[Pkg-openldap-devel] Bug#714174: slapd: is the empty folder /var/lib/slapd still needed?

Luca Capello luca at pca.it
Wed Jun 26 15:00:42 UTC 2013


Package: slapd
Version: 2.4.31-1+nmu2
Severity: minor
User: contact at itopie.ch
Usertags: debian-packaging

Hi there,

while installing a new OpenLDAP server, I discovered that slapd ships
both /var/lib/ldap/ and /var/lib/slapd/, despite the latter is empty
(even after OpenLDAP has been configured) and it does not seem to be
used in any control files.

I thus looked into files in /usr/share/doc/slapd/:

1) changelog.Debian.gz contains the following references

--8<---------------cut here---------------start------------->8---
openldap2.3 (2.4.7-1) unstable; urgency=low
[...]
  * Remove postrm code to delete /var/lib/slapd/upgrade* flag files.  We
    haven't used those since the 2.1 upgrade.
[...]
 -- Steve Langasek <vorlon at debian.org>  Mon, 21 Jan 2008 04:58:24 -0800

[...]

openldap2 (2.1.26-1) unstable; urgency=low
[...]
    + debian/slapd.postrm: Remove flag files in /var/lib/slapd on purge.
[...]
 -- Torsten Landschoff <torsten at debian.org>  Mon, 23 Feb 2004 09:36:32 +0100

[...]

openldap2 (2.1.17-2) unstable; urgency=low
[...]
    + debian/slapd.postinst: Only add moduleload lines *once* on upgrade
      from 2.0.  Wrap the backup code with a check for
      /var/lib/slapd/upgrade_2.0, to guarantee idempotency.
      Closes: #190401.
[...]
 -- Torsten Landschoff <torsten at debian.org>  Sat, 19 Apr 2003 02:28:32 +0200
--8<---------------cut here---------------end--------------->8---

2) README.DB_CONFIG.gz mentions /var/lib/ldap/ only:

--8<---------------cut here---------------start------------->8---
For good performance using the BDB backend, a good DB_CONFIG file in the
database directory (usually /var/lib/ldap) is crucial. The following two
--8<---------------cut here---------------end--------------->8---

3) README.Debian.gz is even more explicit:

--8<---------------cut here---------------start------------->8---
Modifications Compared to Upstream

  Compared to stock OpenLDAP as shipped by the OpenLDAP project, the
  Debian packages make the following modifications.  If you see any
  problems caused by or related to these modifications, please report them
  via the Debian bug tracking system using reportbug, not to the OpenLDAP
  project.

  [...]

  * Several paths have been adjusted to fit Debian file permissions and
    for Filesystem Hierarchy Standard compliance, namely:
    - The ldapi socket is in /var/run/slapd
    - The slapi error log has been moved to /var/log/slapi-errors
    - The slapd database location is /var/lib/ldap
--8<---------------cut here---------------end--------------->8---

Given the behavior and reasons above, should not /var/lib/slapd/ be
completely removed?  Or am I missing something?

Thx, bye,
Gismo / Luca

-- System Information:
Debian Release: 7.0
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages slapd depends on:
ii  adduser                     3.113+nmu3
ii  coreutils                   8.13-3.5
ii  debconf [debconf-2.0]       1.5.49
ii  libc6                       2.13-38
ii  libdb5.1                    5.1.29-5
ii  libgcrypt11                 1.5.0-5
ii  libgnutls26                 2.12.20-7
ii  libldap-2.4-2               2.4.31-1+nmu2
ii  libltdl7                    2.4.2-1.1
ii  libodbc1                    2.2.14p2-5
ii  libperl5.14                 5.14.2-21
ii  libsasl2-2                  2.1.25.dfsg1-6
ii  libslp1                     1.2.1-9
ii  libwrap0                    7.6.q-24
ii  lsb-base                    4.1+Debian8
ii  multiarch-support           2.13-38
ii  perl [libmime-base64-perl]  5.14.2-21
ii  psmisc                      22.19-1+deb7u1

Versions of packages slapd recommends:
ii  libsasl2-modules  2.1.25.dfsg1-6

Versions of packages slapd suggests:
ii  ldap-utils  2.4.31-1+nmu2

-- debconf information:
* slapd/allow_ldap_v2: false
  slapd/password_mismatch:
  slapd/invalid_config: true
* shared/organization: itopie
  slapd/upgrade_slapcat_failure:
* slapd/no_configuration: false
* slapd/move_old_database: true
  slapd/dump_database_destdir: /var/backups/slapd-VERSION
* slapd/purge_database: true
* slapd/domain: itopie.ch
* slapd/backend: HDB
  slapd/dump_database: when needed
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 835 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-openldap-devel/attachments/20130626/b4ffc8c9/attachment.sig>


More information about the Pkg-openldap-devel mailing list