Important notes for all OpenLDAP users: I've split the databases/openldap package in -client and -server component packages (plus an additional -doc package containing to openldap admin guide), and made the original openldap package a meta-pkg depending on the three new packages. Additionally, I've made slapd and slurpd (from openldap-server) run as non-root. slapd runs as slapd:ldap and slurpd as slurpd:ldap (configurable). They need to run as the same group because slurpd must be able to read the replication log written by slapd. Please be sure to read the openldap-server/MESSAGE file for instructions on how to set the proper permissions on your existing database. People who were already running slapd and/or slurpd as non-root should review their rc.conf settings as well, as the slapd -u <user> argument is now in the rc.d script, and slurpd is invoked via su. Furthermore I've converted all LDAP-based applications in pkgsrc to depend on databases/openldap-client, and bumped those who depend on it by default. Packages using OpenLDAP libraries should now .include ../../databases/openldap-client/buildlink3.mk. (I'll modify the examples in the docs in a minute). Please let me know if you encounter any problems, esp. any root->nonroot migration problems. Geert
Attachment:
pgp92Qeq4mSF4.pgp
Description: PGP signature