%define migtools_version 45

%define db_version 4.3.27

%define ldbm_backend berkeley

%define version_20 2.0.27

%define version_21 2.1.30

%define version_22 2.2.26

%define nss_ldap_prefix %{_libdir}/nss_ldap-openldap

%define nss_ldap_includedir %{nss_ldap_prefix}/include

%define nss_ldap_libdir %{nss_ldap_prefix}/%{_lib}

%define evolution_connector_prefix %{_libdir}/evolution-openldap

%define evolution_connector_includedir %{evolution_connector_prefix}/include

%define evolution_connector_libdir %{evolution_connector_prefix}/%{_lib}

# For Fedora, we want 2.1 compatibility.  For RHEL or RHL9, we may want 2.0.

%define compat_version %{version_21}

%define nptl_arches %{ix86} ia64 ppc ppc64 s390 s390x sparcv9 x86_64

%define nss_ldap_build 0

Summary: The configuration files, libraries, and documentation for OpenLDAP.

Name: openldap

Version: %{version_22}

Release: 1

License: OpenLDAP

Group: System Environment/Daemons

Source0: ftp://ftp.OpenLDAP.org/pub/OpenLDAP/openldap-release/openldap-%{version_22}.tgz

Source1: ftp://ftp.OpenLDAP.org/pub/OpenLDAP/openldap-release/openldap-%{version_20}.tgz

Source2: ftp://ftp.OpenLDAP.org/pub/OpenLDAP/openldap-release/openldap-%{version_21}.tgz

Source3: ftp://ftp.OpenLDAP.org/pub/tools/autoconf-2.13.1.tar.gz

Source4: ftp://ftp.OpenLDAP.org/pub/tools/automake-1.4a.tar.gz

Source5: http://downloads.sleepycat.com/db-%{db_version}.tar.gz

Source7: ldap.init

Source8: ftp://ftp.padl.com/pub/MigrationTools-%{migtools_version}.tar.gz

Source9: migration-tools.txt

Source10: autofs.schema

Source11: README.upgrading

Source12: http://www.OpenLDAP.org/doc/admin/guide.html

Source13: nptl-abi-note.S

Source14: README.evolution

Source15: README.nss_ldap

Patch0: openldap-2.2.15-config.patch

Patch2: openldap-1.2.11-cldap.patch

Patch4: openldap-2.0.11-ldaprc.patch

Patch5: openldap-2.2.13-setugid.patch

Patch6: openldap-2.2.13-pie.patch

Patch7: openldap-2.2.15-toollinks.patch

Patch8: openldap-2.2.13-nosql.patch

Patch9: openldap-2.1.30-ldapi.patch

Patch10: openldap-2.1.30-libdir.patch

Patch12: db-4.0.14-disable-mutex.patch

Patch13: db-4.0.14-libobjs.patch

Patch21: MigrationTools-38-instdir.patch

Patch22: MigrationTools-36-mktemp.patch

Patch23: MigrationTools-27-simple.patch

Patch24: MigrationTools-26-suffix.patch

Patch25: MigrationTools-44-schema.patch

Patch26: MigrationTools-45-noaliases.patch

Patch40: openldap-ntlm.diff

Patch41: openldap-2.2.23-start_tls-async.patch

Patch50: openldap-2.0.27-resolv.patch

Patch51: openldap-2.1.30-resolv.patch

Patch52: openldap-2.2.23-resolv.patch

URL: http://www.openldap.org/

BuildRoot: %{_tmppath}/%{name}-%{version_22}-root

BuildPreReq: cyrus-sasl-devel >= 2.1, gdbm-devel, libtool >= 1.5.6-2, krb5-devel

BuildPreReq: openssl-devel, pam-devel, perl, pkgconfig, tcp_wrappers,

BuildPreReq: unixODBC-devel, bind-libbind-devel, libtool-ltdl-devel

Requires: cyrus-sasl, cyrus-sasl-md5, glibc >= 2.2.3-48, mktemp

%description

OpenLDAP is an open source suite of LDAP (Lightweight Directory Access

Protocol) applications and development tools. LDAP is a set of

protocols for accessing directory services (usually phone book style

information, but other information is possible) over the Internet,

similar to the way DNS (Domain Name System) information is propagated

over the Internet. The openldap package contains configuration files,

libraries, and documentation for OpenLDAP.

%package devel

Summary: OpenLDAP development libraries and header files.

Group: Development/Libraries

Requires: openldap = %{version_22}-%{release}, cyrus-sasl-devel >= 2.1

Provides: openldap-evolution-devel = %{version_22}-%{release}

%description devel

The openldap-devel package includes the development libraries and

header files needed for compiling applications that use LDAP

(Lightweight Directory Access Protocol) internals. LDAP is a set of

protocols for enabling directory services over the Internet. Install

this package only if you plan to develop or will need to compile

customized LDAP clients.

%package servers

Summary: OpenLDAP servers and related files.

Prereq: fileutils, make, openldap = %{version_22}-%{release}, openssl, /usr/sbin/useradd, /sbin/chkconfig, /sbin/runuser

Group: System Environment/Daemons

%description servers

OpenLDAP is an open-source suite of LDAP (Lightweight Directory Access

Protocol) applications and development tools. LDAP is a set of

protocols for accessing directory services (usually phone book style

information, but other information is possible) over the Internet,

similar to the way DNS (Domain Name System) information is propagated

over the Internet. This package contains the slapd and slurpd servers,

migration scripts, and related files.

%package servers-sql

Summary: OpenLDAP server SQL support module.

Prereq: openldap-servers = %{version_22}-%{release}

Group: System Environment/Daemons

%description servers-sql

OpenLDAP is an open-source suite of LDAP (Lightweight Directory Access

Protocol) applications and development tools. LDAP is a set of

protocols for accessing directory services (usually phone book style

information, but other information is possible) over the Internet,

similar to the way DNS (Domain Name System) information is propagated

over the Internet. This package contains a loadable module which the

slapd server can use to read data from an RDBMS.

%package clients

Summary: Client programs for OpenLDAP.

Prereq: openldap = %{version_22}-%{release}

Group: Applications/Internet

%description clients

OpenLDAP is an open-source suite of LDAP (Lightweight Directory Access

Protocol) applications and development tools. LDAP is a set of

protocols for accessing directory services (usually phone book style

information, but other information is possible) over the Internet,

similar to the way DNS (Domain Name System) information is propagated

over the Internet. The openldap-clients package contains the client

programs needed for accessing and modifying OpenLDAP directories.

# Declare this subpackage LAST.  This version tag redefines %%{version}, so

# any future use would reference the wrong version.

%package -n compat-openldap

Summary: OpenLDAP compatibility shared libraries.

Group: System Environment/Libraries

# Require the current OpenLDAP libraries package in an attempt to ensure that

# we have a /etc/openldap/ldap.conf file on the system.

Requires: openldap = %{version_22}-%{release}, cyrus-sasl >= 2.1

# Why this weirdo version number?  We want to ensure that version comparisons

# for this package always sort in the same order as the main openldap package.

Version: %{version_22}_%{compat_version}

%description -n compat-openldap

OpenLDAP is an open source suite of LDAP (Lightweight Directory Access

Protocol) applications and development tools.  The compat-openldap package

includes older versions of the OpenLDAP shared libraries which may be

required by some applications.

%prep

%setup -q -c -a 1 -a 2 -a 3 -a 4 -a 5 -a 8

pushd openldap-%{version_22}

%patch0 -p1 -b .config

%patch2 -p1 -b .cldap

%patch4 -p1 -b .ldaprc

%patch5 -p1 -b .setugid

%patch6 -p1 -b .pie

%patch7 -p1 -b .toollinks

%patch8 -p1 -b .nosql

%patch52 -p1 -b .resolv

cp %{_datadir}/libtool/config.{sub,guess} build/

popd

# Set up a build tree for a static version of libldap with the hooks for the

# non-standard NTLM bind type which is needed to connect to Win2k GC servers

# (Win2k3 supports SASL with DIGEST-MD5, so this shouldn't be needed for those

# servers, though as of version 1.4 the connector doesn't try SASL first).

if ! cp -al openldap-%{version_22} evo-openldap-%{version_22} ; then

     rm -fr evo-openldap-%{version_22}

     cp -a  openldap-%{version_22} evo-openldap-%{version_22}

fi

pushd evo-openldap-%{version_22}

%patch40 -p0 -b .evolution-ntlm

popd

%if %{nss_ldap_build}

# Set up a build tree for a static version of libldap with async start_tls

# support, which nss_ldap can use to avoid blocking if a server is accepting

# connections but is otherwise unresponsive.

if ! cp -al openldap-%{version_22} nss_ldap-openldap-%{version_22} ; then

     rm -fr nss_ldap-openldap-%{version_22}

     cp -a  openldap-%{version_22} nss_ldap-openldap-%{version_22}

fi

pushd nss_ldap-openldap-%{version_22}

%patch41 -p0 -b .start_tls

popd

%endif

pushd MigrationTools-%{migtools_version}

%patch21 -p1 -b .instdir

%patch22 -p1 -b .mktemp

%patch23 -p1 -b .simple

%patch24 -p1 -b .suffix

%patch25 -p1 -b .schema

%patch26 -p1 -b .noaliases

popd

autodir=`pwd`/auto-instroot

pushd autoconf-2.13.1

./configure --prefix=$autodir

make all install

popd

pushd automake-1.4a

./configure --prefix=$autodir

make all install

popd

pushd openldap-%{version_20}

%patch9 -p1 -b .ldapi

%patch50 -p1 -b .resolv

	for subdir in build-gdbm build-db build-clients build-compat ; do

		mkdir $subdir

		ln -s ../configure $subdir

	done

$autodir/bin/autoconf

popd

pushd openldap-%{version_21}

%patch9 -p1 -b .ldapi

%patch10 -p1 -b .libdir

%patch51 -p1 -b .resolv

	for subdir in build-servers build-compat ; do

		mkdir $subdir

		ln -s ../configure $subdir

	done

$autodir/bin/autoconf

popd

pushd openldap-%{version_22}

	for subdir in build-servers build-clients ; do

		mkdir $subdir

		ln -s ../configure $subdir

	done

$autodir/bin/autoconf

popd

%build

autodir=`pwd`/auto-instroot

dbdir=`pwd`/db-instroot

dbdir40=`pwd`/db-instroot-4.0

libtool='%{_bindir}/libtool'

tagname=CC; export tagname

PATH=${autodir}/bin:${PATH}

%ifarch ia64

RPM_OPT_FLAGS="$RPM_OPT_FLAGS -O0"

%endif

# Set CFLAGS to incorporate RPM_OPT_FLAGS.

CFLAGS="$RPM_OPT_FLAGS -D_REENTRANT -fPIC"; export CFLAGS

# Build Berkeley DB and install it into a temporary area, isolating OpenLDAP

# from any future changes to the system-wide Berkeley DB library.  Version 4.2

# or later is required by the BDB backend in OpenLDAP 2.1 and later.

buildbdb() {

	subdir=$1

	shift

	install -d db-%{db_version}/build-rpm${subdir:+-${subdir}}

	pushd db-%{db_version}/build-rpm${subdir:+-${subdir}}

	echo "${1:+db_cv_mutex=$1}" > config.cache

	shift

	../dist/configure -C \

		--with-pic \

		--disable-static \

		--enable-shared \

		--with-uniquename=_openldap_slapd_rhl_42 \

		--prefix=${dbdir} \

		--includedir=${dbdir}/include \

		--libdir=${dbdir}/%{_lib}${subdir:+/${subdir}}

	# XXX db-4.2.x handles O_DIRECT (by disabling on linux) correctly.

	# XXX hack out O_DIRECT support in db4 for now.

	perl -pi -e 's/#define HAVE_O_DIRECT 1/#undef HAVE_O_DIRECT/' db_config.h

	# fix libtool: no rpath

        perl -pi -e 's|hardcode_libdir_flag_spec=.*|hardcode_libdir_flag_spec=\"-L\\\$libdir\"|g;' libtool

	if test -n "$nptl_lo" ; then

		./libtool --mode=compile %{__cc} -o $nptl_lo -c $nptl_s

	fi

	make %{_smp_mflags} libdb_base=libslapd_db libso_base=libslapd_db LIBSO_LIBS="$nptl_lo"

	make install libdb_base=libslapd_db libso_base=libslapd_db LIBSO_LIBS="$nptl_lo"

	ln -sf libslapd_db.so ${dbdir}/%{_lib}/${subdir}/libdb.so

	popd

}

# Build an NPTL libdb if we're on a Linux arch with NPTL.  NPTL gives us the

# ability to share mutexes between threads in different processes, and to have

# threads in both honor those locks.  We have to do this because if you build

# libdb with support for intra-process locks, it dies if you don't have it and

# the application has specified to libdb that it's multi-threaded (as slapd

# does).

%ifarch %{nptl_arches}

unset nptl_s nptl_lo

case %{_os} in

linux|Linux)

	nptl_s=$RPM_SOURCE_DIR/nptl-abi-note.S

	nptl_lo=nptl-abi-note.lo

	;;

esac

buildbdb tls POSIX/pthreads/library

unset nptl_s nptl_lo

%endif

# Build a non-NPTL libdb and tools, able to only use intra-process thread

# locks.  Useless for bdb's purposes (bdb requires shared env support), but

# acceptable for ldbm.

buildbdb "" POSIX/pthreads/library/private

# Find OpenSSL's header and library dependencies.

if pkg-config openssl ; then

	OPENSSL_CPPFLAGS=`pkg-config --cflags-only-I openssl`

	CPPFLAGS="$OPENSSL_CPPFLAGS" ; export CPPFLAGS

	OPENSSL_LDFLAGS=`pkg-config --libs-only-L openssl`

	LDFLAGS="$OPENSSL_LDFLAGS" ; export LDFLAGS

fi

CPPFLAGS="-I${dbdir}/include $OPENSSL_CPPFLAGS" ; export CPPFLAGS

CFLAGS="$CPPFLAGS $RPM_OPT_FLAGS -D_REENTRANT -fPIC"; export CFLAGS

LDFLAGS="-L${dbdir}/%{_lib} $OPENSSL_LDFLAGS" ; export LDFLAGS

LD_LIBRARY_PATH=${dbdir}/%{_lib}${LD_LIBRARY_PATH:+:${LD_LIBRARY_PATH}}; export LD_LIBRARY_PATH

# Build the client libraries for the compat package.

pushd openldap-%{compat_version}/build-compat

%configure \

	--disable-slapd --disable-slurpd \

	--with-threads=posix --enable-static --enable-shared --enable-dynamic \

	--enable-local --with-tls --with-cyrus-sasl --without-kerberos

make %{_smp_mflags}

popd

# Build 2.2.

build() {

%configure \

	--disable-slapd --disable-slurpd \

	--with-threads=posix --enable-static --enable-shared --enable-dynamic \

	\

	--enable-local --enable-rlookups \

	\

	--with-tls \

	--with-cyrus-sasl \

	\

	--enable-wrappers \

	\

	--enable-passwd \

	\

	--enable-cleartext \

	--enable-crypt \

	--enable-spasswd \

	--enable-lmpasswd \

	--enable-modules \

	--disable-sql \

	\

	--libexecdir=%{_sbindir} \

	$@

make %{_smp_mflags} LIBTOOL="$libtool"

}

# Build the servers with Kerberos support (for password checking, mainly).

LIBS=-lpthread; export LIBS

LD_LIBRARY_PATH=${dbdir}/%{_lib}${LD_LIBRARY_PATH:+:${LD_LIBRARY_PATH}}; export LD_LIBRARY_PATH

pushd openldap-%{version_22}/build-servers

build \

	--enable-plugins \

	--enable-slapd \

	--enable-slurpd \

	--enable-bdb \

	--enable-hdb \

	--enable-ldap \

	--enable-ldbm \

	--with-ldbm-api=%{ldbm_backend} \

	--enable-meta \

	--enable-monitor \

	--enable-null \

	--enable-shell \

	--enable-sql=mod \

	--disable-perl \

	--disable-shared \

	--disable-dynamic \

	--with-kerberos=k5only

unset LIBS

popd

# Build clients without Kerberos password-checking support, which is only

# useful in the server anyway, to avoid stray dependencies.

pushd openldap-%{version_22}/build-clients

build \

	--disable-slapd \

	--disable-slurpd \

	--enable-shared \

	--enable-dynamic \

	--enable-static \

	--without-kerberos \

	--with-cyrus-sasl \

	--with-pic

popd

# Build evolution-specific clients just as we would normal clients, except with

# a different installation directory in mind and no shared libraries.

pushd evo-openldap-%{version_22}

build \

	--disable-slapd \

	--disable-slurpd \

	--disable-shared \

	--disable-dynamic \

	--enable-static \

	--without-kerberos \

	--with-cyrus-sasl \

	--with-pic \

	--includedir=%{evolution_connector_includedir} \

	--libdir=%{evolution_connector_libdir}

popd

%if %{nss_ldap_build}

# Build nss_ldap-specific clients just as we would normal clients, except with

# a different installation directory in mind and no shared libraries.

pushd nss_ldap-openldap-%{version_22}

build \

	--disable-slapd \

	--disable-slurpd \

	--disable-shared \

	--disable-dynamic \

	--enable-static \

	--without-kerberos \

	--with-cyrus-sasl \

	--with-pic \

	--includedir=%{nss_ldap_includedir} \

	--libdir=%{nss_ldap_libdir}

popd

%endif

%install

[ "$RPM_BUILD_ROOT" != "/" ] && rm -rf $RPM_BUILD_ROOT

libtool='%{_bindir}/libtool'

tagname=CC; export tagname

# Install the 2.0 or 2.1 shared libraries for compatibility.  The two sets of

# libraries share sonames, so we have to choose one or the other.

mkdir -p $RPM_BUILD_ROOT/%{_libdir}/

pushd openldap-%{compat_version}/build-compat/libraries

	make install DESTDIR=$RPM_BUILD_ROOT

	rm $RPM_BUILD_ROOT/%{_libdir}/*.a

	rm $RPM_BUILD_ROOT/%{_libdir}/*.la

	rm $RPM_BUILD_ROOT/%{_libdir}/*.so

popd

# Install servers.

%ifarch %{nptl_arches}

case %{_target_platform} in

	i386*|i486*) archp=i486; arches="i586 i686";;

	i586*) archp=i586; arches=i686;;

	i686*) archp=i686; arches=;;

	athlon*) archp=i686; arches=;;

	*) archp=; arches=;;

esac

pushd db-instroot/%{_lib}/tls/

install -d $RPM_BUILD_ROOT/%{_libdir}/tls/${archp}/

install -m755 libslapd_db-*.*.so $RPM_BUILD_ROOT/%{_libdir}/tls/${archp}/

for arch in $arches ; do

	install -d $RPM_BUILD_ROOT/%{_libdir}/tls/${arch}/

	ln $RPM_BUILD_ROOT/%{_libdir}/tls/${archp}/* $RPM_BUILD_ROOT/%{_libdir}/tls/${arch}/

done

popd

%endif

pushd db-instroot/%{_lib}/

install -d $RPM_BUILD_ROOT/%{_libdir}/

install -m755 libslapd_db-*.*.so $RPM_BUILD_ROOT/%{_libdir}/

popd

pushd openldap-%{version_22}/build-servers

make install DESTDIR=$RPM_BUILD_ROOT libdir=%{_libdir} LIBTOOL="$libtool"

popd

# Install the bdb maintenance tools.

pushd db-instroot/bin

for binary in db_* ; do

	install -m755 ${binary} $RPM_BUILD_ROOT/%{_sbindir}/slapd_${binary}

done

popd

# Install clients and shared libraries.  Install the evo-specific versions

# first so that any conflicting files are overwritten by generic versions.

pushd evo-openldap-%{version_22}

make install DESTDIR=$RPM_BUILD_ROOT \

	includedir=%{evolution_connector_includedir} \

	libdir=%{evolution_connector_libdir} \

	LIBTOOL="$libtool"

install -m644 \

	$RPM_SOURCE_DIR/README.evolution \

	$RPM_BUILD_ROOT/%{evolution_connector_prefix}/

popd

%if %{nss_ldap_build}

pushd nss_ldap-openldap-%{version_22}

make install DESTDIR=$RPM_BUILD_ROOT \

	includedir=%{nss_ldap_includedir} \

	libdir=%{nss_ldap_libdir} \

	LIBTOOL="$libtool"

install -m644 \

	$RPM_SOURCE_DIR/README.nss_ldap \

	$RPM_BUILD_ROOT/%{nss_ldap_prefix}/

popd

%endif

pushd openldap-%{version_22}/build-clients

make install DESTDIR=$RPM_BUILD_ROOT libdir=%{_libdir} LIBTOOL="$libtool"

popd

# Create this directory so that authconfig setting TLS_CACERT to

# /etc/openldap/cacerts doesn't cause TLS startup of any kind to fail

# when the directory doesn't exist.

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/openldap/cacerts

# Install the padl.com migration tools.

mkdir -p $RPM_BUILD_ROOT%{_datadir}/openldap/migration

install -m 755 MigrationTools-%{migtools_version}/migrate_* \

	$RPM_BUILD_ROOT%{_datadir}/openldap/migration/

install -m 644 MigrationTools-%{migtools_version}/README \

	$RPM_SOURCE_DIR/migration-tools.txt \

	$RPM_BUILD_ROOT%{_datadir}/openldap/migration/

cp MigrationTools-%{migtools_version}/README README.migration

cp $RPM_SOURCE_DIR/migration-tools.txt TOOLS.migration

# Create the data directory.

mkdir -p $RPM_BUILD_ROOT/var/lib/ldap

# Hack the build root out of the default config files.

perl -pi -e "s|$RPM_BUILD_ROOT||g" $RPM_BUILD_ROOT/%{_sysconfdir}/openldap/*.conf

# Get the buildroot out of the man pages.

perl -pi -e "s|$RPM_BUILD_ROOT||g" $RPM_BUILD_ROOT%{_mandir}/*/*.*

# We don't need the default files -- RPM handles changes.

rm -f $RPM_BUILD_ROOT/%{_sysconfdir}/openldap/*.default

rm -f $RPM_BUILD_ROOT/%{_sysconfdir}/openldap/schema/*.default

# Install an init script for the servers.

mkdir -p $RPM_BUILD_ROOT/etc/rc.d/init.d

install -m 755 $RPM_SOURCE_DIR/ldap.init $RPM_BUILD_ROOT/etc/rc.d/init.d/ldap

# If ldapadd and ldapmodify are the same binary, make them a hard link

if cmp $RPM_BUILD_ROOT%{_bindir}/ldapadd $RPM_BUILD_ROOT%{_bindir}/ldapmodify ; then

	ln -f $RPM_BUILD_ROOT%{_bindir}/ldapadd $RPM_BUILD_ROOT%{_bindir}/ldapmodify

fi

# Add some more schema for the sake of migration scripts.

install -d -m755 $RPM_BUILD_ROOT%{_sysconfdir}/openldap/schema/redhat

install -m644 \

	$RPM_SOURCE_DIR/autofs.schema \

	$RPM_BUILD_ROOT%{_sysconfdir}/openldap/schema/redhat/

# Tweak permissions on the libraries to make sure they're correct.

chmod 755 $RPM_BUILD_ROOT/%{_libdir}/lib*.so*

chmod 644 $RPM_BUILD_ROOT/%{_libdir}/lib*.*a

# Remove files which we don't want packaged.

rm -f $RPM_BUILD_ROOT/%{_datadir}/openldap/migration/*.{instdir,simple,schema,mktemp,suffix,noaliases}

rm -f $RPM_BUILD_ROOT/%{_libdir}/*.la

rm -f $RPM_BUILD_ROOT/%{evolution_connector_libdir}/*.la

rm -f $RPM_BUILD_ROOT/%{evolution_connector_libdir}/*.so*

%if %{nss_ldap_build}

rm -f $RPM_BUILD_ROOT/%{nss_ldap_libdir}/*.la

rm -f $RPM_BUILD_ROOT/%{nss_ldap_libdir}/*.so*

%endif

rm -f $RPM_BUILD_ROOT/%{_sbindir}/openldap/*.a

rm -f $RPM_BUILD_ROOT/%{_sbindir}/openldap/*.so

%clean 

rm -rf $RPM_BUILD_ROOT

%post -p /sbin/ldconfig

%postun -p /sbin/ldconfig

%pre servers

# Take care to only do ownership-changing if we're adding the user.

if /usr/sbin/useradd -c "LDAP User" -u 55 \

	-s /bin/false -r -d /var/lib/ldap ldap 2> /dev/null ; then

	if [ -d /var/lib/ldap ] ; then

		for dbfile in /var/lib/ldap/* ; do

			if [ -f $dbfile ] ; then

				chown ldap:ldap $dbfile

			fi

		done

	fi

fi

%post servers

/sbin/ldconfig

/sbin/chkconfig --add ldap

exec > /dev/null 2> /dev/null

if [ ! -f %{_datadir}/ssl/certs/slapd.pem ] ; then

pushd %{_datadir}/ssl/certs

umask 077

cat << EOF | make slapd.pem

--

SomeState

SomeCity

SomeOrganization

SomeOrganizationalUnit

localhost.localdomain

root@localhost.localdomain

EOF

chown root:ldap slapd.pem

chmod 640 slapd.pem

popd

fi

exit 0

%preun servers

if [ "$1" = "0" ] ; then

	/sbin/service ldap stop > /dev/null 2>&1 || :

	/sbin/chkconfig --del ldap

fi

%postun servers

/sbin/ldconfig

if [ $1 -ge 1 ] ; then

	/sbin/service ldap condrestart > /dev/null 2>&1 || :

fi

%files

%defattr(-,root,root)

%doc openldap-%{version_22}/ANNOUNCEMENT

%doc openldap-%{version_22}/CHANGES

%doc openldap-%{version_22}/COPYRIGHT

%doc openldap-%{version_22}/LICENSE

%doc openldap-%{version_22}/README

%attr(0755,root,root) %dir /etc/openldap

%attr(0755,root,root) %dir /etc/openldap/cacerts

%attr(0644,root,root) %config(noreplace) /etc/openldap/ldap*.conf

%attr(0755,root,root) %{_libdir}/liblber-*.so.*

%attr(0755,root,root) %{_libdir}/libldap-*.so.*

%attr(0755,root,root) %{_libdir}/libldap_r-*.so.*

%attr(0644,root,root) %{_mandir}/man5/ldif.5*

%attr(0644,root,root) %{_mandir}/man5/ldap.conf.5*

%attr(0755,root,root) %dir %{_datadir}/openldap

%files -n compat-openldap

%defattr(-,root,root)

%doc openldap-%{compat_version}/ANNOUNCEMENT

%doc openldap-%{compat_version}/COPYRIGHT

%doc openldap-%{compat_version}/LICENSE

%attr(0755,root,root) %{_libdir}/liblber.so.*

%attr(0755,root,root) %{_libdir}/libldap.so.*

%attr(0755,root,root) %{_libdir}/libldap_r.so.*

%if %( test %{compat_version} = %{version_20} && echo 1 || echo 0 )

%attr(0755,root,root) %dir %{_datadir}/openldap

%attr(0644,root,root) %{_datadir}/openldap/ldapfriendly

%endif

%files servers

%defattr(-,root,root)

%doc README.migration

%doc TOOLS.migration

%doc $RPM_SOURCE_DIR/README.upgrading $RPM_SOURCE_DIR/guide.html

%attr(0755,root,root) %config /etc/rc.d/init.d/ldap

%attr(0640,root,ldap) %config(noreplace) /etc/openldap/slapd.conf

%attr(0755,root,root) %dir /etc/openldap/schema

%attr(0644,root,root) %dir /etc/openldap/schema/README*

%attr(0644,root,root) %config(noreplace) /etc/openldap/schema/*.schema*

%attr(0755,root,root) %dir /etc/openldap/schema/redhat

%attr(0644,root,root) %config(noreplace) /etc/openldap/schema/redhat/*.schema*

%attr(0755,root,root) %{_sbindir}/sl*

%attr(0644,root,root) %{_mandir}/man8/*

%attr(0644,root,root) %{_mandir}/man5/slapd*.5*

%attr(0755,root,root) %dir %{_datadir}/openldap/migration

%attr(0644,root,root) %{_datadir}/openldap/migration/README

%attr(0644,root,root) %config(noreplace) %{_datadir}/openldap/migration/*.ph

%attr(0755,root,root) %{_datadir}/openldap/migration/*.pl

%attr(0755,root,root) %{_datadir}/openldap/migration/*.sh

%attr(0644,root,root) %{_datadir}/openldap/migration/*.txt

%attr(0755,root,root) %dir %{_datadir}/openldap/ucdata

%attr(0644,root,root) %dir %{_datadir}/openldap/ucdata/*

%attr(0700,ldap,ldap) %dir /var/lib/ldap

%attr(0755,root,root) %{_libdir}/libslapd_db-*.*.so

%ifarch %{nptl_arches}

%ifnarch %{ix86}

%attr(0755,root,root) %{_libdir}/tls/libslapd_db-*.*.so

%else

%dir %attr(0755,root,root) %{_libdir}/tls/*

%attr(0755,root,root) %{_libdir}/tls/*/libslapd_db-*.*.so

%endif

%endif

%files servers-sql

%defattr(-,root,root)

%doc openldap-%{version_22}/servers/slapd/back-sql/docs/*

%doc openldap-%{version_22}/servers/slapd/back-sql/rdbms_depend

%attr(0755,root,root) %{_sbindir}/openldap/back_sql.la

%attr(0755,root,root) %{_sbindir}/openldap/back_sql*.so.*

%files clients

%defattr(-,root,root)

%attr(0755,root,root) %{_bindir}/*

%attr(0644,root,root) %{_mandir}/man1/*

%files devel

%defattr(-,root,root)

%doc openldap-%{version_22}/doc/drafts openldap-%{version_22}/doc/rfc

%attr(0755,root,root) %{_libdir}/libl*.so

%attr(0644,root,root) %{_libdir}/libl*.a

%attr(0644,root,root) %{_includedir}/*

%attr(0644,root,root) %{_mandir}/man3/*

%attr(0755,root,root) %dir %{evolution_connector_prefix}

%attr(0644,root,root)      %{evolution_connector_prefix}/README*

%attr(0755,root,root) %dir %{evolution_connector_includedir}

%attr(0644,root,root)      %{evolution_connector_includedir}/*.h

%attr(0755,root,root) %dir %{evolution_connector_libdir}

%attr(0644,root,root)      %{evolution_connector_libdir}/*.a

%if %{nss_ldap_build}

%attr(0755,root,root) %dir %{nss_ldap_prefix}

%attr(0644,root,root)      %{nss_ldap_prefix}/README*

%attr(0755,root,root) %dir %{nss_ldap_includedir}

%attr(0644,root,root)      %{nss_ldap_includedir}/*.h

%attr(0755,root,root) %dir %{nss_ldap_libdir}

%attr(0644,root,root)      %{nss_ldap_libdir}/*.a

%endif

%changelog

* Thu May 19 2005 Nalin Dahyabhai <nalin@redhat.com>

- run slaptest with the -u flag if no id2entry db files are found, because

  you can't check for read-write access to a non-existent database (#156787)

- add %{_sysconfdir}/openldap/cacerts, which authconfig sets as the

  TLS_CACERTDIR path in /etc/openldap/ldap.conf now

- use a temporary wrapper script to launch slapd, in case we have arguments

  with embedded whitespace (#158111)

* Wed May  4 2005 Nalin Dahyabhai <nalin@redhat.com>

- update to 2.2.26 (stable 20050429)

- enable the lmpasswd scheme

- print a warning if slaptest fails, slaptest -u succeeds, and one of the

  directories listed as the storage location for a given suffix in slapd.conf

  contains a readable file named __db.001 (#118678)

* Tue Apr 26 2005 Nalin Dahyabhai <nalin@redhat.com> 2.2.25-1

- update to 2.2.25 (release)

* Tue Apr 26 2005 Nalin Dahyabhai <nalin@redhat.com> 2.2.24-1

- update to 2.2.24 (stable 20050318)

- export KRB5_KTNAME in the init script, in case it was set in the sysconfig

  file but not exported

* Tue Mar  1 2005 Nalin Dahyabhai <nalin@redhat.com> 2.2.23-4

- prefer libresolv to libbind

* Tue Mar  1 2005 Nalin Dahyabhai <nalin@redhat.com> 2.2.23-3

- add bind-libbind-devel and libtool-ltdl-devel buildprereqs

* Tue Mar  1 2005 Tomas Mraz <tmraz@redhat.com> 2.2.23-2

- rebuild with openssl-0.9.7e

* Mon Jan 31 2005 Nalin Dahyabhai <nalin@redhat.com> 2.2.23-1

- update to 2.2.23 (stable-20050125)

- update notes on upgrading from earlier versions

- drop slapcat variations for 2.0/2.1, which choke on 2.2's config files

* Tue Jan  4 2005 Nalin Dahyabhai <nalin@redhat.com> 2.2.20-1

- update to 2.2.20 (stable-20050103)

- warn about unreadable krb5 keytab files containing "ldap" keys

- warn about unreadable TLS-related files

- own a ref to subdirectories which we create under %%{_libdir}/tls

* Tue Nov  2 2004 Nalin Dahyabhai <nalin@redhat.com> 2.2.17-0

- rebuild

* Thu Sep 30 2004 Nalin Dahyabhai <nalin@redhat.com>

- update to 2.2.17 (stable-20040923) (#135188)

- move nptl libraries into arch-specific subdirectories on %%{ix86} boxes

- require a newer glibc which can provide nptl libpthread on i486/i586

* Tue Aug 24 2004 Nalin Dahyabhai <nalin@redhat.com>

- move slapd startup to earlier in the boot sequence (#103160)

- update to 2.2.15 (stable-20040822)

- change version number on compat-openldap to include the non-compat version

  from which it's compiled, otherwise would have to start 2.2.15 at release 3

  so that it upgrades correctly

* Thu Aug 19 2004 Nalin Dahyabhai <nalin@redhat.com> 2.2.13-2

- build a separate, static set of libraries for openldap-devel with the

  non-standard ntlm bind patch applied, for use by the evolution-connector

  package (#125579), and installing them under

  %%{evolution_connector_prefix} (%{evolution_connector_prefix})

- provide openldap-evolution-devel = %%{version}-%%{release} in openldap-devel

  so that evolution-connector's source package can require a version of

  openldap-devel which provides what it wants

* Mon Jul 26 2004 Nalin Dahyabhai <nalin@redhat.com>

- update administrator guide

* Wed Jun 16 2004 Nalin Dahyabhai <nalin@redhat.com> 2.2.13-1

- add compat-openldap subpackage

- default to bdb, as upstream does, gambling that we're only going to be

  on systems with nptl now

* Tue Jun 15 2004 Nalin Dahyabhai <nalin@redhat.com> 2.2.13-0

- preliminary 2.2.13 update

- move ucdata to the -servers subpackage where it belongs

* Tue Jun 15 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.30-1

- build experimental sql backend as a loadable module

* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>

- rebuilt

* Tue May 18 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.30-0

- update to 2.1.30

* Thu May 13 2004 Thomas Woerner <twoerner@redhat.com> 2.1.29-3

- removed rpath

- added pie patch: slapd and slurpd are now pie

- requires libtool >= 1.5.6-2 (PIC libltdl.a)

* Fri Apr 16 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.29-2

- move rfc documentation from main to -devel (#121025)

* Wed Apr 14 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.29-1

- rebuild

* Tue Apr  6 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.29-0

- update to 2.1.29 (stable 20040329)

* Mon Mar 29 2004 Nalin Dahyabhai <nalin@redhat.com>

- don't build servers with --with-kpasswd, that option hasn't been recognized

  since 2.1.23

* Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com> 2.1.25-5.1

- rebuilt

* Mon Feb 23 2004 Tim Waugh <twaugh@redhat.com> 2.1.25-5

- Use ':' instead of '.' as separator for chown.

* Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>

- rebuilt