[Git][openldap-team/openldap][experimental] 23 commits: WIP switch to openssl

[Michael Tokarev (@mjt)]

Michael Tokarev pushed to branch experimental at Debian OpenLDAP Maintainers / openldap


Commits:
f0b82a6d by Ryan Tandy at 2025-01-04T10:28:35-08:00
WIP switch to openssl

- - - - -
daf33807 by Michael Tokarev at 2025-01-07T13:39:04+03:00
d/control: remove very old (before buster) versioned depends/conflicts/replaces

dpkg-dev (>= 1.17.14) -- buster has 1.19; dpkg-dev is build-essential
heimdal-multidev (>= 7.4.0.dfsg.1-1~) -- buster has 7.5
libperl-dev (>= 5.8.0) -- buster has 5.28 (!)
  perl:any (>> 5.8.0) | libmime-base64-perl - ditto
debconf (>= 0.5) | debconf-2.0 -- buster has debconf 1.5
coreutils (>= 4.5.1-1) - buster has 8.30; coreutils is essential
umich-ldap* - last seen in 2009
libltdl3 (= 1.5.4-1) (libtool) - was before etch (in 2005)
openldap, openldap-utils - has been renamed to ldap, ldap-utils in 2005
libldap-2.4-2 (<< 2.4.44+dfsg-1) - buster has 2.4.47
bind-dev - last seen in 2009

- - - - -
0818b1d9 by Michael Tokarev at 2025-01-07T13:39:04+03:00
d/libldap2.README.Debian: remove: umounting /usr is not very interesting in 2025 (#182536)

This README talks about possible issues to umount /usr while
libldap2 (nss-ldap) is in use.  With merged-usr, it makes no sense.
See also #182536.

- - - - -
79d501c8 by Michael Tokarev at 2025-01-07T13:39:04+03:00
remove ldiftopasswd script

it is a strange idea to create /etc/passwd /etc/shadow et al
from ldap, overridding current contents.  The script was in
/usr/share/slapd/ldiftopasswd, in slapd package, - the package
choice is rather strange too (since if you installed slapd,
you can run secondary directory server already).

Remove this one.  Also drop dependency on perl.

- - - - -
4f814a8c by Michael Tokarev at 2025-01-07T13:39:04+03:00
d/slapd.scripts-common,d/debian/slapd.postinst: do not create /var/run/slapd (created in the startup script)

- - - - -
1d2b7edd by Michael Tokarev at 2025-01-07T13:39:04+03:00
d/slapd.init: stop providing /var/run/slapd/ldapi symlink for compatibility with openldap 2.1

- - - - -
cdbe2526 by Michael Tokarev at 2025-01-07T13:39:04+03:00
d/slapd.init: simplify

- simplify numerous shell constructs
- simplify sed expressions to get the pid file
- allow to have no pid file specified in the config file
- use exit code of start-stop-daemon instead of lack of output
  as an indicator of success/failure, remove trapping of set -e
- simplify messages and command lines

- - - - -
a16ce4b2 by Michael Tokarev at 2025-01-07T13:39:04+03:00
d/configure-options: enable systemd support (#1039299 #877512)

slapd uses a tiny built-in systemd notify mechanism,
so no libsystemd-dev dependency is needed.

Provide debian/slapd.service, do not ship upstream one.

d/slapd-remain-after-exit.conf: remove, not needed anymore

when installing things, omit installing systemd units

- - - - -
2d8d3216 by Michael Tokarev at 2025-01-07T13:39:04+03:00
d/slapd.default, d/slapd.init: do not use "export" keyword in the default file (so it is processed by systemd), but export KRB5_KTNAME in init if set

- - - - -
1513eed1 by Michael Tokarev at 2025-01-07T13:39:04+03:00
d/rules: fix $? usage in clean target

- - - - -
7507b383 by Michael Tokarev at 2025-01-07T13:39:04+03:00
d/rules: stop overriding dh_missing --fail-missing: it is the default in dh-compat 13+

- - - - -
1972bfc3 by Michael Tokarev at 2025-01-07T19:47:27+03:00
d/rules: only do actual work in arch-dependent build

for arch-all libldap-common package, we only need ldap.conf.5
manpage, - there's no need to build everything for it.  Split
dh_auto_build &Co overrides into -arch and -indep parts.

It is possible to reduce arch-indep work further (and drop arch-indep
build deps), but the manpages uses substitutions which would be done
manually in this case:
  RELEASEDATE (ol_release_date from build/version.var)
  LDVERSION (DEB_VERSION, see debian/patches/debian-version)
  ETCDIR (/etc)
This change already makes use of internal way upstream is using to
generate the manpages (using .tmp suffix), but adding even more internal
stuff (even for these 3 vars) seems too much.

- - - - -
fd000d80 by Michael Tokarev at 2025-01-07T19:47:27+03:00
d/control: add myself to Uploaders

- - - - -
2c4e25fd by Michael Tokarev at 2025-01-07T19:47:27+03:00
d/rules: add -Wno-unused-const-variable to CFLAGS

many openldap sources has static const char copyright[] = ".."
and the like, all of which are being reported by the compiler.

- - - - -
01deaa76 by Michael Tokarev at 2025-01-07T19:47:27+03:00
d/rules: add LC_ALL=C for the build rule

makes build reproducible (fixes order of shell *.o etc)

- - - - -
271bbe69 by Michael Tokarev at 2025-01-07T19:47:27+03:00
d/rules: add slapdS.c to blhc ignore-line

- - - - -
68f265df by Michael Tokarev at 2025-01-07T19:47:27+03:00
d/libldap-dev.links: stop generating it, dh is pretty much capable to expand variables now

- - - - -
9079aeb8 by Michael Tokarev at 2025-01-07T19:47:27+03:00
d/rules: fix override_dh_makeshlibs & override_dh_installdeb conditionals

debhelper isn't smart enough to expand make conditionals,
it is especially mentioned in its documentation.

- - - - -
2e9ff4c0 by Michael Tokarev at 2025-01-07T19:47:27+03:00
d/slapd.preinst: remove stopping of slapd (#989155 in debhelper has been fixed)

- - - - -
2a63e50f by Michael Tokarev at 2025-01-07T19:47:27+03:00
d/rules: build flags & build tools

move DEB_*_MAINT_* defines up
use future=+lfs maint option for LFS, instead of -D_FILE_OFFSET_BITS
include buildtools.mk to get (cross) build tools (not just CC)
tell dpkg to export build tools
remove explicit export of (cross) CC

- - - - -
22e7e1a3 by Michael Tokarev at 2025-01-07T19:54:14+03:00
d/rules: simplify noslapd build-profile expressions by using noslapd variable

- - - - -
f2a28bc3 by Michael Tokarev at 2025-01-07T19:54:14+03:00
d/rules: export DEB_MAINTAINER only once

small optimization: export DEB_MAINTAINER only once, do
not set it again if it is already present in the environment.

- - - - -
08b58e02 by Michael Tokarev at 2025-01-08T21:02:51+03:00
update changelog; upload version 2.6.9+dfsg-1~exp2 to experimental

- - - - -


23 changed files:

- debian/changelog
- − debian/clean
- debian/configure.options
- debian/control
- − debian/ldiftopasswd
- debian/libldap-common.install
- debian/libldap-dev.links.in → debian/libldap-dev.links
- − debian/libldap2.README.Debian
- debian/not-installed
- − debian/patches/add-tlscacert-option-to-ldap-conf
- debian/patches/contrib-makefiles
- − debian/patches/ldap-conf-tls-cacertdir
- debian/patches/series
- debian/rules
- − debian/slapd-remain-after-exit.conf
- debian/slapd.README.Debian
- debian/slapd.default
- debian/slapd.init
- debian/slapd.install
- debian/slapd.postinst
- debian/slapd.preinst
- debian/slapd.scripts-common
- + debian/slapd.service


View it on GitLab: https://salsa.debian.org/openldap-team/openldap/-/compare/2adebdf0bb1b0746fc22d06f1602fbde1c418b67...08b58e021433a06b6651349ebae8594845c83aa1

-- 
View it on GitLab: https://salsa.debian.org/openldap-team/openldap/-/compare/2adebdf0bb1b0746fc22d06f1602fbde1c418b67...08b58e021433a06b6651349ebae8594845c83aa1
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-openldap-devel/attachments/20250108/883ce882/attachment-0001.htm>