blob: 864d44be400ef9f26366e3c927d89039f90bcb1c (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
|
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
# Contributor: Jakub Jirutka <jakub@jirutka.cz>
#
# secfixes:
# 2.4.48-r2:
# - CVE-2020-25709
# - CVE-2020-25710
# - CVE-2020-25692
# 2.4.48-r1:
# - CVE-2020-12243
# 2.4.48-r0:
# - CVE-2019-13565
# - CVE-2019-13057
# 2.4.46-r0:
# - CVE-2017-14159
# - CVE-2017-17740
# 2.4.44-r5:
# - CVE-2017-9287
#
pkgname=openldap
pkgver=2.4.48
pkgrel=2
pkgdesc="LDAP Server"
url="http://www.openldap.org/"
arch="all"
license="custom"
pkgusers="ldap"
pkggroups="ldap"
depends_dev="openssl-dev cyrus-sasl-dev util-linux-dev"
makedepends="$depends_dev db-dev groff unixodbc-dev libtool mosquitto-dev
autoconf automake"
subpackages="$pkgname-dev $pkgname-doc libldap
$pkgname-clients $pkgname-mqtt $pkgname-passwd-pbkdf2:passwd_pbkdf2
$pkgname-backend-all:_backend_all:noarch
$pkgname-overlay-all:_overlay_all:noarch"
install="$pkgname.pre-install $pkgname.post-install $pkgname.post-upgrade"
source="https://www.openldap.org/software/download/OpenLDAP/$pkgname-release/$pkgname-$pkgver.tgz
openldap-2.4-ppolicy.patch
openldap-2.4.11-libldap_r.patch
openldap-mqtt-overlay.patch
fix-manpages.patch
configs.patch
cacheflush.patch
CVE-2020-25709.patch
CVE-2020-25710.patch
CVE-2020-25692.patch
slapd.initd
slapd.confd
CVE-2020-12243.patch::https://git.openldap.org/openldap/openldap/-/commit/98464c11df8247d6a11b52e294ba5dd4f0380440.patch
"
# SLAPD backends
_backends=""
for _name in bdb dnssrv hdb ldap mdb meta monitor null passwd \
relay shell sql sock
do
subpackages="$subpackages $pkgname-back-$_name:_backend"
_backends="$_backends $pkgname-back-$_name"
done
# SLAPD overlays
_overlays=""
for _name in accesslog auditlog collect constraint dds deref dyngroup \
dynlist memberof ppolicy proxycache refint retcode rwm seqmod \
sssvlv syncprov translucent unique valsort
do
subpackages="$subpackages $pkgname-overlay-$_name:_overlay"
_overlays="$_overlays $pkgname-overlay-$_name"
done
prepare() {
cd "$builddir"
update_config_sub
default_prepare
sed -i '/^STRIP/s,-s,,g' build/top.mk
libtoolize --force && aclocal && autoconf
}
build() {
cd "$builddir"
./configure \
--build=$CBUILD \
--host=$CHOST \
--prefix=/usr \
--libexecdir=/usr/lib \
--sysconfdir=/etc \
--mandir=/usr/share/man \
--localstatedir=/var/lib/openldap \
--enable-slapd \
--enable-crypt \
--enable-modules \
--enable-dynamic \
--enable-bdb=mod \
--enable-dnssrv=mod \
--enable-hdb=mod \
--enable-ldap=mod \
--enable-mdb=mod \
--enable-meta=mod \
--enable-monitor=mod \
--enable-null=mod \
--enable-passwd=mod \
--enable-relay=mod \
--enable-shell=mod \
--enable-sock=mod \
--enable-sql=mod \
--enable-overlays=mod \
--with-tls=openssl \
--with-cyrus-sasl
make
# Build MQTT overlay.
make prefix=/usr libexec=/usr/lib \
-C contrib/slapd-modules/mqtt
# Build passwd pbkdf2.
make prefix=/usr libexecdir=/usr/lib \
-C contrib/slapd-modules/passwd/pbkdf2
}
package() {
cd "$builddir"
make DESTDIR="$pkgdir" install
# Install MQTT overlay.
make DESTDIR="$pkgdir" prefix=/usr libexec=/usr/lib \
-C contrib/slapd-modules/mqtt install
# Install passwd pbkdf2.
make DESTDIR="$pkgdir" prefix=/usr libexecdir=/usr/lib \
-C contrib/slapd-modules/passwd/pbkdf2 install
cd "$pkgdir"
rmdir var/lib/openldap/run
# Fix tools symlinks to slapd.
local path; for path in $(find usr/sbin/ -type l); do
ln -sf slapd $path
done
# Move executable from lib to sbin.
mv usr/lib/slapd usr/sbin/
# Move *.default configs to docs.
mkdir -p usr/share/doc/$pkgname
mv etc/openldap/*.default usr/share/doc/$pkgname/
chgrp ldap etc/openldap/slapd.*
chmod g+r etc/openldap/slapd.*
install -d -m 700 -o ldap -g ldap \
var/lib/openldap \
var/lib/openldap/openldap-data
install -D -m 755 "$srcdir"/slapd.initd etc/init.d/slapd
install -D -m 644 "$srcdir"/slapd.confd etc/conf.d/slapd
}
libldap() {
pkgdesc="OpenLDAP libraries"
depends=""
install=""
_submv "usr/lib/*.so*" etc/openldap/ldap.conf
}
clients() {
pkgdesc="LDAP client utilities"
_submv usr/bin
}
mqtt() {
pkgdesc="OpenLDAP MQTT overlay"
depends="$pkgname"
_submv "usr/lib/openldap/mqtt.*"
}
passwd_pbkdf2() {
pkgdesc="PBKDF2 OpenLDAP support"
depends="$pkgname"
_submv "usr/lib/openldap/pw-pbkdf2.*"
}
_backend_all() {
pkgdesc="Virtual package that installs all OpenLDAP backends"
depends="$_backends"
mkdir -p "$subpkgdir"
}
_overlay_all() {
pkgdesc="Virtual package that installs all OpenLDAP overlays"
depends="$_overlays"
mkdir -p "$subpkgdir"
}
_backend() {
backend_name="${subpkgname#openldap-back-}"
pkgdesc="OpenLDAP $backend_name backend"
_submv "usr/lib/openldap/back_$backend_name*"
}
_overlay() {
overlay_name="${subpkgname#openldap-overlay-}"
pkgdesc="OpenLDAP $backend_name overlay"
case "$overlay_name" in
proxycache) overlay_name=pcache;;
esac
_submv "usr/lib/openldap/$overlay_name*"
}
_submv() {
local path; for path in "$@"; do
mkdir -p "$subpkgdir"/${path%/*}
mv "$pkgdir"/$path "$subpkgdir"/${path%/*}/
done
}
sha512sums="cf694a415be0bd55cc7f606099da2ed461748efd276561944cd29d7f5a8252a9be799d8778fac2d4fa9f382731eb4ca48c6b85630cb58a3b8249843561ae8feb openldap-2.4.48.tgz
5d34d49eabe7cb66cf8284cc3bd9730fa23df4932df68549e242d250ee50d40c434ae074ebc720d5fbcd9d16587c9333c5598d30a5f1177caa61461ab7771f38 openldap-2.4-ppolicy.patch
44d97efb25d4f39ab10cd5571db43f3bfa7c617a5bb087085ae16c0298aca899b55c8742a502121ba743a73e6d77cd2056bc96cee63d6d0862dabc8fb5574357 openldap-2.4.11-libldap_r.patch
9c7f41279e91ed995c91e9a8c543c797d9294a93cf260afdc03ab5777e45ed045a4d6a4d4d0180b5dc387dc04babca01d818fbfa8168309df44f4500d2a430a4 openldap-mqtt-overlay.patch
8c4244d316a05870dd1147b2ab7ddbcfd7626b5dce2f5a0e72f066dc635c2edb4f1ea3be88c6fec2d5ab016001be16bedef70f2ce0695c3cd96f69e1614ff177 fix-manpages.patch
0d2e570ddcb7ace1221abad9fc1d3dd0d00d6948340df69879b449959a68feee6a0ad8e17ef9971b35986293e16fc9d8e88de81815fedd5ea6a952eb085406ca configs.patch
60c1ec62003a33036de68402544e25a71715ed124a3139056a94ed1ba02fb8148ee510ab8f182a308105a2f744b9787e67112bcd8cd0d800cdb6f5409c4f63ff cacheflush.patch
61d2d02b733011eefaac0681b7f6274e416dac4d420b354e37f51b07cc42dab61c798fbe5fab36f47079962046f309373b41886b4632e86dc08d5bfe59b275f7 CVE-2020-25709.patch
abb7f43b6379fe6c03e583dc3a2c861c573ad6b83710954e35928e0449a1b78e259d8d5c6b7c33747b347ab67388d4894980a954d5ddb24b51a693b9c43798f2 CVE-2020-25710.patch
023b32e1a8e61c96b77723dfe39d33de170af684e29defdb34c14719b77fa0e9a101f8aaafe378afb30bf5ca732cf7209ef291089d7524b2301a97c102f5f6e4 CVE-2020-25692.patch
0c3606e4dad1b32f1c4b62f2bc1990a4c9f7ccd10c7b50e623309ba9df98064e68fc42a7242450f32fb6e5fa2203609d3d069871b5ae994cd4b227a078c93532 slapd.initd
64dc4c0aa0abe3d9f7d2aef25fe4c8e23c53df2421067947ac4d096c9e942b26356cb8577ebc41b52d88d0b0a03b2a3e435fe86242671f9b36555a5f82ee0e3a slapd.confd
fddf5cf57c5b4b1d0e148ce850aafe5791dd7772727c824e858fe97e375871d2d3f622894d978444f7c5d8d64160c6fd766ae91de5eac3eb7f5292ceaaf599ea CVE-2020-12243.patch"
|
