network/openldap-server: Added (OpenLDAP server).

Signed-off-by: David Spencer <idlemoor@slackbuilds.org>

8 files changed, 553 insertions, 0 deletions

diff --git a/network/openldap-server/README b/network/openldap-server/README
new file mode 100644
index 0000000000000..6a31d75bf86d4
--- /dev/null
+++ b/network/openldap-server/README
@@ -0,0 +1,22 @@
+OpenLDAP Server
+
+OpenLDAP is an open source implementation of the Lightweight Directory
+Access Protocol.
+
+The suite includes:
+
+  * slapd - stand-alone LDAP daemon (server)
+  * libraries implementing the LDAP protocol
+  * utilities, tools, and sample clients.
+
+
+Groupname and Username
+
+You must have the 'ldap' group and user to run this script,
+for example:
+
+  groupadd -g 330 ldap
+  useradd -u 330 -d /var/lib/openldap -s /bin/false -c "OpenLDAP server" -g ldap ldap
+
+
+For more information see README.SLACKWARE
diff --git a/network/openldap-server/README.SLACKWARE b/network/openldap-server/README.SLACKWARE
new file mode 100644
index 0000000000000..ea245662b6ec8
--- /dev/null
+++ b/network/openldap-server/README.SLACKWARE
@@ -0,0 +1,103 @@
+# Initial Setup
+
+Set the directory suffix and Manager user in your slapd.conf(5):
+
+  [...]
+  suffix  "dc=example,dc=org"
+  rootdn  "cn=Manager,dc=example,dc=org"
+  rootpw  {SSHA}CjQ2ddDHu92qd2BrcNYT1hQDzLrVlgCo  # Encryted password using slappasswd(8)
+  [...]
+
+Create the DB_CONFIG file to initialize the database:
+
+  # cd /var/lib/openldap
+  # cp -a DB_CONFIG.example DB_CONFIG
+
+
+
+# Logging
+
+Add this to your /etc/syslog.conf file, and then restart syslogd,
+to enable the slapd log file:
+
+  local4.*  -/var/log/slapd
+
+
+
+# Configuration
+
+All configuration and schemas are stored in /etc/openlap
+
+  slapd.conf   legacy OpenLDAP configuration file (see slapd.conf(5))
+  slapd.ldif   OpenLDAP configuration file (see slapd-config(5))
+  ldap.conf    ldap client (eg. ldapsearch) configuration file (see ldap.conf(5))
+  certs/       directory can contains server certificates
+  schema/      OpenLDAP schema
+
+The default OpenLDAP database is located in /var/lib/openldap
+
+*NOTE* OpenLDAP 2.3 and later supports old slapd.conf(5) and dynamic
+       configuration engine, slapd-config(5).
+
+
+
+# Using the slapd.d directory
+
+An existing slapd.conf(5) file can be converted to the new format using
+slaptest(8):
+
+  # sh /etc/rc.d/rc.openldap stop
+  # mkdir -p /etc/openldap/slapd.d
+  # slaptest -f /etc/openldap/slapd.conf -F /etc/openldap/slapd.d
+  # chown ldap:ldap /etc/openldap/slapd.d
+
+
+
+# Starting and Stopping the OpenLDAP server
+
+This package provides the /etc/rc.d/rc.openldap start/stop script.
+
+Slackware is OpenLDAP server ready (see the rc.M script) and you can start
+the OpenLDAP server automatically at boot by adding execution permission to 
+/etc/rc.d/rc.openldap
+
+
+
+# Troubleshooting
+
+## Can't contact LDAP server via ldapi:/// url
+
+  $ ldapadd  -Y EXTERNAL -H ldapi:/// -f /tmp/test.ldif 
+  ldap_sasl_interactive_bind_s: Can't contact LDAP server (-1)
+
+openldap-server package use the same libraries from n/openldap-client Slackware 
+package. The openldap-client package use a non-standard location for ldapi socket.
+
+### Solution 1
+
+Create a symlink from /var/run/openldap/ldapi to /var/lib/run/ldapi
+
+  # mkdir -p /var/lib/run
+  # ln -sf /var/run/openldap/ldapi /var/lib/run/ldapi
+
+### Solution 2
+
+Change or add the URI in ldap.conf(5) file:
+
+  URI   ldapi://%2fvar%2frun%2fopenldap%2fldapi
+
+Run the ldap utility command without "-H" argument (example):
+
+  $ ldapadd  -Y EXTERNAL -f /tmp/test.ldif
+
+### Solution 3
+
+Use ldapi url with ldap utility command:
+
+  $ ldapadd  -Y EXTERNAL -H ldapi://%2fvar%2frun%2fopenldap%2fldapi -f /tmp/test.ldif
+
+
+
+# Documentation
+
+See /usr/doc/openldap-2.4.42/guide.html (OpenLDAP Administrator Guide)
diff --git a/network/openldap-server/doinst.sh b/network/openldap-server/doinst.sh
new file mode 100644
index 0000000000000..17bd5215de80b
--- /dev/null
+++ b/network/openldap-server/doinst.sh
@@ -0,0 +1,28 @@
+config() {
+  NEW="$1"
+  OLD="`dirname $NEW`/`basename $NEW .new`"
+  # If there's no config file by that name, mv it over:
+  if [ ! -r $OLD ]; then
+    mv $NEW $OLD
+  elif [ "`cat $OLD | md5sum`" = "`cat $NEW | md5sum`" ]; then # toss the redundant copy
+    rm $NEW
+  fi
+  # Otherwise, we leave the .new copy for the admin to consider...
+}
+
+preserve_perms() {
+  NEW="$1"
+  OLD="$(dirname $NEW)/$(basename $NEW .new)"
+  if [ -e $OLD ]; then
+    cp -a $OLD ${NEW}.incoming
+    cat $NEW > ${NEW}.incoming
+    mv ${NEW}.incoming $NEW
+  fi
+  config $NEW
+}
+
+preserve_perms etc/rc.d/rc.openldap.new
+
+config etc/openldap/slapd.conf.new
+config etc/openldap/slapd.ldif.new
+config etc/default/slapd.new
diff --git a/network/openldap-server/openldap-server.SlackBuild b/network/openldap-server/openldap-server.SlackBuild
new file mode 100644
index 0000000000000..663c238cf4933
--- /dev/null
+++ b/network/openldap-server/openldap-server.SlackBuild
@@ -0,0 +1,255 @@
+#!/bin/sh
+
+# Slackware build script for OpenLDAP server
+
+# Copyright 2015-2017 Giuseppe Di Terlizzi <giuseppe.diterlizzi@gmail.com>
+# All rights reserved.
+#
+# Redistribution and use of this script, with or without modification, is
+# permitted provided that the following conditions are met:
+#
+# 1. Redistributions of this script must retain the above copyright
+#    notice, this list of conditions and the following disclaimer.
+#
+#  THIS SOFTWARE IS PROVIDED BY THE AUTHOR "AS IS" AND ANY EXPRESS OR IMPLIED
+#  WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+#  MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.  IN NO
+#  EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+#  SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
+#  PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
+#  OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
+#  WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
+#  OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
+#  ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+PRGNAM=openldap-server
+VERSION=${VERSION:-2.4.42}
+BUILD=${BUILD:-1}
+TAG=${TAG:-_SBo}
+
+CWD=$(pwd)
+TMP=${TMP:-/tmp/SBo}
+PKG=$TMP/package-$PRGNAM
+OUTPUT=${OUTPUT:-/tmp}
+
+if [ -z "$ARCH" ]; then
+  case "$( uname -m )" in
+    i?86) export ARCH=i586 ;;
+    arm*) export ARCH=arm ;;
+       *) export ARCH=$( uname -m ) ;;
+  esac
+fi
+
+if [ "$ARCH" = "i586" ]; then
+  SLKCFLAGS="-O2 -march=i586 -mtune=i686"
+  LIBDIRSUFFIX=""
+elif [ "$ARCH" = "i686" ]; then
+  SLKCFLAGS="-O2 -march=i686 -mtune=i686"
+  LIBDIRSUFFIX=""
+elif [ "$ARCH" = "x86_64" ]; then
+  SLKCFLAGS="-O2 -fPIC"
+  LIBDIRSUFFIX="64"
+else
+  SLKCFLAGS="-O2"
+  LIBDIRSUFFIX=""
+fi
+
+set -e
+
+if ! grep ^ldap: /etc/group 2>&1 > /dev/null; then
+  echo "  You must have a ldap group to run this script."
+  echo "    # groupadd -r -g 330 ldap"
+  echo "  Or something similar."
+  exit 1
+elif ! grep ^ldap: /etc/passwd 2>&1 > /dev/null; then
+  echo "  You must have a ldap user to run this script."
+  echo "    # useradd -r -u 330 -g ldap -d /var/lib/openldap -s /bin/false -c \"OpenLDAP server\" ldap"
+  echo "  Or something similar."
+  exit 1
+fi
+
+rm -rf $PKG
+mkdir -p $TMP $PKG
+cd $TMP
+rm -rf openldap-$VERSION
+tar xvf $CWD/openldap-$VERSION.t*z*
+cd openldap-$VERSION
+chown -R root:root .
+find -L . \
+ \( -perm 777 -o -perm 775 -o -perm 750 -o -perm 711 -o -perm 555 \
+  -o -perm 511 \) -exec chmod 755 {} \; -o \
+ \( -perm 666 -o -perm 664 -o -perm 640 -o -perm 600 -o -perm 444 \
+  -o -perm 440 -o -perm 400 \) -exec chmod 644 {} \;
+
+
+# Change the location of run directory into /var/run/openldap
+sed -i -e 's|%LOCALSTATEDIR%/run/|/var/run/openldap/|' \
+  servers/slapd/slapd.*
+
+# Change the location of ldapi socket into /var/run/openldap
+sed -i -e 's|\(#define LDAPI_SOCK\).*|\1 "/var/run/openldap/ldapi"|' \
+  include/ldap_defaults.h
+
+# Change the default OpenLDAP database directory
+sed -i -e 's|openldap-data|lib/openldap|' \
+  servers/slapd/slapd.* include/ldap_defaults.h servers/slapd/Makefile.in
+
+
+CFLAGS="$SLKCFLAGS" \
+./configure \
+  --prefix=/usr \
+  --exec-prefix=/usr \
+  --sysconfdir=/etc \
+  --mandir=/usr/man \
+  --localstatedir=/var \
+  --libdir=/usr/lib${LIBDIRSUFFIX} \
+  \
+  --enable-debug \
+  --enable-dynamic \
+  --enable-syslog \
+  --enable-proctitle \
+  --enable-ipv6 \
+  --enable-local \
+  \
+  --enable-slapd \
+  --enable-dynacl \
+  --enable-aci \
+  --enable-cleartext \
+  --enable-crypt \
+  --enable-lmpasswd \
+  --enable-spasswd \
+  --enable-modules \
+  --enable-rewrite \
+  --enable-rlookups \
+  --enable-slapi \
+  --disable-slp \
+  --enable-wrappers \
+  \
+  --enable-backends=mod \
+  --enable-bdb=yes \
+  --enable-hdb=yes \
+  --enable-mdb=yes \
+  --enable-monitor=yes \
+  --enable-perl=yes \
+  --disable-ndb \
+  \
+  --enable-overlays=mod \
+  \
+  --disable-static \
+  --enable-shared \
+  \
+  --with-cyrus-sasl \
+  --without-fetch \
+  --with-threads \
+  --with-pic \
+  --with-tls
+
+make depend
+
+# Build only slapd server. The libraries and header files are present in
+# Slackware n/openldap-client package
+
+( cd libraries
+  make
+)
+
+( cd servers
+  make -j1
+  make -j1 install DESTDIR=$PKG
+)
+
+( cd doc
+  make
+  make install DESTDIR=$PKG
+)
+
+rm -f $PKG/etc/openldap/*.default
+
+# Copy default slapd configuration
+mv $PKG/etc/openldap/slapd.conf $PKG/etc/openldap/slapd.conf.new
+mv $PKG/etc/openldap/slapd.ldif $PKG/etc/openldap/slapd.ldif.new
+
+# Create a symlink for slapd into /usr/sbin
+mkdir -p $PKG/usr/sbin
+( cd $PKG/usr/sbin ; ln -sf ../libexec/slapd slapd )
+
+# Create OpenLDAP run directory
+mkdir -p $PKG/var/run/openldap
+
+# Fix ldapi socket location for n/openldap-client package
+mkdir -p $PKG/var/lib/run
+( cd $PKG/var/lib/run; ln -sf ../../run/openldap/ldapi ldapi )
+
+# Create OpenLDAP certificates directory
+mkdir -p $PKG/etc/openldap/certs
+
+# Copy rc.openldap
+mkdir -p $PKG/etc/rc.d
+cat $CWD/rc.openldap > $PKG/etc/rc.d/rc.openldap.new
+
+# Copy slapd default file
+mkdir -p $PKG/etc/default
+cat $CWD/slapd > $PKG/etc/default/slapd.new
+
+mkdir -p $PKG/usr/doc/$PRGNAM-$VERSION
+cat $CWD/$PRGNAM.SlackBuild > $PKG/usr/doc/$PRGNAM-$VERSION/$PRGNAM.SlackBuild
+cat $CWD/README.SLACKWARE > $PKG/usr/doc/$PRGNAM-$VERSION/README.SLACKWARE
+
+cp -a \
+  ANNOUNCEMENT COPYRIGHT LICENSE README CHANGES \
+  $PKG/usr/doc/$PRGNAM-$VERSION
+
+# Include monitor backend README
+cp -a \
+  servers/slapd/back-monitor/README \
+  $PKG/usr/doc/$PRGNAM-$VERSION/README.back-monitor
+
+# Include Perl backend README
+cp -a \
+  servers/slapd/back-perl/README \
+  $PKG/usr/doc/$PRGNAM-$VERSION/README.back-perl
+
+# Include Perl backend sample file
+cp -a \
+  servers/slapd/back-perl/SampleLDAP.pm \
+  $PKG/usr/doc/$PRGNAM-$VERSION
+
+# Include OpenLDAP documentation
+cp -a \
+  doc/guide/admin/*.png \
+  doc/guide/admin/*.html \
+  $PKG/usr/doc/$PRGNAM-$VERSION
+
+# Fix permissions
+chmod 755 $PKG/usr/lib${LIBDIRSUFFIX}/*.so.*
+chmod 700 $PKG/var/lib/openldap
+chmod 755 $PKG/usr/libexec/openldap
+
+# Fix ownership
+chown -R ldap:ldap $PKG/var/lib/openldap
+chown -R ldap:ldap $PKG/var/run/openldap
+chown -R ldap:ldap $PKG/etc/openldap
+
+# Remove OpenLDAP client man pages
+rm -rf $PKG/usr/man/man1
+rm -rf $PKG/usr/man/man3
+rm -rf $PKG/usr/man/man5/{ldap,ldif}.*
+
+find $PKG/usr/man -type f -exec gzip -9 {} \;
+for i in $( find $PKG/usr/man -type l ) ; do ln -s $( readlink $i ).gz $i.gz ; rm $i ; done
+
+find $PKG -print0 | xargs -0 file | grep -e "executable" -e "shared object" | grep ELF \
+  | cut -f 1 -d : | xargs strip --strip-unneeded 2> /dev/null || true
+
+# Create an empty slapd log file
+mkdir -p $PKG/var/log
+touch $PKG/var/log/slapd
+chown ldap:ldap $PKG/var/log/slapd
+
+
+mkdir $PKG/install
+cat $CWD/slack-desc > $PKG/install/slack-desc
+cat $CWD/doinst.sh > $PKG/install/doinst.sh
+
+cd $PKG
+makepkg -l y -c n $OUTPUT/$PRGNAM-$VERSION-$ARCH-$BUILD$TAG.${PKGTYPE:-tgz}
diff --git a/network/openldap-server/openldap-server.info b/network/openldap-server/openldap-server.info
new file mode 100644
index 0000000000000..c2602f06afd55
--- /dev/null
+++ b/network/openldap-server/openldap-server.info
@@ -0,0 +1,10 @@
+PRGNAM="openldap-server"
+VERSION="2.4.42"
+HOMEPAGE="http://www.openldap.org"
+DOWNLOAD="http://www.openldap.org/software/download/OpenLDAP/openldap-release/openldap-2.4.42.tgz"
+MD5SUM="47c8e2f283647a6105b8b0325257e922"
+DOWNLOAD_x86_64=""
+MD5SUM_x86_64=""
+REQUIRES=""
+MAINTAINER="Giuseppe Di Terlizzi"
+EMAIL="giuseppe.diterlizzi@gmail.com"
diff --git a/network/openldap-server/rc.openldap b/network/openldap-server/rc.openldap
new file mode 100644
index 0000000000000..0e64c219fc040
--- /dev/null
+++ b/network/openldap-server/rc.openldap
@@ -0,0 +1,100 @@
+#!/bin/sh
+
+# OpenLDAP Server start/stop script
+
+
+. /etc/default/slapd
+
+PID_FILE=/var/run/openldap/slapd.pid
+EXEC=/usr/sbin/slapd
+
+
+# re-create /var/run/openldap directory
+if [ ! -d /var/run/openldap ]; then
+  mkdir -p /var/run/openldap
+  chown ldap:ldap /var/run/openldap
+fi
+
+
+slapd_start() {
+
+  echo -n "Starting OpenLDAP server..."
+
+  if [ -e $PID_FILE ]; then
+
+    if ps axc | grep slapd >/dev/null 2>&1 ; then
+      echo "already running!"
+      return 1
+    else
+      rm $PID_FILE
+    fi
+
+  fi
+
+  $EXEC -u ldap -h "$SLAPD_URLS" $SLAPD_OPTIONS > /dev/null 2>&1
+  echo "done!"
+
+}
+
+
+slapd_stop() {
+
+  echo -n "Stopping OpenLDAP server..."
+
+  if [ -e $PID_FILE ]; then
+    if ps axc | grep slapd >/dev/null 2>&1; then
+      kill -INT $(cat $PID_FILE)
+    else
+      echo "already stopped!"
+    fi
+  fi
+
+  rm $PID_FILE >/dev/null 2>&1
+  echo "done!"
+
+}
+
+
+slapd_restart() {
+  slapd_stop
+  sleep 1
+  slapd_start
+}
+
+
+slapd_status() {
+
+  if [ -e $PID_FILE ]; then
+    if ps axc | grep slapd >/dev/null 2>&1; then
+      echo "OpenLDAP is running!"
+      return 0
+    fi
+
+    echo "OpenLDAP PID file exists but the service is down!"
+    return 1
+
+  else
+    echo "OpenLDAP is stopped!"
+    return 0
+  fi
+
+}
+
+
+case "$1" in
+  'start')
+    slapd_start
+    ;;
+  'stop')
+    slapd_stop
+    ;;
+  'restart')
+    slapd_restart
+    ;;
+  'status')
+    slapd_status
+    ;;
+  *)
+    echo "usage $0 start|stop|restart"
+esac
+
diff --git a/network/openldap-server/slack-desc b/network/openldap-server/slack-desc
new file mode 100644
index 0000000000000..92bf98bc926b3
--- /dev/null
+++ b/network/openldap-server/slack-desc
@@ -0,0 +1,19 @@
+# HOW TO EDIT THIS FILE:
+# The "handy ruler" below makes it easier to edit a package description.
+# Line up the first '|' above the ':' following the base package name, and
+# the '|' on the right side marks the last column you can put a character in.
+# You must make exactly 11 lines for the formatting to be correct.  It's also
+# customary to leave one space after the ':' except on otherwise blank lines.
+
+               |-----handy-ruler------------------------------------------------------|
+openldap-server: openldap-server (OpenLDAP server)
+openldap-server:
+openldap-server: OpenLDAP is an open source implementation of the Lightweight
+openldap-server: Directory Access Protocol.  LDAP is a alternative to the X.500
+openldap-server: Directory Access Protocol (DAP). It uses the TCP/IP stack versus
+openldap-server: the overly complex OSI stack.
+openldap-server:
+openldap-server: LDAP is often used to provide authentication (such as for email).
+openldap-server:
+openldap-server: The OpenLDAP homepage is http://www.openldap.org/
+openldap-server:
diff --git a/network/openldap-server/slapd b/network/openldap-server/slapd
new file mode 100644
index 0000000000000..afbbfb55fc88d
--- /dev/null
+++ b/network/openldap-server/slapd
@@ -0,0 +1,16 @@
+# OpenLDAP server configuration
+# see 'man slapd' for additional information
+
+# Where the server will run (-h option)
+# - ldapi:/// is required for on-the-fly configuration using client tools
+#   (use SASL with EXTERNAL mechanism for authentication)
+# - default: ldapi:/// ldap:///
+# - example: ldapi:/// ldap://127.0.0.1/ ldap://10.0.0.1:1389/ ldaps:///
+SLAPD_URLS="ldapi:/// ldap:///"
+
+# Any custom options
+#SLAPD_OPTIONS=""
+
+# Keytab location for GSSAPI Kerberos authentication
+#KRB5_KTNAME="FILE:/etc/openldap/ldap.keytab"
+