# # Copyright (C) 2006-2015 OpenWrt.org # # This is free software, licensed under the GNU General Public License v2. # See /LICENSE for more information. # include $(TOPDIR)/rules.mk PKG_NAME:=openldap PKG_VERSION:=2.4.48 PKG_RELEASE:=1 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tgz PKG_SOURCE_URL:=https://gpl.savoirfairelinux.net/pub/mirrors/openldap/openldap-release/ \ http://mirror.eu.oneandone.net/software/openldap/openldap-release/ \ http://mirror.switch.ch/ftp/software/mirror/OpenLDAP/openldap-release/ \ https://www.openldap.org/software/download/OpenLDAP/openldap-release/ PKG_HASH:=d9523ffcab5cd14b709fcf3cb4d04e8bc76bb8970113255f372bc74954c6074d PKG_LICENSE:=OLDAP-2.8 PKG_LICENSE_FILES:=LICENSE PKG_CPE_ID:=cpe:/a:openldap:openldap PKG_FIXUP:=autoreconf PKG_CONFIG_DEPENDS := \ CONFIG_OPENLDAP_DEBUG \ CONFIG_OPENLDAP_CRYPT \ CONFIG_OPENLDAP_MONITOR \ CONFIG_OPENLDAP_DB47 \ CONFIG_OPENLDAP_ICU include $(INCLUDE_DIR)/package.mk define Package/libopenldap/Default SECTION:=net CATEGORY:=Network SUBMENU:=OpenLDAP TITLE:=LDAP directory suite URL:=http://www.openldap.org/ MAINTAINER:=W. Michael Petullo endef define Package/libopenldap $(call Package/libopenldap/Default) MENU:=1 DEPENDS:=+libopenssl +libsasl2 +libpthread +OPENLDAP_DB47:libdb47 +OPENLDAP_ICU:icu TITLE+= (libraries) endef define Package/libopenldap/config config OPENLDAP_DEBUG bool "Enable debugging information" default y help Enable debugging information. This option must be enabled for the loglevel directive to work. config OPENLDAP_CRYPT bool "Crypt(3) passwords support" default n help With crypt(3) password storage scheme enabled, OpenLDAP can receive and store SHA-256 and SHA-512 password hashes from Samba AD-DC. If this option is disabled, synchronization of passwords between Samba AD-DC (v4.5 and above) and OpenLDAP requires use of cleartext passwords. To enable crypt(3) password synchronization functionality: 1. Re-include crypt(3) support in OpenWRT by enabling 'Include crypt() support for SHA256, SHA512 and Blowfish ciphers' option in "Advanced configuration options (for developers)" -> "Toolchain Options". 2. Provision AD-DC with 'password hash userPassword schemes' option. For more information, see smb.conf manpage for details on 'password hash userPassword schemes'. 3. Use a script to synchronize passwords from AD-DC to OpenLDAP. See samba-tool manpage for 'user syncpasswords'. config OPENLDAP_MONITOR bool "Enable monitor backend" default n help Enable monitor backend to obtain information about the running status of the daemon. See OpenLDAP documentation for more information. config OPENLDAP_DB47 bool "Berkeley DB support" default n help Enable Berkeley DB support (BDB). config OPENLDAP_ICU bool "ICU support" default n help Enable ICU (International Components for Unicode) support. endef define Package/libopenldap/description OpenLDAP Software is an open source implementation of the Lightweight Directory Access Protocol (LDAP). This package contains the shared LDAP client libraries, needed by other programs. endef define Package/libopenldap/conffiles /etc/openldap/ldap.conf endef define Package/openldap-utils $(call Package/libopenldap/Default) DEPENDS:=+libopenldap TITLE+= (utilities) endef define Package/openldap-utils/description This package contains client programs required to access LDAP servers. endef define Package/openldap-server $(call Package/libopenldap/Default) DEPENDS:=+libopenldap +libuuid TITLE+= (server) endef define Package/openldap-server/description This package contains server programs required to provide LDAP services. endef define Package/openldap-server/conffiles /etc/openldap/slapd.conf /etc/init.d/ldap endef TARGET_CFLAGS += $(FPIC) -lpthread \ -DURANDOM_DEVICE=\\\"/dev/urandom\\\" CONFIGURE_ARGS += \ --enable-shared \ --enable-static \ --enable-dynamic \ --enable-syslog \ --with-cyrus-sasl \ --with-threads \ --with-tls \ --with-yielding_select="yes" \ --enable-null \ --disable-relay ifdef CONFIG_OPENLDAP_CRYPT CONFIGURE_ARGS+= --enable-crypt else CONFIGURE_ARGS+= --disable-crypt endif ifdef CONFIG_OPENLDAP_MONITOR CONFIGURE_ARGS+= --enable-monitor else CONFIGURE_ARGS+= --disable-monitor endif ifdef CONFIG_OPENLDAP_DEBUG CONFIGURE_ARGS+= --enable-debug else CONFIGURE_ARGS+= --disable-debug endif ifdef CONFIG_OPENLDAP_DB47 CONFIGURE_ARGS+= \ --enable-bdb \ --enable-hdb else CONFIGURE_ARGS+= \ --disable-bdb \ --disable-hdb endif ifndef CONFIG_OPENLDAP_ICU CONFIGURE_VARS += \ ol_cv_lib_icu="no" endif define Build/Compile $(MAKE) -C $(PKG_BUILD_DIR) \ DESTDIR="$(PKG_INSTALL_DIR)" \ HOSTCC="$(HOSTCC)" \ depend all install cd $(PKG_BUILD_DIR)/libraries/liblmdb && $(MAKE) $(CONFIGURE_VARS) endef define Build/InstallDev $(INSTALL_DIR) $(1)/usr/include $(1)/usr/lib $(CP) $(PKG_INSTALL_DIR)/usr/include/{lber,ldap}*.h $(1)/usr/include/ $(CP) $(PKG_INSTALL_DIR)/usr/lib/lib{lber,ldap}*.{a,so*} $(1)/usr/lib/ endef define Package/libopenldap/install $(INSTALL_DIR) $(1)/etc/openldap $(1)/usr/lib $(CP) $(PKG_INSTALL_DIR)/etc/openldap/ldap.conf $(1)/etc/openldap/ $(CP) $(PKG_INSTALL_DIR)/usr/lib/lib{lber,ldap}*.so.* $(1)/usr/lib/ endef define Package/openldap-utils/install $(INSTALL_DIR) $(1)/usr/bin $(CP) $(PKG_INSTALL_DIR)/usr/bin/ldap* $(1)/usr/bin/ endef define Package/openldap-server/install $(INSTALL_DIR) $(1)/etc/init.d $(INSTALL_BIN) ./files/ldap.init $(1)/etc/init.d/ldap $(INSTALL_DIR) $(1)/etc/openldap/schema $(INSTALL_DATA) $(PKG_INSTALL_DIR)/etc/openldap/schema/* $(1)/etc/openldap/schema/ $(INSTALL_CONF) $(PKG_INSTALL_DIR)/etc/openldap/slapd.conf $(1)/etc/openldap/ $(INSTALL_DIR) $(1)/usr/sbin # NB: OpenLDAP installs slapd into libexecdir, not sbindir $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/slapd $(1)/usr/sbin/ $(eval SLAPTOOLS := slapadd slapcat slapdn slapindex slappasswd slaptest slapauth slapacl slapschema) for i in $(SLAPTOOLS); do \ $(LN) ./slapd $(1)/usr/sbin/$$$$i; \ done endef $(eval $(call BuildPackage,libopenldap)) $(eval $(call BuildPackage,openldap-utils)) $(eval $(call BuildPackage,openldap-server))