- Update to 3.4.5

* Security fixes:
    + CVE-2025-61911 (GHSA-r7r6-cc7p-4v5m): Enforce str input in
      ldap.filter.escape_filter_chars with escape_mode=1; ensure proper
      escaping. (bsc#1251912)
    + CVE-2025-61912 (GHSA-p34h-wq7j-h5v6): Correct NUL escaping in
      ldap.dn.escape_dn_chars to \00 per RFC 4514. (bsc#1251913)
  * Fixes:
    + ReconnectLDAPObject now properly reconnects on UNAVAILABLE,
      CONNECT_ERROR and TIMEOUT exceptions (previously only SERVER_DOWN),
      fixing reconnection issues especially during server restarts
    + Fixed syncrepl.py to use named constants instead of raw decimal values
      for result types
    + Fixed error handling in SearchNoOpMixIn to prevent a undefined variable
      error
- Switch to building with pip, wheel and the pyproject macros.
- Fix filename due to new setuptools.

0001-Use-reentrant-libldap.patch

@@ -0,0 +1,25 @@
+From de85e6b833fc43f273f688680d7a95e9a8330704 Mon Sep 17 00:00:00 2001
+From: William Brown <william@blackhats.net.au>
+Date: Tue, 5 Aug 2025 15:24:49 +1000
+Subject: [PATCH] Use reentrant libldap
+
+---
+ Build/setup.cfg.suse-linux | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/Build/setup.cfg.suse-linux b/Build/setup.cfg.suse-linux
+index 0a48ef2..d715737 100644
+--- a/Build/setup.cfg.suse-linux
++++ b/Build/setup.cfg.suse-linux
+@@ -15,7 +15,7 @@ extra_objects =
+ # Support for StartTLS/LDAPS, SASL bind and reentrant libldap_r.
+ # This needs recent OpenLDAP 2.0.26+ or 2.1.3+ built with
+ # ./configure --with-cyrus-sasl --with-tls
+-libs = ldap_r lber sasl2 ssl crypto
++libs = ldap lber sasl2 ssl crypto
+ 
+ [install]
+ # Installation options
+-- 
+2.39.5 (Apple Git-154)
+

python-ldap-2.4.3.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:88fb00ed5811e3df49d0f28317a48be2ae7e46252e473923005c7eb292d25e9d
-size 125989

python-ldap.changes

@@ -1,3 +1,454 @@
+-------------------------------------------------------------------
+Fri Oct 24 03:09:41 UTC 2025 - Steve Kowalik <steven.kowalik@suse.com>
+
+- Update to 3.4.5:
+  * Security fixes:
+    + CVE-2025-61911 (GHSA-r7r6-cc7p-4v5m): Enforce str input in
+      ldap.filter.escape_filter_chars with escape_mode=1; ensure proper
+      escaping. (bsc#1251912)
+    + CVE-2025-61912 (GHSA-p34h-wq7j-h5v6): Correct NUL escaping in
+      ldap.dn.escape_dn_chars to \00 per RFC 4514. (bsc#1251913)
+  * Fixes:
+    + ReconnectLDAPObject now properly reconnects on UNAVAILABLE,
+      CONNECT_ERROR and TIMEOUT exceptions (previously only SERVER_DOWN),
+      fixing reconnection issues especially during server restarts
+    + Fixed syncrepl.py to use named constants instead of raw decimal values
+      for result types
+    + Fixed error handling in SearchNoOpMixIn to prevent a undefined variable
+      error
+- Switch to building with pip, wheel and the pyproject macros.
+- Fix filename due to new setuptools.
+
+-------------------------------------------------------------------
+Tue Aug  5 05:27:36 UTC 2025 - William Brown <william.brown@suse.com>
+
+- Allow building against OpenLDAP 2.5
+  * 0001-Use-reentrant-libldap.patch
+
+-------------------------------------------------------------------
+Thu Aug 29 07:22:28 UTC 2024 - Markéta Machová <mmachova@suse.com>
+
+- Enable sle15_python_module_pythons (boo#1229549)
+
+-------------------------------------------------------------------
+Thu Dec 14 21:14:57 UTC 2023 - Dirk Müller <dmueller@suse.com>
+
+- update to 3.4.4:
+  * Reconnect race condition in ReconnectLDAPObject is now fixed
+  * Socket ownership is now claimed once we've passed it to
+    libldap LDAP_set_option string formats are now compatible
+    with Python 3.12
+
+-------------------------------------------------------------------
+Mon Aug 14 06:14:37 UTC 2023 - William Brown <william.brown@suse.com>
+
+- Re-run source download due to file differences.
+
+-------------------------------------------------------------------
+Fri Sep 16 01:06:45 UTC 2022 - William Brown <william.brown@suse.com>
+
+- up to upstream release 3.4.3
+
+  This is a minor release to bring back the removed OPT_X_TLS option.
+  Please note, it's still a deprecated option and it will be removed in 3.5.0.
+
+  The following deprecated option has been brought back:
+
+  * OPT_X_TLS
+  * Fixes:
+
+  - Sphinx documentation is now successfully built
+  _ pypy3 tests stability was improved
+  _ setup.py deprecation warning is now resolved
+
+-------------------------------------------------------------------
+Sun Jul 24 17:36:21 UTC 2022 - Michael Ströder <michael@stroeder.com>
+
+- update to upstream release 3.4.2
+  minor release to provide out-of-the-box compatibility with the merge
+  of libldap and libldap_r that happened with OpenLDAP's 2.5 release.
+
+-------------------------------------------------------------------
+Fri Dec 10 14:13:43 UTC 2021 - Michael Ströder <michael@stroeder.com>
+
+- skip Python 2 builds
+- set PATH when running tests
+- update to upstream release 3.4.0
+  * Security fixes:
+    - Fix inefficient regular expression which allows denial-of-service attacks
+      when parsing specially-crafted LDAP schema (GHSL-2021-117, bsc#1194834)
+  * Changes:
+    - On MacOS, remove option to make LDAP connections from a file descriptor
+      when built with the system libldap (which lacks the underlying function,
+      ldap_init_fd)
+    - Attribute values of the post read control are now bytes
+      instead of ISO8859-1 decoded str
+    - LDAPUrl now treats urlscheme as case-insensitive
+    - Several OpenLDAP options are now supported:
+        - OPT_X_TLS_REQUIRE_SAN
+        - OPT_X_SASL_SSF_EXTERNAL
+        - OPT_X_TLS_PEERCERT
+  * Fixes:
+    - The copy() method of cidict was added back. It was unintentionally
+      removed in 3.3.0
+    - Fixed getting/setting SASL options on big endian platforms
+    - Unknown LDAP result code are now converted to LDAPexception,
+      rather than raising a SystemError.
+  * slapdtest:
+    - Show stderr of slapd -Ttest
+    - SlapdObject uses directory-based configuration of slapd
+    - SlapdObject startup is now faster
+
+-------------------------------------------------------------------
+Tue Sep 14 12:35:59 UTC 2021 - pgajdos@suse.com
+
+- %check: use %pyunittest_arch rpm macro
+
+-------------------------------------------------------------------
+Mon Sep 28 02:59:28 UTC 2020 - William Brown <william.brown@suse.com>
+
+- update to upstream release 3.3.1:
+
+Highlights:
+* ``LDAPError`` now contains additional fields, such as ctrls, result, msgid
+* ``passwd_s`` can now extract the newly generated password
+* LDAP connections can now be made from a file descriptor
+
+This release is tested on Python 3.8, and the beta of Python 3.9.
+
+The following undocumented functions are deprecated and scheduled for removal:
+- ``ldap.cidict.strlist_intersection``
+- ``ldap.cidict.strlist_minus``
+- ``ldap.cidict.strlist_union``
+
+Modules/
+* Ensure ReconnectLDAPObject is not left in an inconsistent state after
+  a reconnection timeout
+* Syncrepl now correctly parses SyncInfoMessage when the message is a syncIdSet
+* Release GIL around global get/set option call
+* Do not leak serverctrls in result functions
+* Don't overallocate memory in attrs_from_List()
+* Fix thread support check for Python 3
+* With OpenLDAP 2.4.48, use the new header openldap.h
+
+Lib/
+* Fix some edge cases regarding quoting in the schema tokenizer
+* Fix escaping a single space in ldap.escape_dn_chars
+* Fix string formatting in ldap.compare_ext_s
+* Prefer iterating dict instead of calling dict.keys()
+
+Doc/
+* Clarify the relationship between initialize() and LDAPObject()
+* Improve documentation of TLS options
+* Update FAQ to include Samba AD-DC error message
+  "Operation unavailable without authentication"
+* Fix several incorrect examples and demos
+  (but note that these are not yet tested)
+* Update Debian installation instructions for Debian Buster
+* Typo fixes in docs and docstrings
+
+Test/
+* Test and document error cases in ldap.compare_s
+* Test if reconnection is done after connection loss
+* Make test certificates valid for the far future
+* Use slapd -Tt instead of slaptest
+
+Infrastructure:
+* Mark the LICENCE file as a license for setuptools
+* Use "unittest discover" rather than "setup.py test" to run tests
+
+-------------------------------------------------------------------
+Mon Dec 10 12:23:48 UTC 2018 - Tomáš Chvátal <tchvatal@suse.com>
+
+- Reduce the runtime dependencies to match the actual needs
+  * User can use either openldap or 389-ds or anything else
+- Run the tests on the package
+- Fix the fdupes call
+
+-------------------------------------------------------------------
+Fri Dec  7 09:18:38 UTC 2018 - Tomáš Chvátal <tchvatal@suse.com>
+
+- Add this package to SLE wrt fate#325747
+- Do not add version dependency to devel requirement
+
+-------------------------------------------------------------------
+Tue Aug 14 07:00:52 UTC 2018 - tchvatal@suse.com
+
+- Require openldap2-client as some of the binaries are called
+  on the runtime
+
+-------------------------------------------------------------------
+Tue Aug  7 17:43:33 UTC 2018 - michael@stroeder.com
+
+- update to upstream release 3.1.0:
+  * Long-deprecated functions `ldap.open()` and `ldap.init()` are removed
+  * `LDAPObject.compare_s()` and `compare_ext_s` return bool instead of 0 or 1
+  * Tons of changes see CHANGES file
+
+-------------------------------------------------------------------
+Thu Jan 18 09:04:33 UTC 2018 - fbergmann@suse.com
+
+- update to upstream release 3.0.0b4:
+  - Adds support for Python 3.4+
+  - Adds support for `bytes_mode`
+  - Idiotmatic python code changes
+  - Adds testing for `pypy`
+  - Fixes/enhances tests
+
+- Remove python-ldap.keyring and python-ldap-%{version}.tar.gz.asc:
+  There is no signature provided for the new upstream tarball
+
+-------------------------------------------------------------------
+Mon Nov 20 17:49:28 UTC 2017 - michael@stroeder.com
+
+- update to upstream release 2.5.2
+
+Changes since 2.5.1:
+
+* code-cleaning in setup.py
+
+Modules/
+* PyBytes_ instead of PyString_ and added PyInt_FromLong compat macro
+* moved code from version.c to ldapmodule.c
+* removed obsolete back-ward compability constants from common.h
+* build checks whether LDAP_API_VERSION is OpenLDAP 2.4.x
+* _ldap.__author__ and _ldap.__license__ also set from ldap.pkginfo
+* assume C extension API for Python 2.7+
+
+Lib/
+* removed all dependencies on modules string and types
+* removed use of .has_key()
+* removed class ldap.ldapobject.NonblockingLDAPObject
+* new global constant ldap.LIBLDAP_API_INFO
+* right after importing _ldap there is a call into libldap to initialize it
+* method .decodeControlValue() of SSSResponseControl and VLVResponseControl
+  does not set class attribute result_code anymore
+* always use bytes() for UUID() constructor in ldap.syncrepl
+* module ldif now uses functions b64encode() and b64decode()
+* fixed pickling and restoring of ReconnectLDAPObject
+* more modules with PEP-8 compliance
+* ldap.ldapobject split into module-package
+
+Tests/
+* scripts do not directly call SlapdTestCase.setUpClass() anymore
+* added LDIF test with folded, base64-encoded attribute
+* added more tests for sub-module ldap.dn
+* added tests for ldap.syncrepl (thanks to Karl Kornel)
+
+-------------------------------------------------------------------
+Sun Nov 12 17:49:25 UTC 2017 - michael@stroeder.com
+
+- update to upstream release 2.5.1
+- adjusted BuildRequires to match upstream prerequisites
+
+Changes since 2.4.45:
+
+Mandatory prerequisites:
+- Python 2.7.x
+- pyasn1 0.3.7+ and pyasn1_modules 0.1.5+
+
+Modules/
+* removed unused code schema.c
+
+Lib/
+* ldap.__version__, ldap.__author__ and ldap.__license__ now
+  imported from new sub-module ldap.pkginfo also to setup.py
+* Added safety assertion when importing _ldap:
+  ldap.pkginfo.__version__ must match _ldap.__version__
+* removed stand-alone module dsml
+* slapdtest.SlapdObject.restart() just restarts slapd
+  without cleaning any data
+* Compability changes for pyasn1 0.3.x or newer
+  (thanks to Ilya Etingof and Christian Heimes)
+* The methods SSSResponseControl.decodeControlValue() and
+  VLVResponseControl.decodeControlValue() now follow the coding
+  convention to use camel-cased ASN.1 name as class attribute name.
+  The old class names are still set for back-ward compability
+  but should not be used in new code because they might be removed
+  in a later release.
+* removed SSSRequestControl from ldap.controls.KNOWN_RESPONSE_CONTROLS
+
+Tests/
+* added explicit reconnect tests for ReconnectLDAPObject
+
+-------------------------------------------------------------------
+Mon Oct  9 15:14:14 UTC 2017 - michael@stroeder.com
+
+- update to upstream release 2.4.45
+  * fixed error handling
+
+-------------------------------------------------------------------
+Thu Sep  7 22:23:21 UTC 2017 - michael@stroeder.com
+
+- update to upstream release 2.4.44
+  * GIL fix
+
+-------------------------------------------------------------------
+Thu Sep  7 07:57:14 UTC 2017 - michael@stroeder.com
+
+- update to upstream release 2.4.43
+  * SASL bind fix
+
+-------------------------------------------------------------------
+Mon Sep  4 08:57:32 UTC 2017 - michael@stroeder.com
+
+- update to upstream release 2.4.42
+  * small enhancements to test suite
+
+-------------------------------------------------------------------
+Wed Jul 12 18:07:10 UTC 2017 - michael@stroeder.com
+
+- update to upstream release 2.4.41 (small LDIF parser enhancement)
+
+-------------------------------------------------------------------
+Tue Jun 27 18:40:32 UTC 2017 - michael@stroeder.com
+
+- update to upstream release 2.4.40 (small memleak fix)
+
+-------------------------------------------------------------------
+Wed May 31 20:03:45 UTC 2017 - michael@stroeder.com
+
+- update to upstream release 2.4.39
+
+-------------------------------------------------------------------
+Thu May 18 15:05:14 UTC 2017 - jmatejek@suse.com
+
+- provide python2-ldap to support singlespec packages
+
+-------------------------------------------------------------------
+Fri Apr 28 09:06:40 UTC 2017 - michael@stroeder.com
+
+- update to upstream release 2.4.38
+
+-------------------------------------------------------------------
+Thu Apr 27 08:45:02 UTC 2017 - michael@stroeder.com
+
+- update to upstream release 2.4.37
+
+-------------------------------------------------------------------
+Wed Feb  8 09:52:17 UTC 2017 - michael@stroeder.com
+
+- Update to upstream release 2.4.30
+  (with compability fix for pyasn1 0.2.x)
+
+-------------------------------------------------------------------
+Wed Jan 25 19:54:48 UTC 2017 - michael@stroeder.com
+
+- Update to upstream release 2.4.29
+- added python-ldap.keyring to validate upstream source signatures
+
+-------------------------------------------------------------------
+Fri Nov 18 07:05:01 UTC 2016 - michael@stroeder.com
+
+- Update to upstream release 2.4.28
+
+-------------------------------------------------------------------
+Mon Aug  1 10:44:31 UTC 2016 - michael@stroeder.com
+
+- Update to upstream release 2.4.27
+
+-------------------------------------------------------------------
+Sun Jul 24 16:31:08 UTC 2016 - michael@stroeder.com
+
+- Update to upstream release 2.4.26
+- updated pypi source URL
+
+-------------------------------------------------------------------
+Tue Feb 23 10:33:29 UTC 2016 - michael@stroeder.com
+
+- Use HTTPS links
+
+-------------------------------------------------------------------
+Wed Feb 10 15:23:31 UTC 2016 - michael@stroeder.com
+
+- Aligned desciption with project's web site
+- Removed obsolete stuff:
+  * build flag -DLDAP_DEPRECATED
+  * outdated URL in package description
+  * removing of CVS files
+
+-------------------------------------------------------------------
+Mon Jan 18 15:20:02 UTC 2016 - michael@stroeder.com
+
+- Update to upstream release 2.4.25
+
+-------------------------------------------------------------------
+Sat Oct 24 16:33:35 UTC 2015 - michael@stroeder.com
+
+- Update to upstream release 2.4.22
+
+-------------------------------------------------------------------
+Fri Sep 25 16:37:00 UTC 2015 - michael@stroeder.com
+
+- Update to upstream release 2.4.21
+
+-------------------------------------------------------------------
+Tue Jul  7 13:30:34 UTC 2015 - michael@stroeder.com
+
+- Update to upstream release 2.4.20
+
+-------------------------------------------------------------------
+Sun Jan 11 00:06:05 UTC 2015 - michael@stroeder.com
+
+- Update to upstream release 2.4.19
+
+-------------------------------------------------------------------
+Thu Oct  9 08:26:21 UTC 2014 - michael@stroeder.com
+
+- Update to upstream release 2.4.18
+
+-------------------------------------------------------------------
+Sat Sep 27 10:03:14 UTC 2014 - michael@stroeder.com
+
+- Update to upstream release 2.4.17
+
+-------------------------------------------------------------------
+Wed Sep 10 12:49:52 UTC 2014 - michael@stroeder.com
+
+- Update to upstream release 2.4.16
+
+-------------------------------------------------------------------
+Fri Mar 28 13:50:39 UTC 2014 - speilicke@suse.com
+
+- Set license ot Python-2.0 (according to legal)
+
+-------------------------------------------------------------------
+Mon Mar 24 10:28:22 UTC 2014 - michael@stroeder.com
+
+- Update to upstream release 2.4.15
+  * Various fixes
+  * Support for subordinates search scope
+  * Support for select schema description extension
+
+-------------------------------------------------------------------
+Thu Jun 27 15:50:55 UTC 2013 - michael@stroeder.com
+
+- Update to upstream release 2.4.13
+  * mainly important fixes for ReconnectLDAPObject
+
+-------------------------------------------------------------------
+Tue Jun 18 10:34:35 UTC 2013 - jengelh@inai.de
+
+- Explicitly specify openssl build dependency
+
+-------------------------------------------------------------------
+Thu Jun  7 18:44:07 UTC 2012 - michael@stroeder.com
+
+- update to 2.4.10
+
+-------------------------------------------------------------------
+Fri Mar 23 10:29:12 UTC 2012 - michael@stroeder.com
+
+- Added dependencies to python-pyasn1 and python-pyasn1-modules
+
+-------------------------------------------------------------------
+Fri Mar 16 14:34:59 UTC 2012 - saschpe@suse.de
+
+- Remove service
+- Spec file cleanup:
+  * Remove outdated sections
+  * Proper macro usage
+
 -------------------------------------------------------------------
 Tue Oct 11 12:45:02 UTC 2011 - jmatejek@suse.com
 
@@ -218,7 +669,7 @@ Mon May 12 14:17:53 CEST 2003 - mcihar@suse.cz
 -------------------------------------------------------------------
 Fri Jan 31 00:33:50 CET 2003 - ro@suse.de
 
-- use sasl2 
+- use sasl2
 
 -------------------------------------------------------------------
 Fri Jan 10 17:37:27 CET 2003 - mcihar@suse.cz
@@ -230,7 +681,7 @@ Fri Jan 10 17:37:27 CET 2003 - mcihar@suse.cz
 -------------------------------------------------------------------
 Mon Aug 26 12:34:03 CEST 2002 - rhafer@suse.de
 
-- LDAP_FILT_MAXSIZ isn't defined in libldap anymore 
+- LDAP_FILT_MAXSIZ isn't defined in libldap anymore
 
 -------------------------------------------------------------------
 Wed Aug 14 13:32:28 CEST 2002 - vinil@suse.cz
@@ -260,7 +711,7 @@ Thu Mar 15 14:05:43 CET 2001 - kukuk@suse.de
 -------------------------------------------------------------------
 Thu Mar 15 13:04:03 CET 2001 - ro@suse.de
 
-- changed for openldap2 
+- changed for openldap2
 
 -------------------------------------------------------------------
 Thu Mar 15 01:08:35 CET 2001 - ro@suse.de
@@ -277,7 +728,7 @@ Wed Nov 22 10:48:46 CET 2000 - mt@suse.de
 -------------------------------------------------------------------
 Mon Nov  6 10:03:38 CET 2000 - ro@suse.de
 
-- fixed neededforbuild (added ldaplib) 
+- fixed neededforbuild (added ldaplib)
 
 -------------------------------------------------------------------
 Sun Oct 29 09:52:22 CET 2000 - kukuk@suse.de

python-ldap.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package python-ldap
 #
-# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2024 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -12,50 +12,70 @@
 # license that conforms to the Open Source Definition (Version 1.9)
 # published by the Open Source Initiative.
 
-# Please submit bugfixes or comments via http://bugs.opensuse.org/
+# Please submit bugfixes or comments via https://bugs.opensuse.org/
 #
 
-# norootforbuild
-
 
+%{?sle15_python_module_pythons}
 Name:           python-ldap
-BuildRequires:  fdupes krb5-devel openldap2-devel >= 2.4.11 python-devel
-Requires:       openldap2-client >= 2.4.11
-License:        SUSE-Public-Domain
-Group:          Development/Libraries/Python
-AutoReqProv:    on
-Version:        2.4.3
-Release:        1
+Version:        3.4.5
+Release:        0
 Summary:        Python LDAP interface
-Url:            http://www.python-ldap.org/
-Source:         http://pypi.python.org/packages/source/p/python-ldap/python-ldap-%{version}.tar.gz
-BuildRoot:      %{_tmppath}/%{name}-%{version}-build
-%{py_requires}
+License:        Python-2.0
+Group:          Development/Libraries/Python
+URL:            https://www.python-ldap.org/
+Source0:        https://files.pythonhosted.org/packages/source/p/python-ldap/python_ldap-%{version}.tar.gz
+Patch0:         0001-Use-reentrant-libldap.patch
+BuildRequires:  %{python_module devel}
+BuildRequires:  %{python_module pip}
+BuildRequires:  %{python_module pyasn1 >= 0.3.7}
+BuildRequires:  %{python_module pyasn1-modules >= 0.1.5}
+BuildRequires:  %{python_module setuptools}
+BuildRequires:  %{python_module wheel}
+BuildRequires:  cyrus-sasl-devel >= 2.1
+BuildRequires:  fdupes
+BuildRequires:  krb5-devel
+BuildRequires:  libopenssl-devel >= 0.9.7
+# needed for slapd binary in tests
+BuildRequires:  openldap2
+# needed for ldapadd binary in tests
+BuildRequires:  openldap2-client
+BuildRequires:  openldap2-devel >= 2.4.11
+BuildRequires:  python-rpm-macros
+Requires:       python-pyasn1 >= 0.3.7
+Requires:       python-pyasn1-modules >= 0.1.5
+%python_subpackages
 
 %description
-python-ldap provides an LDAP client API for Python in the spirit of
-RFC1823. It includes a Python module called _ldapmodule that wraps an
-LDAP C library, an object-oriented API for X.500 directories. See
-python-ldap pages on http://python-ldap.sourceforge.net/
+python-ldap provides an object-oriented API to access LDAP directory
+servers from Python programs.  Mainly it wraps the OpenLDAP 2.x libs
+for that purpose.  Additionally the package contains modules for other
+LDAP-related stuff (e.g. processing LDIF, LDAPURLs, LDAPv3 schema, etc.).
 
 %prep
-%setup
+%autosetup -p1 -n python_ldap-%{version}
 cp Build/setup.cfg.suse-linux setup.cfg
-find -name ".CVS" -o -name ".cvsignore" -exec rm -rf {} ";"
 
 %build
-#export CFLAGS="$RPM_OPT_FLAGS -DLDAP_DEPRECATED"
-python setup.py build
+CFLAGS="%{optflags}" %pyproject_wheel
 
 %install
-python setup.py install --prefix=%{_prefix} --root=$RPM_BUILD_ROOT --record-rpm=INSTALLED_FILES
-%fdupes $RPM_BUILD_ROOT/%{_libdir}
+%pyproject_install
+%python_expand %fdupes %{buildroot}%{$python_sitearch}
 
-%clean
-rm -rf $RPM_BUILD_ROOT
+%check
+PATH=/sbin:/usr/sbin:/usr/local/bin:/usr/bin:/bin %pyunittest_arch discover -v -s Tests -p 't_*'
 
-%files -f INSTALLED_FILES
-%defattr(-,root,root)
-%doc README Demo CHANGES TODO LICENCE
+%files %{python_files}
+%license LICENCE
+%doc README Demo CHANGES TODO
+%{python_sitearch}/ldap
+%{python_sitearch}/python_ldap-%{version}.dist-info
+%{python_sitearch}/slapdtest
+%{python_sitearch}/ldapurl.py
+%{python_sitearch}/ldif.py
+%{python_sitearch}/_ldap*
+%pycache_only %{python_sitearch}/__pycache__/ldapurl*
+%pycache_only %{python_sitearch}/__pycache__/ldif*
 
 %changelog