Commit Graph

83 Commits

Author SHA1 Message Date
Wang Mingyu b089df410f openldap: upgrade 2.6.12 -> 2.6.13
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:08:54 -07:00
Wang Mingyu 6c54894209 openldap: upgrade 2.6.10 -> 2.6.12
License-Update: Copyright year updated to 2026

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-06 10:06:23 -08:00
Wang Mingyu 43b891e96b openldap: upgrade 2.6.9 -> 2.6.10
Changelog:
=============
- Added slapd microsecond timestamp format for local logging
- Fixed libldap ldap_result behavior with LDAP_MSG_RECEIVED
- Fixed lloadd handling of starttls critical
- Fixed slapd syncrepl when used with slapo-rwm
- Fixed slapd regression with certain searches
- Fixed slapo-autoca olcAutoCAserverClass object
- Fixed slapo-pcache caching behaviors

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:24:11 -07:00
Ethan Roderick 0bd728bfd9 openldap: make license match spdx identifier
The OpenLDAP license is versioned. As such, listing the license as
simply "OpenLDAP" does not convey a complete picture of what license the
component is actually using.

Update the LICENSE variable to use the SPDX identifier for OpenLDAP
licenses, with the appropriate version number, "OLDAP-2.8".

Rename the license file for the OpenLDAP license to "OLDAP-2.8" from
"OpenLDAP".

Signed-off-by: Ethan Roderick <Ethan.Roderick@digi.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-04 20:25:51 -08:00
Yi Zhao 1768156191 openldap: upgrade 2.6.8 -> 2.6.9
ChangeLog:
https://www.openldap.org/software/release/changes.html

Drop 0001-fix-incompatible-pointer-type-error.patch as the issue has
been fixed upstream.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-01 19:02:18 -08:00
Martin Jansa 772e3c8746 recipes: ignore various issues fatal with gcc-14 (for 32bit MACHINEs)
Recipes included here are
openldap microsoft-gsl scsirastools pam-ssh-agent-auth sblim-sfcb ckermit nvme-cli xfstests

* these are reproducible only with 32bit MACHINEs and probably related
  to time64.inc
  http://errors.yoctoproject.org/Errors/Build/183154/

* and microsoft-gsl only with 32bit arm MACHINEs:
  http://errors.yoctoproject.org/Errors/Build/183157/

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-08 08:40:43 -07:00
Wang Mingyu 611a50bc38 openldap: fix lib32-openldap build failure with gcc-14
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-27 15:38:37 -07:00
Wang Mingyu f4954ecd87 openldap: upgrade 2.6.7 -> 2.6.8
Changelog:
===========
- Fixed libldap exit handling with OpenSSL3 again (ITS#9952)
- Fixed libldap OpenSSL channel binding digest (ITS#10216)
- Fixed slapd handling of large uid/gids peercred auth (ITS#10211)
- Fixed slapd-asyncmeta/meta target structure allocations (ITS#10197)
- Fixed slapd-meta with dynlist (ITS#10164)
- Fixed slapd-meta binds when proxying internal op (ITS#10165)
- Added slapo-nestgroup overlay (ITS#10161)
- Added slapo-memberof 'addcheck' option (ITS#10167)
- Fixed slapo-accesslog startup initialization (ITS#10170)
- Fixed slapo-constraint double free on invalid attr (ITS#10204)
- Fixed slapo-dynlist with abandoned operations (ITS#10044)
- Fixed build with gcc14.x (ITS#10166)
- Fixed back-perl with clang15 (ITS#10177)
- Fixed to reduce systemd dependencies (ITS#10214)
- Added slapo-alias contrib module (ITS#10104, ITS#10182)
- Fixed slapo-autogroup to work with slapo-dynlist (ITS#10185)
- Fixed smbk5pwd implicit function declaration (ITS#10206)
- Fixed slapo-memberof exattr requirements (ITS#7400)
- Fixed slapo-memberof is no longer deprecated (ITS#7400)

License-Update: Copyright year updated to 2024.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-27 15:38:36 -07:00
Khem Raj ffc64e9c6f recipes: Start WORKDIR -> UNPACKDIR transition
Replace references of WORKDIR with UNPACKDIR where it makes sense to do
so in preparation for changing the default value of UNPACKDIR.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-23 08:44:44 -07:00
Yi Zhao 4992816e4f openldap: upgrade 2.5.16 -> 2.6.7
ChangLog:
https://www.openldap.org/software/release/changes.html

* Drop PACKAGECONFIG[ndb] as it has been removed upstream[1][2].

[1] https://bugs.openldap.org/show_bug.cgi?id=9635
[2] https://git.openldap.org/openldap/openldap/-/commit/c6b43dcdc5d5ee60307564a64c276e5ad74af9c2

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-03-01 16:37:55 -08:00
Armin Kuster 7a423279cf openldap: update to 2.5.16.
2.5.x is an LTS version per the project.
Drop patch now included.

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-09-22 07:34:47 -07:00
Andrej Valek 8af2f17a6f cve_check: convert CVE_CHECK_IGNORE to CVE_STATUS
- Try to add convert and apply statuses for old CVEs
- Drop some obsolete ignores, while they are not relevant for current
  version

Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-07-27 08:54:40 -07:00
Jiaqing Zhao 8ae057a2e6 openldap: Upgrade 2.5.12 -> 2.5.13
Signed-off-by: Jiaqing Zhao <jiaqing.zhao@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-10 10:19:33 -07:00
Khem Raj 9cb965e75c openldap: Fix configure check for pthread_detach
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-09-07 16:44:53 -07:00
Yi Zhao 783c130976 openldap: pass correct URANDOM_DEVICE to CPPFLAGS
We encountered a runtime error with slappasswd:
$ slappasswd -s foo
Password generation failed for scheme {SSHA}:

This is because the URANDOM_DEVICE is not passed to CPPFLAGS correctly,
then the program can not open /dev/urandom.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-06-30 13:39:27 -04:00
Jiaqing Zhao b2261dbb95 openldap: Remove unnecessary use-urandom.patch
use-urandom.patch sets URANDOM_DEVICE to /dev/urandom when cross
compiling, but the same value is also defined in the recipe's compile
flags. This patch removes that unnecessary patch and resolves the
redefinition warning.

Signed-off-by: Jiaqing Zhao <jiaqing.zhao@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-05-24 08:39:45 -07:00
Jiaqing Zhao 6c2bd3c0fa openldap: Upgrade 2.5.9 -> 2.5.12
License-Update: Copyright year updated to 2022
Signed-off-by: Jiaqing Zhao <jiaqing.zhao@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-05-04 21:28:21 -07:00
Jiaqing Zhao a5512ab272 openldap: Remove libgcrypt dependency
Since OpenLDAP 2.5.0, it uses nettle instead of gcrypt.

Signed-off-by: Jiaqing Zhao <jiaqing.zhao@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-05-04 21:28:21 -07:00
Stefan Herbrechtsmeier 33db887513 openldap: correct slapd systemd service support
Signed-off-by: Stefan Herbrechtsmeier <stefan.herbrechtsmeier@weidmueller.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-03-29 08:33:41 -07:00
Khem Raj cf0ed42391 openldap: Use renamed variable CVE_CHECK_IGNORE
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-02-24 08:53:09 -08:00
Matsunaga-Shinji e70794af7c openldap: add CVE-2015-3276 to allowlist
CVE-2015-3276 has no target code.

Signed-off-by: Matsunaga-Shinji <shin.matsunaga@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-02-24 08:37:28 -08:00
Martin Jansa 856902b8c0 Fix DeprecationWarning about regexps
* fixes:
meta-oe/meta-networking/recipes-support/strongswan/strongswan_5.9.4.bb:125: DeprecationWarning: invalid escape sequence \.
meta-oe/meta-networking/recipes-support/strongswan/strongswan_5.9.4.bb:126: DeprecationWarning: invalid escape sequence \.
meta-oe/meta-networking/recipes-support/strongswan/strongswan_5.9.4.bb:128: DeprecationWarning: invalid escape sequence \.
meta-oe/meta-networking/recipes-support/strongswan/strongswan_5.9.4.bb:129: DeprecationWarning: invalid escape sequence \.
meta-oe/meta-networking/recipes-support/strongswan/strongswan_5.9.4.bb:130: DeprecationWarning: invalid escape sequence \.
meta-oe/meta-oe/recipes-graphics/ttf-fonts/ttf-mplus_027.bb:18: DeprecationWarning: invalid escape sequence \.
meta-oe/meta-oe/recipes-multimedia/libcdio/libcdio-paranoia_10.2+2.0.1.bb:21: DeprecationWarning: invalid escape sequence \.
meta-oe/meta-oe/recipes-multimedia/libcdio/libcdio_2.1.0.bb:28: DeprecationWarning: invalid escape sequence \.
oe-core/meta/classes/package.bbclass:1342: DeprecationWarning: invalid escape sequence \.
oe-core/meta/classes/package.bbclass:1343: DeprecationWarning: invalid escape sequence \-
oe-core/meta/classes/package.bbclass:1343: DeprecationWarning: invalid escape sequence \.
oe-core/meta/classes/package.bbclass:1344: DeprecationWarning: invalid escape sequence \.
oe-core/meta/classes/package.bbclass:1345: DeprecationWarning: invalid escape sequence \.
oe-core/meta/classes/package.bbclass:1348: DeprecationWarning: invalid escape sequence \.
oe-core/meta/classes/package.bbclass:1350: DeprecationWarning: invalid escape sequence \.
oe-core/meta/classes/package.bbclass:1353: DeprecationWarning: invalid escape sequence \.
oe-core/meta/classes/package.bbclass:1355: DeprecationWarning: invalid escape sequence \.
oe-core/meta/classes/package.bbclass:1358: DeprecationWarning: invalid escape sequence \.
oe-core/meta/classes/package.bbclass:1360: DeprecationWarning: invalid escape sequence \.
oe-core/meta/classes/package.bbclass:1365: DeprecationWarning: invalid escape sequence \.

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-02-21 18:12:04 -08:00
Khem Raj f0484dae3a openldap: Fix build with musl
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-02-07 16:36:08 -08:00
Yi Zhao 5dd27b4a9f openldap: ignore the mkdir errors in Makefile
Ignore the mkdir errors to fix the parallel build failure:

../../build/shtool mkdir -p TOPDIR/tmp-glibc/work/cortexa15t2hf-neon-wrs-linux-gnueabi/openldap/2.5.9-r0/image/usr/lib
mkdir: cannot create directory 'TOPDIR/tmp-glibc/work/cortexa15t2hf-neon-wrs-linux-gnueabi/openldap/2.5.9-r0/image/usr/lib': File exists
make[1]: *** [Makefile:288: install-local] Error 1

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-18 09:01:51 -08:00
Yi Zhao 1fd5ca10a2 openldap: fix strip issue with new patch
The patch install-strip.patch tries to fix the [already-stripped] QA
error with an outdated install-sh script which causes a parallel
installation failure:

  ../../build/shtool mkdir -p TOPDIR/tmp-glibc/work/core2-32-wrs-linux/openldap/2.5.9-r0/image/usr/lib
  STRIPPROG="" ../../i686-wrs-linux-libtool --mode=install ../../contrib/ldapc++/install-sh -c  -m 644 liblber.la TOPDIR/tmp-glibc/work/core2-32-wrs-linux/openldap/2.5.9-r0/image/usr/lib
  mkdir: cannot create directory 'TOPDIR/tmp-glibc/work/core2-32-wrs-linux/openldap/2.5.9-r0/image/usr/lib': File exists

With the new version of openldap, we can fix the strip issue by
unsetting STRIP_OPTS.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-12-09 08:37:06 -08:00
Yi Zhao a920266b9c openldap: upgrade 2.5.8 -> 2.5.9
OpenLDAP 2.5.9 Release (2021/10/25)
  Fixed slapo-accesslog to initialize minCSN on import of 2.4 databases (ITS#9720)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-12-09 08:37:06 -08:00
Yi Zhao d9a6d3ea3c openldap: fix parallel build failure
Add slapd-common.o as dependency for ldif-filter to fix the parallel
build failure:
  ld: cannot find slapd-common.o: No such file or directory

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-12-02 07:52:17 -08:00
Salman Ahmed 18abd104d3 openldap: upgrade 2.4.58 -> 2.5.8
- dropped retired backends (bdb, hdb, shell)
- back-monitor is now built as part of slapd
- added asyncmeta and wt backends
- dropped patches for functionalities which don't
  exist anymore

Signed-off-by: Salman Ahmed <salman.ahmed@weidmueller.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-11-23 08:35:08 -08:00
Martin Jansa c61dc077bb Convert to new override syntax
This is the result of automated script (0.9.1) conversion:

oe-core/scripts/contrib/convert-overrides.py .

converting the metadata to use ":" as the override character instead of "_".

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2021-08-03 10:21:25 -07:00
Changqing Li 95b72d4474 openldap: upgrade 2.4.57 -> 2.4.58
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-22 21:21:57 -07:00
Khem Raj 1fe7e6bdd0 openldap: Refresh patches to remove fuzz
Fixes [patch-fuzz] QA errors

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-22 09:15:15 -08:00
Khem Raj 6f3bc88294 openldap: Fix build with autoconf 2.70+
New autoconf is stricter about aux files therefore bring them from
libtool native as they can not go missing anymore

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-08 10:17:23 -08:00
zhengruoqin 0282b8ce6a openldap: upgrade 2.4.56 -> 2.4.57
-License-Update: Copyright year updated to 2021.

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-22 10:36:33 -08:00
zangrc 768345053e openldap: upgrade 2.4.51 -> 2.4.56
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-23 07:09:34 -08:00
Zang Ruochen 70860d99bf openldap: upgrade 2.4.50 -> 2.4.51
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-21 16:35:25 -07:00
Konrad Weihmann 6898858492 openldap: packaging fixes
in FILES_${PN}-slurpd:
- ${localstatedir}/volatile/run is already covered by FILES_${PN}-slapd
- ${localstatedir}/run is already covered by FILES_${PN}-slapd
in FILES_${PN}-dev:
- ${libdir}/*.a is already covered by FILES_${PN}-staticdev

remove the settings as they were without effect anyway

Signed-off-by: Konrad Weihmann <kweihmann@outlook.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-07-06 07:28:04 -07:00
Wang Mingyu 8398669b9d openldap: upgrade 2.4.49 -> 2.4.50
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-05-21 15:07:44 -07:00
Zang Ruochen 4e9f1a2338 openldap: upgrade 2.4.48 -> 2.4.49
-License-Update: Copyright year updated to 2020.

-openldap/kill-icu.patch
Removed since this is included in 2.4.49.

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-21 08:50:36 -08:00
Zang Ruochen c5372155f2 openldap: upgrade 2.4.47 -> 2.4.48
-License-Update: Copyright year updated to 2019.

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-02 18:04:41 -07:00
Qi.Chen@windriver.com ceae1458d1 openldap: add missing CVE tag to patch
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-04-06 08:22:22 -07:00
Changqing Li 678320933c openldap: upgrade 2.4.46 -> 2.4.47
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-02-22 18:14:52 -08:00
Mingli Yu 12e66e89e3 openldap: improve reproducibility
Rework remove-user-host-pwd-from-version.patch to
fix below buildpath warning:
| WARNING: openldap-2.4.46-r0 do_package_qa: QA Issue: File /work/core2-64-wrs-linux/openldap/2.4.46-r0/packages-split/openldap-bin/usr/bin/ldappasswd in package contained reference to tmpdir [buildpaths]

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-23 17:47:51 -08:00
douglas.royds 18efa5fa25 openldap: Reproducibility: Remove user, hostname, pwd from version string
This updated patch also sets the date and time strings to the SOURCE_DATE_EPOCH.
The WHOWHERE string will now be set to simply "openldap"
in the case that a SOURCE_DATE_EPOCH is set.

Upstream-Status: Submitted [https://www.openldap.org/its/index.cgi/Incoming?id=8928]
Signed-off-by: Douglas Royds <douglas.royds@taitradio.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-26 05:51:11 -07:00
douglas.royds ed5c1c1996 openldap: Reproducibility: Remove user, hostname, pwd from version string
Upstream-Status: Pending
Signed-off-by: Douglas Royds <douglas.royds@taitradio.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-09 19:08:25 -07:00
changqing.li@windriver.com 2731baf1ea openldap: upgrade 2.4.45 -> 2.4.46
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-03 17:42:25 -07:00
Qi Hou aaf496df4c openldap: fix QA Warning
While building openldap, there was a warning, like below:

WARNING: QA Issue: openldap: Files/directories were installed but not shipped in any package:
  /usr/libexec
Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
openldap: 1 installed and not shipped files. [installed-vs-shipped]

This is because that after openldap all contents of /usr/libexec are split
into subsets or moved into other directory and no one makes use of it.

So, to fix this QA warning, delete /usr/libexec.

Signed-off-by: Qi Hou <qi.hou@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-12-22 19:43:54 -08:00
Ioan-Adrian Ratiu 9d06ee2622 openldap: fix native LDFLAGS build error
LDFLAGS += "-pthread" adds the flag both for native and target builds,
however the openldap-native build overwrites the variable inside
native.bbclass causing "undefined reference to `pthread_getspecific'"
and other linker errors.

Change the append to happen after parsing by using the override
syntax and thus make sure it executes after native.bbclass (bitbake -e
reports pre-expansion value "${BUILD_LDFLAGS} -pthread").

Signed-off-by: Ioan-Adrian Ratiu <adrian.ratiu@ni.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:06:05 +02:00
Huang Qiyu b0ccd810d7 openldap: 2.4.44 -> 2.4.45
1) Upgrade openldap from 2.4.44 to 2.4.45
2) Delete openldap-CVE-2017-9287.patch, since it is integrated upstream.
3) License checksum changed, since the copyright years were updated.

Signed-off-by: Huang Qiyu <huangqy.fnst@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-13 13:19:02 +02:00
fan.xin 990b2ecf2c openldap: Fix CVE-2017-9287
servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is
prone to a double free vulnerability. A user with access to
search the directory can crash slapd by issuing a search including the
Paged Results control with a page size of 0.

Patch reference:
http://www.openldap.org/its/?findid=8655

Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-06-14 14:51:15 +02:00
Peter Kjellerstedt 0c31f55bcf Make use of the new bb.utils.filter() function
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-03-07 13:30:26 +01:00