Commit Graph

32 Commits

Author SHA1 Message Date
Joshua Lock
efd3696e70 remove True option to getVar calls
getVar() now defaults to expanding by default, thus remove the True
option from getVar() calls with a regex search and replace.

Search made with the following regex: getVar ?\(( ?[^,()]*), True\)

Signed-off-by: Joshua Lock <joshua.g.lock@intel.com>
2016-12-02 09:16:17 +01:00
Khem Raj
5d22f06617 openldap: Fix Build error due to missing -fPIC
Fixes errors e.g.

relocation R_AARCH64_ADR_PREL_PG_HI21 against external symbol `stderr@@GLIBC_2.17' can not be us
ed when making a shared object; recompile with -fPIC

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2016-11-26 01:07:04 +01:00
Kai Kang
2396e301da openldap: use recommended backend mdb
The mdb backend to slapd(8) is the recommended primary backend for a
normal slapd database. Add PACKAGECONFIG 'mdb' to enable it and build
mdb as SLAPD_STATIC_BACKENDS.

This fixes the errors while starting slapd:

  $systemctl start slapd
  Job for slapd.service failed because the control process exited \
  with error code. See "systemctl status slapd.service" and \
  "journalctl -xe" for details.

  $ systemctl status slapd
  ...
  /etc/openldap/slapd.conf: line 53: <database> failed init (bdb)
  Unrecognized database type (bdb)
  slapd.service: Control process exited, code=exited status=1
  ...

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-10-26 10:28:41 +02:00
Li Wang
24e387aaf7 openldap: fix CVE-2015-3276
the patch comes from:
https://bugzilla.redhat.com/show_bug.cgi?id=1238322
https://bugzilla.redhat.com/attachment.cgi?id=1055640

The nss_parse_ciphers function in libraries/libldap/tls_m.c in
OpenLDAP does not properly parse OpenSSL-style multi-keyword mode
cipher strings, which might cause a weaker than intended cipher to
be used and allow remote attackers to have unspecified impact via
unknown vectors.

Signed-off-by: Li Wang <li.wang@windriver.com>
Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-09-19 16:24:10 +02:00
Wang Xin
ac960a64c8 openldap: 2.4.43 -> 2.4.44
1)Upgrade openldap from 2.4.43 to 2.4.44.
2)Modify LIC_FILES_CHKSUM, since the date in it has been changed, But the LICENSE has not been changed.

Signed-off-by: Wang Xin <wangxin2015.fnst@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-09-05 13:30:50 +02:00
Martin Jansa
dc48e768f5 meta-oe: remove trailing spaces
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-08-22 15:56:29 +02:00
Richard Tollerton
33d02963fc openldap: control ipv6 support via DISTRO_FEATURES
Explicitly disable ipv6 support if the distro does not include it.

Signed-off-by: Richard Tollerton <rich.tollerton@ni.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-03-25 11:26:59 +01:00
Ioan-Adrian Ratiu
4c2f0370fb openldap: enable native build
This is required by the apr-util & apache2 recipes to enable
ldap support without breaking the build (nothing provides -native)

Signed-off-by: Ioan-Adrian Ratiu <adrian.ratiu@ni.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-02-15 10:15:27 +01:00
Bruno Vernay
f3b3c1fdd8 openldap: improve packaging of OpenLDAP modules
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-02-01 15:58:05 +01:00
fan.xin
03d613e570 openldap: upgrade to 2.4.43
1. Upgrade openldap from 2.4.42 to 2.4.43
2. Delete patch file openldap-fix-CVE-2015-6908.patch
because the bug(ITS#8240) has been fixed in OpenLDAP 2.4.43

http://www.openldap.org/software/release/changes.html

Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-18 12:43:22 +01:00
Kai Kang
2d1de436b1 openldap: 2.4.41 -> 2.4.42
Upgrade phpmyadmin from 2.4.41 to 2.4.42. And backport patch from

http://www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=commitdiff;h=6fe51a9

to fix CVE-2015-6908.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-10-23 12:53:23 +02:00
Li xin
125a424fce openldap: upgrade 2.4.40 -> 2.4.41
1) Dropped backported patches(commit-id):
-0001-ITS-8027-require-non-empty-AttributeList.patch(c32e747)
-0001-ITS-8046-fix-vrFilter_free.patch(2f1a2dd)

2) Update the checksum of COPYRIGHT,since the date in it has been changed,
but the LICENSE has not been changed.

Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-07-30 21:22:24 +02:00
Roy Li
47ca7a8403 openldap: upgrade to 2.4.20
1. upgrade to 2.4.20
2. remove two backup patches
2. integrate two patches to fix CVE-2015-1545 and CVE-2015-1546
3. disable bdb/hdb backend, since BerkeleyDB 6.0.20+ license is
   incompatible with LDAP

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-05-28 10:35:16 +02:00
Joe Slater
6abfe21a2a openldap: fix uninitialized ptr access problem
To be safe, the ldap_pvt_thread_pool_getkey() function should
always set the data parameter.  If this is not done, slapd can
segfault during shutdown.

Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-03-21 16:42:22 +01:00
Roy Li
19e9164e1f openldap: add systemd support
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-02-12 19:37:20 +01:00
Robert Yang
99bfc3122d openldap: fix for new libtool
The new libtool's ltmain.sh is in build-aux.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-02-12 19:33:46 +01:00
Robert Yang
a4bdcbdbca openldap: use PN for PACKAGES_DYNAMIC
Fixed do_packagedata error when multilib:
ERROR: The recipe openldap is trying to install files into a shared area when those files already exist. Those files and their manifest location are:
   /path/to/sysroots/qemux86-64/pkgdata/runtime-rprovides/openldap-backends/openldap-backends
   Matched in manifest-qemux86-64-lib32-openldap.packagedata
   /path/to/tmp/sysroots/qemux86-64/pkgdata/runtime/openldap-backends.packaged
   Matched in manifest-qemux86-64-lib32-openldap.packagedata
   /path/to/tmp/sysroots/qemux86-64/pkgdata/runtime/openldap-backends
   Matched in manifest-qemux86-64-lib32-openldap.packagedata
Please verify which recipe should provide the above files.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
2014-10-10 12:47:35 +02:00
Jackie Huang
eb65ab684d openldap: update version to 2.4.39
Changed:
 * Move slapd from ${libexecdir} to ${sbin}:
   Installing slapd under ${sbin} is more FHS and LSB compliance
 * Manage init script by inheriting update-rc.d, than postinst
 * Add status for initscript
 * Rename the patch named with commit id to
   gnutls-Avoid-use-of-deprecated-function.patch
 * Add a patch for CVE-2013-4449
 * Add a patch to use /dev/urandom for entropy
 * Allow tls obtains random bits from /dev/urandom:
   The URANDOM_DEVICE is undefined for cross-compiling, define it as
   /dev/urandom to allow tls obtains random bits from /dev/urandom.
 * Add PACKAGECONFIG for mdb, ndb, relay and sock
 * Remove unsupported config for ldbm
 * Add license file

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-10-10 12:47:34 +02:00
Robert Yang
f3cfd1b833 meta-oe: fix no newline at end of file
Add a '\n' to the last line of the file to fix:

No newline at end of file

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-15 14:57:26 +02:00
Robert Yang
05de0ca43d meta-oe: use BPN in SRC_URI
Fixed SRC_URI:
* ${PN} -> ${BPN}, use ${BP} if it was ${PN}-${PV}
* ${P} -> ${BP}

Otherwise we would meet do_fetch errors when we do the multilib, native
or nativesdk build.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-15 14:56:55 +02:00
Koen Kooi
6bb0c0de3f openldap: fix build against gnutls3
OE-core update from gnutls2 to gnutls3, openldap needs patches to cope with that. Also add libgcrypt to DEPENDS since openldap links against it directly now instead of through gnutls.

Signed-off-by: Koen Kooi <koen.kooi@linaro.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-05-15 12:30:17 +02:00
Koen Kooi
86de202b7e openldap: inherit autotools-brokensep
Also remove hack that deletes headers from staging, it's not needed anymore.

Signed-off-by: Koen Kooi <koen.kooi@linaro.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-05-03 20:47:03 +02:00
Chong.Lu@windriver.com
2e9c4ac834 openldap: add a dependency to make do_compile pass
During compiling? we need soelim command provided by groff-native.
So add DEPENDS to fix this issue, else we will get following error:

	/bin/sh: 15: soelim: not found

Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-03-23 21:47:19 +01:00
Martin Jansa
cc3b69a94b openldap: add dependency on util-linux
* openldap-slapd was sometime depending on util-linux-libuuid
  add dependency to explicitly enable it

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2013-07-30 11:17:13 +02:00
Martin Jansa
f46afc8821 openldap: convert to PACKAGECONFIGs, explicitly disable openssl
* some options like ldbm weren't supported by current version
* when gnutls and openssl were both available it was picking openssl
  because default --with-tls is auto

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2013-07-20 17:04:54 +02:00
Jonathan Liu
b9e9d4d144 openldap: remove empty /var/run directory
The /var/run directory is already created by base-files.

Signed-off-by: Jonathan Liu <net147@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2013-07-08 10:35:57 +02:00
Marcin Juszkiewicz
567963f9fe openldap: do not link to ICU
Signed-off-by: Marcin Juszkiewicz <marcin.juszkiewicz@linaro.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2013-04-22 19:00:55 +02:00
Marcin Juszkiewicz
6cbd81ed18 openldap: do not strip during install
Before:
WARNING: File '/usr/lib/openldap/slapd' from openldap was already stripped, this will prevent future debugging!
WARNING: File '/usr/bin/ldapsearch' from openldap was already stripped, this will prevent future debugging!
WARNING: File '/usr/bin/ldapmodify' from openldap was already stripped, this will prevent future debugging!
WARNING: File '/usr/bin/ldapdelete' from openldap was already stripped, this will prevent future debugging!
WARNING: File '/usr/bin/ldapmodrdn' from openldap was already stripped, this will prevent future debugging!
WARNING: File '/usr/bin/ldappasswd' from openldap was already stripped, this will prevent future debugging!
WARNING: File '/usr/bin/ldapwhoami' from openldap was already stripped, this will prevent future debugging!
WARNING: File '/usr/bin/ldapcompare' from openldap was already stripped, this will prevent future debugging!
WARNING: File '/usr/bin/ldapexop' from openldap was already stripped, this will prevent future debugging!
WARNING: File '/usr/bin/ldapurl' from openldap was already stripped, this will prevent future debugging!

Signed-off-by: Marcin Juszkiewicz <marcin.juszkiewicz@linaro.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2013-03-21 22:05:44 +01:00
Martin Jansa
c796bdbf84 openldap: fix QA warnings
* openldap-2.4.23: openldap: Files/directories were installed but not shipped
    /var/volatile
    /var/volatile/run

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2013-01-25 13:11:46 +01:00
Paul Eggleton
3a30c56238 Replace bb.data.* with d.*
Used sed expression given here:

http://lists.linuxtogo.org/pipermail/openembedded-core/2011-November/012373.html

Plus an additional expression for .expand. Full expression is:

sed \
-e 's:bb.data.\(setVar([^,]*,[^,]*\), \([^ )]*\) *):\2.\1):g' \
-e 's:bb.data.\(setVarFlag([^,]*,[^,]*,[^,]*\), \([^) ]*\) *):\2.\1):g' \
-e 's:bb.data.\(getVar([^,]*\), \([^, ]*\) *,\([^)]*\)):\2.\1,\3):g' \
-e 's:bb.data.\(getVarFlag([^,]*,[^,]*\), \([^, ]*\) *,\([^)]*\)):\2.\1,\3):g' \
-e 's:bb.data.\(getVarFlag([^,]*,[^,]*\), \([^) ]*\) *):\2.\1):g' \
-e 's:bb.data.\(getVar([^,]*\), \([^) ]*\) *):\2.\1):g' \
-e 's:bb.data.\(expand([^,]*\), \([^ )]*\) *):\2.\1):g' \
-i `grep -ril bb.data *`

Some minor correction in systemd.bbclass was needed for some expressions
that didn't quite match the regex in the desired way; additionally a few
instances were manually changed.

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
2012-10-28 14:32:06 +00:00
Martin Jansa
8402b7ac0f PACKAGES_DYNAMIC: use regexp not glob
* bitbake uses PACKAGES_DYNAMIC as regexp
  ^ could make matching faster (and it will be more clear that we're expecting regexp not glob)
  * made all those last '-' optional, use .* (or nothing)
* use += instead of = in most cases to keep ${PN}-locale from
  bitbake.conf:PACKAGES_DYNAMIC = "^${PN}-locale-.*"

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2012-10-19 11:42:13 +02:00
Martin Jansa
4339668ff2 fbreader, fltk, gpm, iksemel, joe, links, ode, openldap, opensync, xchat: import from meta-smartphone
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2012-07-31 00:14:55 +02:00