incorrect handling of SASL SSF values
- Fix CVE-2017-17740 by disabling nops overlay not maintained by upstream
  (see also bsc#1073313, comment #36)
- Removed obsolete patches:
  * 0002-openldap-its8727-plug-ber-leaks.patch
  * 0017-Fix-segfault-in-nops.patch

Note that I disabled slapo-nops instead of rebasing 0017-Fix-segfault-in-nops.patch which is somewhat debatable. You can take it or leave it.

OBS-URL: https://build.opensuse.org/request/show/718342
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=247
2019-07-25 12:39:20 +00:00
Michael Ströder
d5a3162b1f Accepting request 702733 from home:firstyear:branches:network:ldap
- bsc#1111388 - incorrect post script call causes tmpfiles create not to
  be run.

OBS-URL: https://build.opensuse.org/request/show/702733
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=245
2019-05-14 04:53:20 +00:00
5a150e84ac Accepting request 662829 from home:stroeder:branches:network:ldap
added back-ported fix for OpenLDAP ITS#8727

OBS-URL: https://build.opensuse.org/request/show/662829
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=238
2019-02-06 09:16:52 +00:00
Michael Ströder
55d82b1c0a Accepting request 660237 from home:stroeder:branches:network:ldap
Update to upstream release 2.4.47 (successfully tested on Tumbleweed x86_84)

OBS-URL: https://build.opensuse.org/request/show/660237
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=236
2018-12-20 11:37:17 +00:00
Michael Ströder
31984da890 Accepting request 651181 from home:jengelh:branches:network:ldap
- Replace old $RPM_* shell vars
and fix that silly build error about --no-as-needed

OBS-URL: https://build.opensuse.org/request/show/651181
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=234
2018-11-22 16:52:58 +00:00
Peter Varkoly
e604505058 - Fix CVE-2017-17740: when both the nops module and the memberof
overlay are enabled, attempts to free a buffer that was allocated
  on the stack
  * patch: 0017-Fix-segfault-in-nops.patch
  (bsc#1073313)

OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=233
2018-11-21 15:17:38 +00:00
Peter Varkoly
7fcf270ced - bsc#1095816 libldap package does not contain and provide libldap anymore
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=232
2018-11-20 20:48:05 +00:00
OBS User buildservice-autocommit
5b4f6b919a Updating link to change in openSUSE:Factory/openldap2 revision 140.0
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=da8f819c3b5e58e9bbc565a42ecb20a0
2018-11-12 14:27:31 +00:00
Peter Varkoly
ef5ad0a09d Fix spec.
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=228
2018-11-08 18:28:36 +00:00
Peter Varkoly
ba6af7362f Fix spec.
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=227
2018-11-08 17:42:38 +00:00
Peter Varkoly
9603bdafdf Fix spec
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=226
2018-11-08 17:33:32 +00:00
Peter Varkoly
995ac11ee3 - Bug 1111388 openldap and /var/lib/ldap/DB_CONFIG* (transactional-update)
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=225
2018-11-08 16:36:16 +00:00
Martin Pluskal
51c184e7cb Accepting request 629739 from home:ckowalczyk:branches:network:ldap:bsc1089640
- Fix slapd segfaults in mdb_env_reader_dest
+  with patch 0016-Clear-shared-key-only-in-close-function.patch
+  (bsc#1089640)

OBS-URL: https://build.opensuse.org/request/show/629739
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=221
2018-08-17 11:01:21 +00:00
Michael Ströder
31a0656177 Accepting request 618072 from home:stroeder:branches:network:ldap
Added 0001-ITS-8866-slapo-unique-to-return-filter-used-in-diagn.patch

OBS-URL: https://build.opensuse.org/request/show/618072
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=213
2018-06-24 17:58:51 +00:00
Michael Ströder
2338633266 Accepting request 611856 from home:kukuk:branches:network:ldap
- Don't require systemd explicit, spec file can handle both cases
  correct and in containers we don't have systemd.

OBS-URL: https://build.opensuse.org/request/show/611856
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=211
2018-05-24 11:27:29 +00:00
Michael Ströder
8fa23b1e6f Accepting request 600701 from home:zkalmar:branches:network:ldap
- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.

OBS-URL: https://build.opensuse.org/request/show/600701
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=209
2018-04-25 14:46:31 +00:00
Michael Ströder
1d9e87d5de Accepting request 593976 from home:zkalmar:branches:network:ldap
- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.

OBS-URL: https://build.opensuse.org/request/show/593976
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=207
2018-04-06 12:15:51 +00:00
Michael Ströder
7328f7b5b6 Accepting request 590763 from home:stroeder:branches:network:ldap
Upgrade to upstream 2.4.46 release

OBS-URL: https://build.opensuse.org/request/show/590763
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=204
2018-03-23 20:12:01 +00:00
Michael Ströder
1a35490c9e Accepting request 580112 from home:favogt:licensetag
Use %license (boo#1082318). Please forward to SLE, if possible

OBS-URL: https://build.opensuse.org/request/show/580112
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=202
2018-02-26 09:33:01 +00:00
Michael Ströder
dd8dd44f45 Accepting request 556315 from home:stroeder:branches:network:ldap
- added 0016-ITS-8782-fix-cancel-memleak.patch

OBS-URL: https://build.opensuse.org/request/show/556315
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=200
2017-12-11 22:59:58 +00:00
Michael Ströder
a078bd0820 Accepting request 549731 from home:stroeder:branches:network:ldap
- added 0016-ITS-8782-fix-cancel-memleak.patch

OBS-URL: https://build.opensuse.org/request/show/549731
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=199
2017-12-05 11:43:01 +00:00
Michael Ströder
e78007150a Accepting request 544643 from home:RBrownSUSE:branches:network:ldap
Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)

OBS-URL: https://build.opensuse.org/request/show/544643
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=197
2017-11-23 14:51:00 +00:00
Michael Ströder
0f916505ad Accepting request 530539 from home:jengelh:branches:network:ldap
- Add openldap-r-only.dif so that openldap2's own tools also
  link against libldap_r rather than libldap.
- Make libldap equivalent to libldap_r (like Debian) to avoid
  crashes in threaded programs which unknowingly get both
  libraries inserted into their process image.
  [rh#1370065, boo#996551]

OBS-URL: https://build.opensuse.org/request/show/530539
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=195
2017-10-02 18:38:04 +00:00
Michael Ströder
21af7eb21b Accepting request 530467 from home:darix:playground
- use existing groups instead of inventing new ones

OBS-URL: https://build.opensuse.org/request/show/530467
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=194
2017-10-02 14:37:04 +00:00
Michael Ströder
f3499d3e3f Accepting request 527555 from home:stroeder:branches:network:ldap
- added 0012-ITS8051-sockdnpat.patch

OBS-URL: https://build.opensuse.org/request/show/527555
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=192
2017-09-20 13:52:32 +00:00