net/openldap26-server: OpenLDAP 2.6.0

25 files changed, 1657 insertions, 0 deletions

diff --git a/Mk/bsd.ldap.mk b/Mk/bsd.ldap.mk
index a6f37dd99b10..fda99e5c0273 100644
--- a/Mk/bsd.ldap.mk
+++ b/Mk/bsd.ldap.mk
@@ -33,6 +33,7 @@ DEFAULT_OPENLDAP_VER?=	24
 # OpenLDAP client versions currently supported
 OPENLDAP24_LIB=		libldap-2.4.so.2
 OPENLDAP25_LIB=		libldap-2.5.so.0
+OPENLDAP26_LIB=		libldap-2.6.so.0
 
 .if exists(${LOCALBASE}/bin/ldapwhoami)
 _OPENLDAP_VER!=	${LOCALBASE}/bin/ldapwhoami -VV 2>&1 | ${GREP} ldapwhoami | ${SED} -E 's/.*OpenLDAP: ldapwhoami (2)\.([0-9]).*/\1\2/'
diff --git a/net/Makefile b/net/Makefile
index 544e2769c331..c99fdf916c76 100644
--- a/net/Makefile
+++ b/net/Makefile
@@ -550,6 +550,8 @@
     SUBDIR += openldap24-server
     SUBDIR += openldap25-client
     SUBDIR += openldap25-server
+    SUBDIR += openldap26-client
+    SUBDIR += openldap26-server
     SUBDIR += openmdns
     SUBDIR += openmpi
     SUBDIR += openmpi3
diff --git a/net/openldap26-client/Makefile b/net/openldap26-client/Makefile
new file mode 100644
index 000000000000..b3d237883d5e
--- /dev/null
+++ b/net/openldap26-client/Makefile
@@ -0,0 +1,7 @@
+# Created by: Xin LI <delphij@FreeBSD.org>
+
+CLIENT_ONLY=		yes
+
+MASTERDIR=		${.CURDIR}/../openldap26-server
+
+.include "${MASTERDIR}/Makefile"
diff --git a/net/openldap26-server/Makefile b/net/openldap26-server/Makefile
new file mode 100644
index 000000000000..f24683804df5
--- /dev/null
+++ b/net/openldap26-server/Makefile
@@ -0,0 +1,439 @@
+# Created by: Xin LI <delphij@FreeBSD.org>
+
+PORTNAME=		openldap
+DISTVERSION=		2.6.0
+PORTREVISION=		${OPENLDAP_PORTREVISION}
+CATEGORIES=		net databases
+MASTER_SITES=		https://www.openldap.org/software/download/OpenLDAP/%SUBDIR%/ \
+			http://gpl.savoirfairelinux.net/pub/mirrors/openldap/%SUBDIR%/ \
+			http://repository.linagora.org/OpenLDAP/%SUBDIR%/ \
+			http://mirror.eu.oneandone.net/software/openldap/%SUBDIR%/ \
+			ftp://ftp.ntua.gr/mirror/OpenLDAP/%SUBDIR%/ \
+			https://mirror-hk.koddos.net/OpenLDAP/%SUBDIR%/ \
+			ftp://ftp.dti.ad.jp/pub/net/OpenLDAP/%SUBDIR%/ \
+			https://mirror.koddos.net/OpenLDAP/%SUBDIR%/ \
+			https://mirror.lyrahosting.com/OpenLDAP/%SUBDIR%/ \
+			ftp://ftp.OpenLDAP.org/pub/OpenLDAP/%SUBDIR%/ \
+			http://www.openldap.org/software/download/OpenLDAP/%SUBDIR%/
+MASTER_SITE_SUBDIR=	openldap-release
+.if defined(CLIENT_ONLY)
+PKGNAMESUFFIX=		26-client
+.else
+PKGNAMESUFFIX=		26-server
+.endif
+
+MAINTAINER=		delphij@FreeBSD.org
+.if defined(CLIENT_ONLY)
+COMMENT=		Open source LDAP client implementation
+.else
+COMMENT=		Open source LDAP server implementation
+.endif
+
+LICENSE=		OPENLDAP
+LICENSE_NAME=		OpenLDAP Public License
+LICENSE_FILE=		${WRKSRC}/LICENSE
+LICENSE_PERMS=		dist-mirror dist-sell pkg-mirror pkg-sell auto-accept
+
+# :keepla because port uses lt_dlopen
+USES=			cpe gmake libtool:keepla localbase ssl tar:tgz
+
+.if defined(CLIENT_ONLY)
+CONFLICTS_INSTALL=	${PORTNAME}2[0-57-9]-client-* ${PORTNAME}-client-*
+.else
+CONFLICTS_INSTALL=	${PORTNAME}2[0-57-9]-server-* ${PORTNAME}-server-*
+.endif
+
+GNU_CONFIGURE=		yes
+
+PORTREVISION_CLIENT=	0
+PORTREVISION_SERVER=	0
+OPENLDAP_SHLIB_MAJOR=	2
+OPENLDAP_SHLIB_MINOR=	0.200
+
+OPTIONS_DEFINE=		DEBUG
+OPTIONS_DEFAULT+=	DEBUG
+
+.if defined(CLIENT_ONLY)
+OPTIONS_DEFINE+=	DOCS FETCH
+
+FETCH_BUILD_DEPENDS=	autoconf>0:devel/autoconf
+FETCH_CONFIGURE_WITH=	fetch
+.else
+OPTIONS_GROUP=		BKNDS OVLYS
+BKNDS_DESC=		OpenLDAP backends
+BKNDS_DEFAULTS=		ASYNCMETA DNSSRV MDB PASSWD RELAY SOCK
+OPTIONS_GROUP_BKNDS+=	${BKNDS_DEFAULTS}
+OPTIONS_GROUP_BKNDS+=	PERL SQL
+
+OVLYS_DESC=		OpenLDAP overlays
+OPTIONS_GROUP_OVLYS+=	ACCESSLOG
+OPTIONS_GROUP_OVLYS+=	ADDPARTIAL
+OPTIONS_GROUP_OVLYS+=	ALLOP
+OPTIONS_GROUP_OVLYS+=	AUTOCA
+OPTIONS_GROUP_OVLYS+=	AUDITLOG
+OPTIONS_GROUP_OVLYS+=	AUTOGROUP
+OPTIONS_GROUP_OVLYS+=	CLOAK
+OPTIONS_GROUP_OVLYS+=	COLLECT
+OPTIONS_GROUP_OVLYS+=	CONSTRAINT
+OPTIONS_GROUP_OVLYS+=	DDS
+OPTIONS_GROUP_OVLYS+=	DENYOP
+OPTIONS_GROUP_OVLYS+=	DEREF
+OPTIONS_GROUP_OVLYS+=	DYNGROUP
+OPTIONS_GROUP_OVLYS+=	DYNLIST
+OPTIONS_GROUP_OVLYS+=	HOMEDIR
+OPTIONS_GROUP_OVLYS+=	LASTBIND
+OPTIONS_GROUP_OVLYS+=	LASTMOD
+OPTIONS_GROUP_OVLYS+=	MEMBEROF
+OPTIONS_GROUP_OVLYS+=	NOPS
+OPTIONS_GROUP_OVLYS+=	OTP
+OPTIONS_GROUP_OVLYS+=	PROXYCACHE
+OPTIONS_GROUP_OVLYS+=	PPOLICY
+OPTIONS_GROUP_OVLYS+=	REFINT
+OPTIONS_GROUP_OVLYS+=	REMOTEAUTH
+OPTIONS_GROUP_OVLYS+=	RETCODE
+OPTIONS_GROUP_OVLYS+=	RWM
+OPTIONS_GROUP_OVLYS+=	SEQMOD
+OPTIONS_GROUP_OVLYS+=	SHA2
+OPTIONS_GROUP_OVLYS+=	SMBPWD
+OPTIONS_GROUP_OVLYS+=	SSSVLV
+OPTIONS_GROUP_OVLYS+=	SYNCPROV
+OPTIONS_GROUP_OVLYS+=	TRACE
+OPTIONS_GROUP_OVLYS+=	TRANSLUCENT
+OPTIONS_GROUP_OVLYS+=	UNIQUE
+OPTIONS_GROUP_OVLYS+=	VALSORT
+
+OPTIONS_DEFINE+=	DYNACL ACI
+OPTIONS_DEFINE+=	RLOOKUPS SLP SLAPI
+OPTIONS_DEFINE+=	PBKDF2
+OPTIONS_DEFINE+=	OUTLOOK
+OPTIONS_DEFINE+=	ARGON2
+OPTIONS_DEFINE+=	LLOADD
+
+OPTIONS_DEFAULT+=	${BKNDS_DEFAULTS}
+OPTIONS_DEFAULT+=	${OPTIONS_GROUP_OVLYS}
+OPTIONS_DEFAULT+=	ARGON2 LLOADD
+
+OPTIONS_SUB=		yes
+
+ACI_DESC=		Per-object ACI (experimental)
+ARGON2_DESC=		Argon2 password hashing module
+DYNACL_DESC=		Run-time loadable ACL (experimental)
+FETCH_DESC=		Enable fetch(3) support
+GSSAPI_DESC=		With GSSAPI support
+LLOADD_DESC=		Enable load balancer
+OUTLOOK_DESC=		Force caseIgnoreOrderingMatch on name attribute (experimental)
+RLOOKUPS_DESC=		With reverse lookups of client hostnames
+SLAPI_DESC=		With Netscape SLAPI plugin API (experimental)
+SLP_DESC=		With SLPv2 (RFC 2608) support
+
+ASYNCMETA_DESC=		With asynchronous metadirectory backend
+DNSSRV_DESC=		With Dnssrv backend
+MDB_DESC=		With Memory-Mapped DB backend
+SQL_DESC=		With SQL backend
+PASSWD_DESC=		With Passwd backend
+PERL_DESC=		With Perl backend
+RELAY_DESC=		With Relay backend
+SOCK_DESC=		With Sock backend
+
+ACCESSLOG_DESC=		With In-Directory Access Logging overlay
+AUDITLOG_DESC=		With Audit Logging overlay
+AUTOCA_DESC=		With Automatic Certificate Authority overlay
+COLLECT_DESC=		With Collect overy Services overlay
+CONSTRAINT_DESC=	With Attribute Constraint overlay
+DDS_DESC=		With Dynamic Directory Services overlay
+DEREF_DESC=		With Dereference overlay
+DYNGROUP_DESC=		With Dynamic Group overlay
+DYNLIST_DESC=		With Dynamic List overlay
+HOMEDIR_DESC=		With Home Directory Management overlay
+MEMBEROF_DESC=		With Reverse Group Membership overlay
+NOPS_DESC=		With nops overlay
+OTP_DESC=		With OTP 2-factor authentication overlay
+PPOLICY_DESC=		With Password Policy overlay
+PROXYCACHE_DESC=	With Proxy Cache overlay
+REFINT_DESC=		With Referential Integrity overlay
+REMOTEAUTH_DESC=	With Deferred Authentication overlay
+RETCODE_DESC=		With Return Code testing overlay
+RWM_DESC=		With Rewrite/Remap overlay
+SEQMOD_DESC=		With Sequential Modify overlay
+SSSVLV_DESC=		With ServerSideSort/VLV overlay
+SYNCPROV_DESC=		With Syncrepl Provider overlay
+TRANSLUCENT_DESC=	With Translucent Proxy overlay
+UNIQUE_DESC=		With attribute Uniqueness overlay
+VALSORT_DESC=		With Value Sorting overlay
+
+ADDPARTIAL_DESC=	With addpartial overlay (experimental)
+ALLOP_DESC=		With allop overlay (experimental)
+AUTOGROUP_DESC=		With autogroup overlay (experimental)
+CLOAK_DESC=		With cloak overlay (experimental)
+DENYOP_DESC=		With denyop overlay (experimental)
+LASTBIND_DESC=		With lastbind overlay
+LASTMOD_DESC=		With lastmod overlay (experimental)
+TRACE_DESC=		With Trace overlay
+
+PBKDF2_DESC=		With PBKDF2 hash password support
+SHA2_DESC=		With SHA2 Password hashes overlay
+SMBPWD_DESC=		With Samba Password hashes overlay
+
+ACCESSLOG_CONFIGURE_ENABLE=	accesslog=mod
+ACI_CONFIGURE_ENABLE=		aci
+ARGON2_CONFIGURE_ENABLE=	argon2
+ARGON2_CONFIGURE_WITH=		argon2=libsodium
+ARGON2_LIB_DEPENDS=		libsodium.so:security/libsodium
+ASYNCMETA_CONFIGURE_ENABLE=	asyncmeta=mod
+AUDITLOG_CONFIGURE_ENABLE=	auditlog=mod
+AUTOCA_CONFIGURE_ENABLE=	autoca=mod
+COLLECT_CONFIGURE_ENABLE=	collect=mod
+CONSTRAINT_CONFIGURE_ENABLE=	constraint=mod
+DDS_CONFIGURE_ENABLE=		dds=mod
+DEBUG_CONFIGURE_ENABLE=		debug
+DEREF_CONFIGURE_ENABLE=		deref=mod
+DNSSRV_CONFIGURE_ENABLE=	dnssrv=mod
+DYNACL_CONFIGURE_ENABLE=	dynacl
+DYNGROUP_CONFIGURE_ENABLE=	dyngroup=mod
+DYNLIST_CONFIGURE_ENABLE=	dynlist=mod
+HOMEDIR_CONFIGURE_ENABLE=	homedir=mod
+LLOADD_CONFIGURE_ENABLE=	balancer=mod
+LLOADD_LIB_DEPENDS=		libevent.so:devel/libevent
+MDB_CONFIGURE_ENABLE=		mdb=yes
+MEMBEROF_CONFIGURE_ENABLE=	memberof=mod
+OTP_CONFIGURE_ENABLE=		otp=mod
+PASSWD_CONFIGURE_ENABLE=	passwd=mod
+PERL_CONFIGURE_ENABLE=		perl=mod
+PERL_CONFIGURE_ENV=		PERLBIN="${PERL}"
+PERL_USES=			perl5
+PPOLICY_CONFIGURE_ENABLE=	ppolicy=mod
+PROXYCACHE_CONFIGURE_ENABLE=	proxycache=mod
+REFINT_CONFIGURE_ENABLE=	refint=mod
+RELAY_CONFIGURE_ENABLE=		relay=yes
+REMOTEAUTH_CONFIGURE_ENABLE=	remoteauth=mod
+RETCODE_CONFIGURE_ENABLE=	retcode=mod
+RLOOKUPS_CONFIGURE_ENABLE=	rlookups
+RWM_CONFIGURE_ENABLE=		rwm=mod
+SEQMOD_CONFIGURE_ENABLE=	seqmod=mod
+SLAPI_CONFIGURE_ENABLE=		slapi
+SLAPI_USE=			LDCONFIG
+SLP_CONFIGURE_ENABLE=		slp
+SLP_LIB_DEPENDS=		libslp.so:net/openslp
+SOCK_CONFIGURE_ENABLE=		sock=mod
+SQL_CONFIGURE_ENABLE=		sql=mod
+SQL_LDFLAGS=			-L${LOCALBASE}/lib
+SQL_LIB_DEPENDS=		libodbc.so:databases/unixODBC
+SSSVLV_CONFIGURE_ENABLE=	sssvlv=mod
+SYNCPROV_CONFIGURE_ENABLE=	syncprov=yes
+TRANSLUCENT_CONFIGURE_ENABLE=	translucent=mod
+UNIQUE_CONFIGURE_ENABLE=	unique=mod
+VALSORT_CONFIGURE_ENABLE=	valsort=mod
+
+# Force using caseIgnoreOrderingMatch on 'name' attribute.
+# This may be a violation of RFC 4519 2.18 definition.
+# See http://www.openldap.org/lists/openldap-technical/201211/msg00175.html
+OUTLOOK_EXTRA_PATCHES=		${FILESDIR}/extrapatch-outlook-servers__slapd__schema_prep.c
+.endif
+
+CONFIGURE_SED=		-e 's,uuid/uuid.h,xxuuid/uuid.h,g'
+
+.include <bsd.port.options.mk>
+
+.if defined(CLIENT_ONLY)
+OPENLDAP_PORTREVISION=	${PORTREVISION_CLIENT}
+OPENLDAP_PKGFILESUFX=	.client
+
+PORTDOCS=		CHANGES drafts rfc
+
+CONFIGURE_ARGS+=	--disable-slapd \
+			--disable-monitor \
+			--disable-relay \
+			--disable-syncprov
+USE_LDCONFIG=		yes
+.else
+OPENLDAP_PORTREVISION=	${PORTREVISION_SERVER}
+OPENLDAP_PKGFILESUFX=
+
+LIB_DEPENDS+=		libicudata.so:devel/icu \
+			libldap.so:net/openldap26-client \
+			libltdl.so:devel/libltdl
+
+SUB_LIST+=		RC_DIR=${PREFIX} \
+			LDAP_RUN_DIR=${LDAP_RUN_DIR} \
+			DATABASEDIR=${DATABASEDIR}
+
+USERS=			ldap
+GROUPS=			ldap
+LDAP_USER?=		ldap
+LDAP_GROUP?=		ldap
+USE_LDCONFIG=		${PREFIX}/libexec/openldap
+SUB_FILES+=		pkg-deinstall
+USE_RC_SUBR=		slapd
+
+EXTRA_PATCHES+=		${FILESDIR}/extrapatch-Makefile.in
+
+LDFLAGS+=		-L${LOCALBASE}/lib
+
+SED_MODULES=		-e 's,mandir = \$$(exec_prefix)/share/man,mandir = $$(exec_prefix)/man,' \
+			-e 's/\(moduleload[ 	]*back_[a-z]*\)\.la/\1/' \
+			-e 's/\# *\(modulepath\)/\1/'
+
+CONFIGURE_ARGS+=	--enable-modules \
+			--localstatedir=${LOCALSTATEDIR} \
+			--enable-crypt \
+			--enable-ldap=mod \
+			--enable-meta=mod \
+			--enable-null=mod
+.endif
+
+LDAP_RUN_DIR?=		/var/run/openldap
+LOCALSTATEDIR?=		/var/db
+DATABASEDIR?=		${LOCALSTATEDIR}/openldap-data
+BACKUPDIR?=		/var/backups/openldap
+
+DESCR=			${PKGDIR}/pkg-descr${OPENLDAP_PKGFILESUFX}
+PLIST=			${PKGDIR}/pkg-plist${OPENLDAP_PKGFILESUFX}
+
+SUB_FILES+=		pkg-message${OPENLDAP_PKGFILESUFX}
+PKGMESSAGE=		${WRKSRC}/pkg-message${OPENLDAP_PKGFILESUFX}
+
+SUB_LIST+=		LDAP_RUN_DIR=${LDAP_RUN_DIR} \
+			LDAP_USER=${LDAP_USER} \
+			LDAP_GROUP=${LDAP_GROUP} \
+			BACKUPDIR=${BACKUPDIR} \
+			DATABASEDIR=${DATABASEDIR} \
+			PORTNAME=${PORTNAME} \
+			PKGNAME=${PKGNAME} \
+			PKGNAMESUFFIX=${PKGNAMESUFFIX}
+
+CONFIGURE_ARGS+=	--with-threads=posix \
+			--with-tls=openssl \
+			--enable-dynamic
+
+LIB_DEPENDS+=		libsasl2.so:security/cyrus-sasl2
+CONFIGURE_ARGS+=	--with-cyrus-sasl --enable-spasswd
+MAKE_ENV+=		STRIP=${STRIP}
+
+CPPFLAGS+=		-I${LOCALBASE}/include
+LIBS+=			-L${LOCALBASE}/lib
+
+PLIST_SUB+=		${SUB_LIST}
+PLIST_SUB+=		SHLIB_MAJOR=${OPENLDAP_SHLIB_MAJOR}
+PLIST_SUB+=		SHLIB_MINOR=${OPENLDAP_SHLIB_MINOR}
+
+.if ${PORT_OPTIONS:MFETCH} && (defined(OPENSSL_INSTALLED) && ${OPENSSL_INSTALLED} != "" || ${SSL_DEFAULT} != base)
+BROKEN=	using OpenSSL from ports and OPTION FETCH together is not supported
+. endif
+
+.if ${PORT_OPTIONS:MADDPARTIAL}
+CONTRIB_MODULES+=	slapd-modules/addpartial
+CONTRIB_CLEANFILES+=	addpartial.a
+.endif
+.if ${PORT_OPTIONS:MALLOP}
+CONTRIB_MODULES+=	slapd-modules/allop
+CONTRIB_CLEANFILES+=	allop.a
+.endif
+.if ${PORT_OPTIONS:MAUTOGROUP}
+CONTRIB_MODULES+=	slapd-modules/autogroup
+CONTRIB_CLEANFILES+=	autogroup.a
+.endif
+.if ${PORT_OPTIONS:MCLOAK}
+CONTRIB_MODULES+=	slapd-modules/cloak
+CONTRIB_CLEANFILES+=	cloak.a
+.endif
+.if ${PORT_OPTIONS:MDENYOP}
+CONTRIB_MODULES+=	slapd-modules/denyop
+CONTRIB_CLEANFILES+=	denyop.a
+.endif
+.if ${PORT_OPTIONS:MLASTBIND}
+CONTRIB_MODULES+=	slapd-modules/lastbind
+CONTRIB_CLEANFILES+=	lastbind.a
+.endif
+.if ${PORT_OPTIONS:MLASTMOD}
+CONTRIB_MODULES+=	slapd-modules/lastmod
+CONTRIB_CLEANFILES+=	lastmod.a
+.endif
+.if ${PORT_OPTIONS:MNOPS}
+CONTRIB_MODULES+=	slapd-modules/nops
+CONTRIB_CLEANFILES+=	nops.a
+.endif
+.if ${PORT_OPTIONS:MTRACE}
+CONTRIB_MODULES+=	slapd-modules/trace
+CONTRIB_CLEANFILES+=	trace.a
+.endif
+.if ${PORT_OPTIONS:MSHA2}
+CONTRIB_MODULES+=	slapd-modules/passwd/sha2
+CONTRIB_CLEANFILES+=	pw-sha2.a
+.endif
+.if ${PORT_OPTIONS:MPBKDF2}
+CONTRIB_MODULES+=	slapd-modules/passwd/pbkdf2
+CONTRIB_CLEANFILES+=	pw-pbkdf2.a
+.endif
+.if ${PORT_OPTIONS:MSMBPWD}
+CONTRIB_MODULES+=	slapd-modules/smbk5pwd
+CONTRIB_CLEANFILES+=	smbk5pwd.a
+.endif
+
+post-patch:
+	@${REINPLACE_CMD} -e 's|%LOCALSTATEDIR%/run/|${LDAP_RUN_DIR}/|g' \
+		${SED_MODULES} ${WRKSRC}/servers/slapd/slapd.conf
+	@${REINPLACE_CMD} -e 's|^OPT =.*|OPT = ${CFLAGS}|g' \
+		-e 's|^CC =.*|CC = ${CC}|g' \
+		${SED_MODULES} ${WRKSRC}/contrib/slapd-modules/*/Makefile \
+		${WRKSRC}/contrib/slapd-modules/*/*/Makefile
+.if defined(CONFIGURE_SED)
+	@${REINPLACE_CMD} -E ${CONFIGURE_SED} \
+		${CONFIGURE_WRKSRC}/${CONFIGURE_SCRIPT}
+.endif
+
+pre-configure-FETCH-on:
+	@(cd ${WRKSRC} && ${LOCALBASE}/bin/autoconf)
+
+.if !defined(CLIENT_ONLY)
+test: build
+	@(cd ${BUILD_WRKSRC} && ${SETENV} ${MAKE_ENV} \
+		${MAKE_CMD} ${MAKE_FLAGS} ${MAKEFILE} ${MAKE_ARGS} test)
+
+post-build:
+.for module in ${CONTRIB_MODULES}
+	@(cd ${BUILD_WRKSRC}/contrib/${module} && \
+		${SETENV} ${MAKE_ENV} ${MAKE_CMD} ${MAKE_FLAGS} ${MAKEFILE} \
+		${MAKE_ARGS} prefix="${PREFIX}" all)
+.endfor
+.endif
+
+pre-install:
+.if !defined(CLIENT_ONLY)
+	${MKDIR} ${STAGEDIR}${DATABASEDIR}
+.endif
+
+post-install:
+.if defined(CLIENT_ONLY)
+	${MKDIR} ${STAGEDIR}${DOCSDIR}
+	${INSTALL_DATA} ${WRKSRC}/CHANGES ${STAGEDIR}${DOCSDIR}
+	for dir in drafts rfc; do \
+		${MKDIR} ${STAGEDIR}${DOCSDIR}/$${dir}; \
+		${INSTALL_DATA} ${WRKSRC}/doc/$${dir}/* ${STAGEDIR}${DOCSDIR}/$${dir}; \
+	done
+	for prog in ldapcompare ldapdelete ldapexop ldapmodify ldapmodrdn ldappasswd ldapsearch ldapurl ldapvc ldapwhoami; do\
+		${STRIP_CMD} ${STAGEDIR}${PREFIX}/bin/$${prog}; \
+	done
+	for library in lber ldap; do \
+		${STRIP_CMD} ${STAGEDIR}${PREFIX}/lib/lib$${library}.so.${OPENLDAP_SHLIB_MAJOR}; \
+	done
+.else
+	${MKDIR} ${STAGEDIR}${LDAP_RUN_DIR}
+.for module in ${CONTRIB_MODULES}
+	(cd ${WRKSRC}/contrib/${module} && \
+		${SETENV} ${MAKE_ENV} ${MAKE_CMD} ${MAKE_FLAGS} ${MAKEFILE} \
+		${MAKE_ARGS} prefix="${PREFIX}" install)
+.endfor
+.for cleanfile in ${CONTRIB_CLEANFILES}
+	${RM} ${STAGEDIR}${PREFIX}/libexec/openldap/${cleanfile}
+.endfor
+	${STRIP_CMD} ${STAGEDIR}${PREFIX}/libexec/openldap/*.so
+	${STRIP_CMD} ${STAGEDIR}${PREFIX}/libexec/slapd
+	${MKDIR} ${STAGEDIR}${PREFIX}/libexec/openldap
+.endif # defined(CLIENT_ONLY)
+
+post-install-SLAPI-on:
+	for library in slapi; do \
+		${STRIP_CMD} ${STAGEDIR}${PREFIX}/lib/lib$${library}.so.${OPENLDAP_SHLIB_MAJOR}; \
+	done
+
+.include <bsd.port.mk>
diff --git a/net/openldap26-server/distinfo b/net/openldap26-server/distinfo
new file mode 100644
index 000000000000..7b248d91931d
--- /dev/null
+++ b/net/openldap26-server/distinfo
@@ -0,0 +1,3 @@
+TIMESTAMP = 1636858185
+SHA256 (openldap-2.6.0.tgz) = b71c580eac573e9aba15d95f33dd4dd08f2ed4f0d7fc09e08ad4be7ed1e41a4f
+SIZE (openldap-2.6.0.tgz) = 6433764
diff --git a/net/openldap26-server/files/extrapatch-Makefile.in b/net/openldap26-server/files/extrapatch-Makefile.in
new file mode 100644
index 000000000000..b1de5e09f0db
--- /dev/null
+++ b/net/openldap26-server/files/extrapatch-Makefile.in
@@ -0,0 +1,17 @@
+--- Makefile.in.orig	Mon Apr  7 22:23:24 2003
++++ Makefile.in	Thu Jul 10 17:43:35 2003
+@@ -13,9 +13,11 @@
+ ## top-level directory of the distribution or, alternatively, at
+ ## <http://www.OpenLDAP.org/license.html>.
+ 
+-SUBDIRS= include libraries clients servers tests doc
+-CLEANDIRS=
+-INSTALLDIRS= 
++SUBDIRS=
++ALLDIRS= include libraries clients servers tests doc
++CLEANDIRS= include libraries clients servers tests doc
++DEPENDDIRS= include libraries clients servers tests doc
++INSTALLDIRS=  servers doc
+ 
+ makefiles:	FORCE
+ 	./config.status
diff --git a/net/openldap26-server/files/extrapatch-outlook-servers__slapd__schema_prep.c b/net/openldap26-server/files/extrapatch-outlook-servers__slapd__schema_prep.c
new file mode 100644
index 000000000000..508bc5be8202
--- /dev/null
+++ b/net/openldap26-server/files/extrapatch-outlook-servers__slapd__schema_prep.c
@@ -0,0 +1,15 @@
+#
+# This patch is obtained from:
+#
+# http://www.openldap.org/lists/openldap-technical/201212/msg00055.html
+#
+--- servers/slapd/schema_prep.c.orig	2014-09-18 18:48:49.000000000 -0700
++++ servers/slapd/schema_prep.c	2015-03-31 17:26:23.439844478 -0700
+@@ -908,6 +908,7 @@
+ 			"DESC 'RFC4519: common supertype of name attributes' "
+ 			"EQUALITY caseIgnoreMatch "
+ 			"SUBSTR caseIgnoreSubstringsMatch "
++			"ORDERING caseIgnoreOrderingMatch "
+ 			"SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{32768} )",
+ 		NULL, SLAP_AT_ABSTRACT,
+ 		NULL, NULL,
diff --git a/net/openldap26-server/files/patch-ITS7548 b/net/openldap26-server/files/patch-ITS7548
new file mode 100644
index 000000000000..edfd3cc80667
--- /dev/null
+++ b/net/openldap26-server/files/patch-ITS7548
@@ -0,0 +1,103 @@
+--- build/man.mk.orig	2021-07-27 17:44:47 UTC
++++ build/man.mk
+@@ -18,10 +18,12 @@
+ 
+ MANDIR=$(mandir)/man$(MANSECT)
+ TMP_SUFFIX=tmp
++ifeq ($(strip $(PAGES)),)
++PAGES=`cd $(srcdir); echo *.$(MANSECT)`
++endif
+ 
+ all-common:
+-	PAGES=`cd $(srcdir); echo *.$(MANSECT)`; \
+-	for page in $$PAGES; do \
++	for page in ${PAGES}; do \
+ 		$(SED) -e "s%LDVERSION%$(VERSION)%" \
+ 			-e 's%ETCDIR%$(sysconfdir)%g' \
+ 			-e 's%LOCALSTATEDIR%$(localstatedir)%' \
+@@ -39,8 +41,7 @@ all-common:
+ 
+ install-common:
+ 	-$(MKDIR) $(DESTDIR)$(MANDIR)
+-	PAGES=`cd $(srcdir); echo *.$(MANSECT)`; \
+-	for page in $$PAGES; do \
++	for page in ${PAGES}; do \
+ 		echo "installing $$page in $(DESTDIR)$(MANDIR)"; \
+ 		$(RM) $(DESTDIR)$(MANDIR)/$$page; \
+ 		$(INSTALL) $(INSTALLFLAGS) -m 644 $$page.$(TMP_SUFFIX) $(DESTDIR)$(MANDIR)/$$page; \
+--- doc/man/Makefile.in.orig	2021-07-27 17:44:47 UTC
++++ doc/man/Makefile.in
+@@ -13,4 +13,10 @@
+ ## top-level directory of the distribution or, alternatively, at
+ ## <http://www.OpenLDAP.org/license.html>.
+ 
+-SUBDIRS= man1 man3 man5 man8
++BUILD_SRV = @BUILD_SLAPD@
++
++ifeq (${BUILD_SRV},no)
++  SUBDIRS= man1 man3 man5
++else
++  SUBDIRS= man5 man8
++endif
+--- doc/man/man5/Makefile.in.orig	2021-07-27 17:44:47 UTC
++++ doc/man/man5/Makefile.in
+@@ -14,3 +14,59 @@
+ ## <http://www.OpenLDAP.org/license.html>.
+ 
+ MANSECT=5
++
++BUILD_SRV = @BUILD_SLAPD@
++
++ifeq (${BUILD_SRV},no)
++PAGES=	ldap.conf.${MANSECT}		\
++	ldif.${MANSECT}
++else
++PAGES=	lloadd.conf.${MANSECT}		\
++	slapd-asyncmeta.${MANSECT}	\
++	slapd-config.${MANSECT}		\
++	slapd-dnssrv.${MANSECT}		\
++	slapd-ldap.${MANSECT}		\
++	slapd-ldif.${MANSECT}		\
++	slapd-mdb.${MANSECT}		\
++	slapd-meta.${MANSECT}		\
++	slapd-monitor.${MANSECT}	\
++	slapd-ndb.${MANSECT}		\
++	slapd-null.${MANSECT}		\
++	slapd-passwd.${MANSECT}		\
++	slapd-perl.${MANSECT}		\
++	slapd-relay.${MANSECT}		\
++	slapd-sock.${MANSECT}		\
++	slapd-sql.${MANSECT}		\
++	slapd-wt.${MANSECT}		\
++	slapd.access.${MANSECT}		\
++	slapd.backends.${MANSECT}	\
++	slapd.conf.${MANSECT}		\
++	slapd.overlays.${MANSECT}	\
++	slapd.plugin.${MANSECT}		\
++	slapo-accesslog.${MANSECT}	\
++	slapo-auditlog.${MANSECT}	\
++	slapo-autoca.${MANSECT}		\
++	slapo-chain.${MANSECT}		\
++	slapo-collect.${MANSECT}	\
++	slapo-constraint.${MANSECT}	\
++	slapo-dds.${MANSECT}		\
++	slapo-deref.${MANSECT}		\
++	slapo-dyngroup.${MANSECT}	\
++	slapo-dynlist.${MANSECT}	\
++	slapo-homedir.${MANSECT}	\
++	slapo-memberof.${MANSECT}	\
++	slapo-otp.${MANSECT}		\
++	slapo-pbind.${MANSECT}		\
++	slapo-pcache.${MANSECT}		\
++	slapo-ppolicy.${MANSECT}	\
++	slapo-refint.${MANSECT}		\
++	slapo-remoteauth.${MANSECT}	\
++	slapo-retcode.${MANSECT}	\
++	slapo-rwm.${MANSECT}		\
++	slapo-sssvlv.${MANSECT}		\
++	slapo-syncprov.${MANSECT}	\
++	slapo-translucent.${MANSECT}	\
++	slapo-unique.${MANSECT}		\
++	slapo-valsort.${MANSECT}	\
++	slappw-argon2.${MANSECT}
++endif
diff --git a/net/openldap26-server/files/patch-build__top.mk b/net/openldap26-server/files/patch-build__top.mk
new file mode 100644
index 000000000000..7468883924a0
--- /dev/null
+++ b/net/openldap26-server/files/patch-build__top.mk
@@ -0,0 +1,11 @@
+--- build/top.mk.orig	2021-07-27 17:44:47 UTC
++++ build/top.mk
+@@ -60,8 +60,6 @@ INSTALL_PROGRAM = $(INSTALL)
+ INSTALL_DATA = $(INSTALL) -m 644
+ INSTALL_SCRIPT = $(INSTALL)
+ 
+-STRIP_OPTS = -s
+-
+ LINT = lint
+ 5LINT = 5lint
+ 
diff --git a/net/openldap26-server/files/patch-configure b/net/openldap26-server/files/patch-configure
new file mode 100644
index 000000000000..97d8af90e78e
--- /dev/null
+++ b/net/openldap26-server/files/patch-configure
@@ -0,0 +1,32 @@
+--- configure.orig	2021-07-27 17:44:47 UTC
++++ configure
+@@ -16827,9 +16827,9 @@ $as_echo "#define HAVE_UUID_TO_STR 1" >>confdefs.h
+ fi
+ 
+ if test $have_uuid = no ; then
+-	for ac_header in uuid/uuid.h
++	for ac_header in xxuuid/uuid.h
+ do :
+-  ac_fn_c_check_header_mongrel "$LINENO" "uuid/uuid.h" "ac_cv_header_uuid_uuid_h" "$ac_includes_default"
++  ac_fn_c_check_header_mongrel "$LINENO" "xxuuid/uuid.h" "ac_cv_header_uuid_uuid_h" "$ac_includes_default"
+ if test "x$ac_cv_header_uuid_uuid_h" = xyes; then :
+   cat >>confdefs.h <<_ACEOF
+ #define HAVE_UUID_UUID_H 1
+@@ -22127,7 +22127,7 @@ if ${ac_cv_lib_iodbc_SQLDriverConnect+:} false; then :
+   $as_echo_n "(cached) " >&6
+ else
+   ac_check_lib_save_LIBS=$LIBS
+-LIBS="-liodbc  $LIBS"
++LIBS="-liodbc  $LIBS $LTHREAD_LIBS"
+ cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+ /* end confdefs.h.  */
+ 
+@@ -22175,7 +22175,7 @@ if ${ac_cv_lib_odbc_SQLDriverConnect+:} false; then :
+   $as_echo_n "(cached) " >&6
+ else
+   ac_check_lib_save_LIBS=$LIBS
+-LIBS="-lodbc  $LIBS"
++LIBS="-lodbc  $LIBS $LTHREAD_LIBS"
+ cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+ /* end confdefs.h.  */
+ 
diff --git a/net/openldap26-server/files/patch-contrib_slapd-modules_passwd_sha2_sha2.h b/net/openldap26-server/files/patch-contrib_slapd-modules_passwd_sha2_sha2.h
new file mode 100644
index 000000000000..e03f4ba2b873
--- /dev/null
+++ b/net/openldap26-server/files/patch-contrib_slapd-modules_passwd_sha2_sha2.h
@@ -0,0 +1,24 @@
+--- contrib/slapd-modules/passwd/sha2/sha2.h.orig	2021-07-27 17:44:47 UTC
++++ contrib/slapd-modules/passwd/sha2/sha2.h
+@@ -142,6 +142,21 @@ typedef struct _SHA512_CTX {
+ 
+ typedef SHA512_CTX SHA384_CTX;
+ 
++#define	SHA256_Init	_sha2_SHA256_Init
++#define	SHA256_Update	_sha2_SHA256_Update
++#define	SHA256_Final	_sha2_SHA256_Final
++#define	SHA256_End	_sha2_SHA256_End
++#define	SHA256_Data	_sha2_SHA256_Data
++#define	SHA384_Init	_sha2_SHA384_Init
++#define	SHA384_Update	_sha2_SHA384_Update
++#define	SHA384_Final	_sha2_SHA384_Final
++#define	SHA384_End	_sha2_SHA384_End
++#define	SHA384_Data	_sha2_SHA384_Data
++#define	SHA512_Init	_sha2_SHA512_Init
++#define	SHA512_Update	_sha2_SHA512_Update
++#define	SHA512_Final	_sha2_SHA512_Final
++#define	SHA512_End	_sha2_SHA512_End
++#define	SHA512_Data	_sha2_SHA512_Data
+ 
+ /*** SHA-256/384/512 Function Prototypes ******************************/
+ /* avoid symbol clash with other crypto libs */
diff --git a/net/openldap26-server/files/patch-contrib_slapd-modules_smbk5pwd_Makefile b/net/openldap26-server/files/patch-contrib_slapd-modules_smbk5pwd_Makefile
new file mode 100644
index 000000000000..1f2d56dc866e
--- /dev/null
+++ b/net/openldap26-server/files/patch-contrib_slapd-modules_smbk5pwd_Makefile
@@ -0,0 +1,13 @@
+--- contrib/slapd-modules/smbk5pwd/Makefile.orig	2021-06-03 18:40:31 UTC
++++ contrib/slapd-modules/smbk5pwd/Makefile
+@@ -21,8 +21,8 @@ LDAP_LIB = $(LDAP_BUILD)/libraries/libldap_r/libldap_r
+ SSL_INC = 
+ SSL_LIB = -lcrypto
+ 
+-HEIMDAL_INC = -I/usr/heimdal/include
+-HEIMDAL_LIB = -L/usr/heimdal/lib -lkrb5 -lkadm5srv
++HEIMDAL_INC = -I/usr/include
++HEIMDAL_LIB = -L/usr/lib -lkrb5 -lkadm5srv
+ 
+ LIBTOOL = $(LDAP_BUILD)/libtool
+ CC = gcc
diff --git a/net/openldap26-server/files/patch-include__ldap_defaults.h b/net/openldap26-server/files/patch-include__ldap_defaults.h
new file mode 100644
index 000000000000..b14af6f6ab27
--- /dev/null
+++ b/net/openldap26-server/files/patch-include__ldap_defaults.h
@@ -0,0 +1,11 @@
+--- include/ldap_defaults.h.orig	2021-07-27 17:44:47 UTC
++++ include/ldap_defaults.h
+@@ -39,7 +39,7 @@
+ #define LDAP_ENV_PREFIX "LDAP"
+ 
+ /* default ldapi:// socket */
+-#define LDAPI_SOCK LDAP_RUNDIR LDAP_DIRSEP "run" LDAP_DIRSEP "ldapi"
++#define LDAPI_SOCK "/var/run" LDAP_DIRSEP "openldap" LDAP_DIRSEP "ldapi"
+ 
+ /*
+  * SLAPD DEFINITIONS
diff --git a/net/openldap26-server/files/patch-libraries__libldap__Makefile.in b/net/openldap26-server/files/patch-libraries__libldap__Makefile.in
new file mode 100644
index 000000000000..551b567191b2
--- /dev/null
+++ b/net/openldap26-server/files/patch-libraries__libldap__Makefile.in
@@ -0,0 +1,17 @@
+--- libraries/libldap/Makefile.in.orig	2021-07-27 17:44:47 UTC
++++ libraries/libldap/Makefile.in
+@@ -86,13 +86,6 @@ install-local: $(CFFILES) FORCE
+ 	$(LTFINISH) $(DESTDIR)$(libdir)
+ 	-$(MKDIR) $(DESTDIR)$(sysconfdir)
+ 	@for i in $(CFFILES); do \
+-		if test ! -f $(DESTDIR)$(sysconfdir)/$$i; then \
+-			echo "installing $$i in $(sysconfdir)"; \
+-			echo "$(INSTALL) $(INSTALLFLAGS) -m 644  $(srcdir)/$$i $(DESTDIR)$(sysconfdir)/$$i"; \
+-			$(INSTALL) $(INSTALLFLAGS) -m 644 $(srcdir)/$$i $(DESTDIR)$(sysconfdir)/$$i; \
+-		else \
+-			echo "PRESERVING EXISTING CONFIGURATION FILE $(sysconfdir)/$$i" ; \
+-		fi; \
+-		$(INSTALL) $(INSTALLFLAGS) -m 644 $(srcdir)/$$i $(DESTDIR)$(sysconfdir)/$$i.default; \
++		$(INSTALL) $(INSTALLFLAGS) -m 644 $(srcdir)/$$i $(DESTDIR)$(sysconfdir)/$$i.sample; \
+ 	done
+ 
diff --git a/net/openldap26-server/files/patch-libraries_libldap_tls__o.c b/net/openldap26-server/files/patch-libraries_libldap_tls__o.c
new file mode 100644
index 000000000000..3c9bccd4dc15
--- /dev/null
+++ b/net/openldap26-server/files/patch-libraries_libldap_tls__o.c
@@ -0,0 +1,20 @@
+--- libraries/libldap/tls_o.c.orig	2021-07-27 17:44:47 UTC
++++ libraries/libldap/tls_o.c
+@@ -275,7 +275,7 @@ tlso_ctx_free ( tls_ctx *ctx )
+ 	SSL_CTX_free( c );
+ }
+ 
+-#if OPENSSL_VERSION_NUMBER >= 0x10101000
++#if OPENSSL_VERSION_NUMBER >= 0x10101000 && !defined(OPENSSL_NO_TLS1_3)
+ static char *
+ tlso_stecpy( char *dst, const char *src, const char *end )
+ {
+@@ -411,7 +411,7 @@ tlso_ctx_init( struct ldapoptions *lo, struct ldaptls 
+ 	}
+ 
+ 	if ( lo->ldo_tls_ciphersuite ) {
+-#if OPENSSL_VERSION_NUMBER >= 0x10101000
++#if OPENSSL_VERSION_NUMBER >= 0x10101000 && !defined(OPENSSL_NO_TLS1_3)
+ 		tlso_ctx_cipher13( ctx, lt->lt_ciphersuite );
+ #endif
+ 		if ( !SSL_CTX_set_cipher_list( ctx, lt->lt_ciphersuite ) )
diff --git a/net/openldap26-server/files/patch-servers_slapd_Makefile.in b/net/openldap26-server/files/patch-servers_slapd_Makefile.in
new file mode 100644
index 000000000000..d4d16458b30b
--- /dev/null
+++ b/net/openldap26-server/files/patch-servers_slapd_Makefile.in
@@ -0,0 +1,67 @@
+--- servers/slapd/Makefile.in.orig	2021-07-27 17:44:47 UTC
++++ servers/slapd/Makefile.in
+@@ -374,7 +374,6 @@ install-local-srv: install-slapd install-tools \
+ 
+ install-slapd: FORCE
+ 	-$(MKDIR) $(DESTDIR)$(libexecdir)
+-	-$(MKDIR) $(DESTDIR)$(localstatedir)/run
+ 	$(LTINSTALL) $(INSTALLFLAGS) $(STRIP_OPTS) -m 755 \
+ 		slapd$(EXEEXT) $(DESTDIR)$(libexecdir)
+ 	@for i in $(SUBDIRS); do \
+@@ -413,48 +412,27 @@ all-cffiles: slapd $(SLAPD_DYNAMIC_BACKENDS) dynamic_o
+ 	touch all-cffiles
+ 
+ install-schema: FORCE
+-	@if test -d $(DESTDIR)$(schemadir) ; then \
+-		echo "MOVING EXISTING SCHEMA DIR to $(DESTDIR)$(schemadir).$$$$" ; \
+-		mv $(DESTDIR)$(schemadir) $(DESTDIR)$(schemadir).$$$$ ; \
+-	fi
+ 	$(MKDIR) $(DESTDIR)$(schemadir)
+ 	@SD=$(DESTDIR)$(schemadir) ; \
+-	files=`cd $(srcdir)/schema ; echo README *.ldif *.schema` ; \
++	files=`cd $(srcdir)/schema ; echo README *.ldif` ; \
+ 	for i in $$files ; do \
+ 		echo $(INSTALL) $(INSTALLFLAGS) -m 444 schema/$$i $$SD/$$i ; \
+ 		$(INSTALL) $(INSTALLFLAGS) -m 444 $(srcdir)/schema/$$i $$SD/$$i ; \
++	done ; \
++	files=`cd $(srcdir)/schema ; echo *.schema` ; \
++	for i in $$files ; do \
++		echo $(INSTALL) $(INSTALLFLAGS) -m 444 schema/$$i $$SD/$$i ; \
++		$(INSTALL) $(INSTALLFLAGS) -m 444 $(srcdir)/schema/$$i $$SD/$$i.sample ; \
+ 	done
+ 
+ install-conf: FORCE
+ 	@-$(MKDIR) $(DESTDIR)$(sysconfdir)
+-	$(INSTALL) $(INSTALLFLAGS) -m 600 slapd.conf.tmp $(DESTDIR)$(sysconfdir)/slapd.conf.default
+-	if test ! -f $(DESTDIR)$(sysconfdir)/slapd.conf; then \
+-		echo "installing slapd.conf in $(sysconfdir)"; \
+-		echo "$(INSTALL) $(INSTALLFLAGS) -m 600 slapd.conf.tmp $(DESTDIR)$(sysconfdir)/slapd.conf"; \
+-		$(INSTALL) $(INSTALLFLAGS) -m 600 slapd.conf.tmp $(DESTDIR)$(sysconfdir)/slapd.conf; \
+-	else \
+-		echo "PRESERVING EXISTING CONFIGURATION FILE $(DESTDIR)$(sysconfdir)/slapd.conf" ; \
+-	fi
+-	$(INSTALL) $(INSTALLFLAGS) -m 600 slapd.ldif.tmp $(DESTDIR)$(sysconfdir)/slapd.ldif.default
+-	if test ! -f $(DESTDIR)$(sysconfdir)/slapd.ldif; then \
+-		echo "installing slapd.ldif in $(sysconfdir)"; \
+-		echo "$(INSTALL) $(INSTALLFLAGS) -m 600 slapd.ldif.tmp $(DESTDIR)$(sysconfdir)/slapd.ldif"; \
+-		$(INSTALL) $(INSTALLFLAGS) -m 600 slapd.ldif.tmp $(DESTDIR)$(sysconfdir)/slapd.ldif; \
+-	else \
+-		echo "PRESERVING EXISTING CONFIGURATION FILE $(DESTDIR)$(sysconfdir)/slapd.ldif" ; \
+-	fi
+-	if test -n "$(systemdsystemunitdir)" && test ! -f $(DESTDIR)$(systemdsystemunitdir)/slapd.service; then \
+-		$(MKDIR) $(DESTDIR)$(systemdsystemunitdir); \
+-		echo "installing slapd.service in $(systemdsystemunitdir)"; \
+-		echo "$(INSTALL) $(INSTALLFLAGS) -m 644 slapd.service.tmp $(DESTDIR)$(systemdsystemunitdir)/slapd.service"; \
+-		$(INSTALL) $(INSTALLFLAGS) -m 644 slapd.service.tmp $(DESTDIR)$(systemdsystemunitdir)/slapd.service; \
+-	fi
++	$(INSTALL) $(INSTALLFLAGS) -m 600 slapd.conf.tmp $(DESTDIR)$(sysconfdir)/slapd.conf.sample
++	$(INSTALL) $(INSTALLFLAGS) -m 600 slapd.ldif.tmp $(DESTDIR)$(sysconfdir)/slapd.ldif.sample
+ 
+ install-db-config: FORCE
+ 	@-$(MKDIR) $(DESTDIR)$(localstatedir) $(DESTDIR)$(sysconfdir)
+ 	@-$(INSTALL) -m 700 -d $(DESTDIR)$(localstatedir)/openldap-data
+-	$(INSTALL) $(INSTALLFLAGS) -m 600 $(srcdir)/DB_CONFIG \
+-		$(DESTDIR)$(localstatedir)/openldap-data/DB_CONFIG.example
+ 	$(INSTALL) $(INSTALLFLAGS) -m 600 $(srcdir)/DB_CONFIG \
+ 		$(DESTDIR)$(sysconfdir)/DB_CONFIG.example
+ 
diff --git a/net/openldap26-server/files/patch-servers_slapd_daemon.c b/net/openldap26-server/files/patch-servers_slapd_daemon.c
new file mode 100644
index 000000000000..6e6228b2e629
--- /dev/null
+++ b/net/openldap26-server/files/patch-servers_slapd_daemon.c
@@ -0,0 +1,14 @@
+--- servers/slapd/daemon.c.orig	2021-08-18 17:11:41 UTC
++++ servers/slapd/daemon.c
+@@ -228,10 +228,9 @@ static slap_daemon_st *slap_daemon;
+ } while (0)
+ 
+ /* a kqueue fd obtained before a fork can't be used in child process.
+- * close it and reacquire it.
++ * reacquire it.
+  */
+ # define SLAP_SOCK_INIT2() do { \
+-	close(slap_daemon[0].sd_kq); \
+ 	slap_daemon[0].sd_kq = kqueue(); \
+ } while (0)
+ 
diff --git a/net/openldap26-server/files/pkg-deinstall.in b/net/openldap26-server/files/pkg-deinstall.in
new file mode 100644
index 000000000000..1557b33873af
--- /dev/null
+++ b/net/openldap26-server/files/pkg-deinstall.in
@@ -0,0 +1,32 @@
+#!/bin/sh
+
+ECHO_CMD=echo
+
+if [ -f "%%PREFIX%%/etc/openldap/slapd.conf" ]; then
+  DBDIR=`awk '$1 == "directory" {print $2}' "%%PREFIX%%/etc/openldap/slapd.conf"`
+fi
+
+case $2 in
+POST-DEINSTALL)
+  ${ECHO_CMD}
+  ${ECHO_CMD} "The OpenLDAP server package has been deleted."
+  ${ECHO_CMD} "If you're *not* upgrading and won't be using"
+  ${ECHO_CMD} "it any longer, you may want to issue the"
+  ${ECHO_CMD} "following commands:"
+  ${ECHO_CMD}
+  if ([ "${DBDIR}" ] && [ -d "${DBDIR}" ]) || ([ ! "${DBDIR}" ] && [ -d %%DATABASEDIR%% ]); then
+    ${ECHO_CMD} "- to delete the OpenLDAP database permanently (losing all data):"
+    if [ "${DBDIR}" ] && [ -d "${DBDIR}" ]; then
+      ${ECHO_CMD} "  rm -Rf ${DBDIR}"
+    else
+      ${ECHO_CMD} "  rm -Rf %%DATABASEDIR%%"
+    fi
+    ${ECHO_CMD}
+  fi
+  ${ECHO_CMD} "- to remove the OpenLDAP user:"
+  ${ECHO_CMD} "  pw userdel ldap"
+  ${ECHO_CMD}
+  ${ECHO_CMD} "If you are upgrading, don't forget to restart slapd."
+  ${ECHO_CMD}
+  ;;
+esac
diff --git a/net/openldap26-server/files/pkg-message.client.in b/net/openldap26-server/files/pkg-message.client.in
new file mode 100644
index 000000000000..1ae2cf27dd22
--- /dev/null
+++ b/net/openldap26-server/files/pkg-message.client.in
@@ -0,0 +1,15 @@
+[
+{ type: install
+  message: <<EOM
+The OpenLDAP client package has been successfully installed.
+
+Edit
+  %%PREFIX%%/etc/openldap/ldap.conf
+to change the system-wide client defaults.
+
+Try `man ldap.conf' and visit the OpenLDAP FAQ-O-Matic at
+  http://www.OpenLDAP.org/faq/index.cgi?file=3
+for more information.
+EOM
+}
+]
diff --git a/net/openldap26-server/files/pkg-message.in b/net/openldap26-server/files/pkg-message.in
new file mode 100644
index 000000000000..d07531c959ce
--- /dev/null
+++ b/net/openldap26-server/files/pkg-message.in
@@ -0,0 +1,37 @@
+[
+{ type: install
+  message: <<EOM
+The OpenLDAP server package has been successfully installed.
+
+In order to run the LDAP server, you need to edit
+  %%PREFIX%%/etc/openldap/slapd.conf
+to suit your needs and add the following lines to /etc/rc.conf:
+  slapd_enable="YES"
+  slapd_flags='-h "ldapi://%2fvar%2frun%2fopenldap%2fldapi/ ldap://0.0.0.0/"'
+  slapd_sockets="/var/run/openldap/ldapi"
+
+Then start the server with
+  %%PREFIX%%/etc/rc.d/slapd start
+or reboot.
+
+Try `man slapd' and the online manual at
+  http://www.OpenLDAP.org/doc/
+for more information.
+
+slapd runs under a non-privileged user id (by default `ldap'),
+see %%PREFIX%%/etc/rc.d/slapd for more information.
+
+PLEASE NOTE:
+
+Upgrading from %%PORTNAME%%%%PKGNAMESUFFIX%% 2.4 to 2.5 requires a full dump
+and reimport of database.
+
+Starting from %%PORTNAME%%%%PKGNAMESUFFIX%% 2.4.59_3, automatic data dumps
+are saved at %%BACKUPDIR%% when shutting down slapd.
+
+Please refer to OpenLDAP Software 2.5 Administrator's Guide at
+  https://www.openldap.org/doc/admin25/appendix-upgrading.html
+for additional upgrade instructions.
+EOM
+}
+]
diff --git a/net/openldap26-server/files/slapd.in b/net/openldap26-server/files/slapd.in
new file mode 100644
index 000000000000..620c2f4d255c
--- /dev/null
+++ b/net/openldap26-server/files/slapd.in
@@ -0,0 +1,217 @@
+#!/bin/sh
+
+# PROVIDE: slapd
+# REQUIRE: FILESYSTEMS ldconfig netif
+# BEFORE: SERVERS kdc
+# KEYWORD: shutdown
+
+#
+# Add the following lines to /etc/rc.conf to enable slapd:
+#
+#slapd_enable="YES"
+#slapd_flags='-h "ldapi://%2fvar%2frun%2fopenldap%2fldapi/ ldap://0.0.0.0/"'
+#slapd_sockets="/var/run/openldap/ldapi"
+#
+# See slapd(8) for more flags
+#
+# The `-u' and `-g' flags are automatically extracted from slapd_owner,
+# by default slapd runs under the non-privileged user id `ldap'. If you
+# want to run slapd as root, override this in /etc/rc.conf with
+#
+#slapd_owner="DEFAULT"
+#
+# To use the cn=config style configuration add the following
+# line to /etc/rc.conf:
+#
+#slapd_cn_config="YES"
+#
+# To specify alternative Kerberos 5 Key Table, add the following
+# rc.conf(5) configuration:
+#
+#slapd_krb5_ktname="/path/to/ldap.keytab"
+#
+#slapd_autobackup_enable="YES"
+# To enable automatic backup of OpenLDAP data after successful shutdown
+# in the form of LDIF.
+#
+#slapd_autobackup_num="8"
+# How many automatic backups should this script keep.
+#
+#slapd_autobackup_compress="YES"
+# Compress backup data with zstd (if present) or gzip.
+#
+#slapd_autobackup_name="backup"
+# Name to be used for backups
+
+. /etc/rc.subr
+
+name="slapd"
+rcvar=slapd_enable
+
+# read settings, set defaults
+load_rc_config ${name}
+
+: ${slapd_enable="NO"}
+if [ -n "${slapd_args+set}" ]; then
+  warn "slapd_args is deprecated, use slapd_flags"
+  : ${slapd_flags="$slapd_args"}
+fi
+: ${slapd_owner="%%LDAP_USER%%:%%LDAP_GROUP%%"}
+: ${slapd_sockets_mode="666"}
+: ${slapd_cn_config="NO"}
+: ${slapd_autobackup_enable="YES"}
+: ${slapd_autobackup_num="8"}
+: ${slapd_autobackup_compress="YES"}
+: ${slapd_autobackup_name="backup"}
+
+command="%%PREFIX%%/libexec/slapd"
+pidfile="%%LDAP_RUN_DIR%%/slapd.pid"
+
+# set required_dirs, required_files and DATABASEDIR
+if checkyesno slapd_cn_config; then
+  required_dirs="%%PREFIX%%/etc/openldap/slapd.d"
+  required_files="%%PREFIX%%/etc/openldap/slapd.d/cn=config.ldif"
+  DATABASEDIR=`grep olcDbDirectory %%PREFIX%%/etc/openldap/slapd.d/cn=config/olcDatabase=* | awk '{ print $2 }'`
+else
+  required_files="%%PREFIX%%/etc/openldap/slapd.conf"
+  DATABASEDIR=`awk '$1 == "directory" { print $2 }' "%%PREFIX%%/etc/openldap/slapd.conf" 2>&1 /dev/null`
+fi
+
+start_precmd=start_precmd
+start_postcmd=start_postcmd
+stop_postcmd=stop_postcmd
+
+# extract user and group, adjust ownership of directories and database
+
+start_precmd()
+{
+  local slapd_ownername slapd_groupname
+
+  mkdir -p %%LDAP_RUN_DIR%%
+
+  case "$slapd_owner" in
+  ""|[Nn][Oo][Nn][Ee]|[Dd][Ee][Ff][Aa][Uu][Ll][Tt])
+    ;;
+  *)
+    local DBDIR
+    for DBDIR in ${DATABASEDIR}; do
+       if [ ! -d "${DBDIR}" ]; then
+          mkdir -p "${DBDIR}"
+          [ -f "%%PREFIX%%/etc/openldap/DB_CONFIG.example" ] && cp "%%PREFIX%%/etc/openldap/DB_CONFIG.example" "${DBDIR}/DB_CONFIG"
+       fi
+       chown -RL "$slapd_owner" "${DBDIR}"
+       chmod 700 "${DBDIR}"
+    done
+    chown "$slapd_owner" "%%LDAP_RUN_DIR%%"
+
+    if checkyesno slapd_cn_config; then
+        chown -R $slapd_owner "%%PREFIX%%/etc/openldap/slapd.d"
+    else
+        chown $slapd_owner "%%PREFIX%%/etc/openldap/slapd.conf"
+    fi
+
+    slapd_ownername="${slapd_owner%:*}"
+    slapd_groupname="${slapd_owner#*:}"
+
+    if [ -n "$slapd_ownername" ]; then
+      rc_flags="$rc_flags -u $slapd_ownername"
+    fi
+    if [ -n "$slapd_groupname" ]; then
+      rc_flags="$rc_flags -g $slapd_groupname"
+    fi
+    if [ -n "${slapd_krb5_ktname}" ]; then
+      export KRB5_KTNAME=${slapd_krb5_ktname}
+    fi
+    ;;
+  esac
+  echo -n "Performing sanity check on slap configuration: "
+
+  if ${command} -Tt -u >/dev/null 2>&1; then
+    echo "OK"
+  else
+    echo "FAILED"
+    return 1
+  fi
+}
+
+# adjust ownership of created unix sockets
+
+start_postcmd()
+{
+  local socket seconds
+
+  for socket in $slapd_sockets; do
+    for seconds in 1 2 3 4 5; do
+      [ -e "$socket" ] && break
+      sleep 1
+    done
+    if [ -S "$socket" ]; then
+      case "$slapd_owner" in
+      ""|[Nn][Oo][Nn][Ee]|[Dd][Ee][Ff][Aa][Uu][Ll][Tt])
+        ;;
+      *)
+        chown "$slapd_owner" "$socket"
+        ;;
+      esac
+      chmod "$slapd_sockets_mode" "$socket"
+    else
+      warn "slapd: Can't find socket $socket"
+    fi
+  done
+}
+
+stop_postcmd()
+{
+  local compress_program compress_suffix
+
+  if checkyesno slapd_autobackup_enable; then
+    if checkyesno slapd_autobackup_compress; then
+      if [ -x /usr/bin/zstd ]; then
+        compress_program="/usr/bin/zstd"
+        compress_suffix=".zstd"
+      else
+        compress_program="/usr/bin/gzip"
+        compress_suffix=".gz"
+      fi
+    else
+      compress_program="cat"
+      compress_suffix=""
+    fi
+
+    umask 077
+    mkdir -p %%BACKUPDIR%%
+    chmod 700 %%BACKUPDIR%%
+
+    n=0
+    while [ ${n} -lt ${slapd_autobackup_num} ]; do
+      backup_file="%%BACKUPDIR%%/${slapd_autobackup_name}.ldif.${n}${compress_suffix}"
+      if [ ! -e "${backup_file}" -o -f "${backup_file}" ]; then
+        break
+      fi
+      n=$(( ${n} + 1 ))
+    done
+    if [ -f "${backup_file}" ]; then
+      n=$(( ${n} + 1 ))
+      while [ ${n} -lt ${slapd_autobackup_num} ]; do
+        next_backup_file="%%BACKUPDIR%%/${slapd_autobackup_name}.ldif.${n}${compress_suffix}"
+        if [ -f "${next_backup_file}" ]; then
+          [ "${next_backup_file}" -ot "${backup_file}" ] && \
+            backup_file=${next_backup_file}
+        elif [ ! -e "${next_backup_file}" ]; then
+          backup_file=${next_backup_file}
+          break
+        fi
+        n=$(( ${n} + 1 ))
+      done
+    fi
+    if [ -e "${backup_file}" -a ! -f "${backup_file}" ]; then
+      err 1 "Unable to backup OpenLDAP data"
+    else
+      info "Backing up OpenLDAP data to ${backup_file}"
+    fi
+
+    %%PREFIX%%/sbin/slapcat | ${compress_program} > ${backup_file}
+  fi
+}
+
+run_rc_command "$1"
diff --git a/net/openldap26-server/pkg-descr b/net/openldap26-server/pkg-descr
new file mode 100644
index 000000000000..db27ddbb4d89
--- /dev/null
+++ b/net/openldap26-server/pkg-descr
@@ -0,0 +1,11 @@
+OpenLDAP is a suite of Lightweight Directory Access Protocol (v3) servers,
+clients, utilities and development tools.
+
+This package includes the following major components:
+
+ * slapd - a stand-alone LDAP directory server
+ * LDIF tools - data conversion tools for use with slapd
+
+This is the latest stable release of OpenLDAP Software for general use.
+
+WWW: https://www.OpenLDAP.org/
diff --git a/net/openldap26-server/pkg-descr.client b/net/openldap26-server/pkg-descr.client
new file mode 100644
index 000000000000..b03b496a52f2
--- /dev/null
+++ b/net/openldap26-server/pkg-descr.client
@@ -0,0 +1,11 @@
+OpenLDAP is a suite of Lightweight Directory Access Protocol (v3) servers,
+clients, utilities and development tools.
+
+This package includes the following major components:
+
+ * -lldap - a LDAP client library
+ * -llber - a lightweight BER/DER encoding/decoding library
+ * LDAP tools - A collection of command line LDAP utilities
+ * documentation - man pages for all components
+
+WWW: https://www.OpenLDAP.org/
diff --git a/net/openldap26-server/pkg-plist b/net/openldap26-server/pkg-plist
new file mode 100644
index 000000000000..b2ac7fe3c422
--- /dev/null
+++ b/net/openldap26-server/pkg-plist
@@ -0,0 +1,306 @@
+%%ETCDIR%%/schema/README
+%%ETCDIR%%/schema/collective.ldif
+@sample %%ETCDIR%%/schema/collective.schema.sample
+%%ETCDIR%%/schema/corba.ldif
+@sample %%ETCDIR%%/schema/corba.schema.sample
+%%ETCDIR%%/schema/core.ldif
+@sample %%ETCDIR%%/schema/core.schema.sample
+%%ETCDIR%%/schema/cosine.ldif
+@sample %%ETCDIR%%/schema/cosine.schema.sample
+%%ETCDIR%%/schema/dsee.ldif
+@sample %%ETCDIR%%/schema/dsee.schema.sample
+%%ETCDIR%%/schema/msuser.ldif
+@sample %%ETCDIR%%/schema/msuser.schema.sample
+%%ETCDIR%%/schema/namedobject.ldif
+@sample %%ETCDIR%%/schema/namedobject.schema.sample
+%%ETCDIR%%/schema/duaconf.ldif
+@sample %%ETCDIR%%/schema/duaconf.schema.sample
+%%ETCDIR%%/schema/dyngroup.ldif
+@sample %%ETCDIR%%/schema/dyngroup.schema.sample
+%%ETCDIR%%/schema/inetorgperson.ldif
+@sample %%ETCDIR%%/schema/inetorgperson.schema.sample
+%%ETCDIR%%/schema/java.ldif
+@sample %%ETCDIR%%/schema/java.schema.sample
+%%ETCDIR%%/schema/misc.ldif
+@sample %%ETCDIR%%/schema/misc.schema.sample
+%%ETCDIR%%/schema/nis.ldif
+@sample %%ETCDIR%%/schema/nis.schema.sample
+%%ETCDIR%%/schema/openldap.ldif
+@sample %%ETCDIR%%/schema/openldap.schema.sample
+%%ETCDIR%%/schema/pmi.ldif
+@sample %%ETCDIR%%/schema/pmi.schema.sample
+@sample %%ETCDIR%%/slapd.conf.sample
+@sample %%ETCDIR%%/slapd.ldif.sample
+%%ACCESSLOG%%libexec/openldap/accesslog.so.%%SHLIB_MAJOR%%
+%%ACCESSLOG%%libexec/openldap/accesslog.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%ACCESSLOG%%libexec/openldap/accesslog.la
+%%ACCESSLOG%%libexec/openldap/accesslog.so
+%%ADDPARTIAL%%libexec/openldap/addpartial.la
+%%ADDPARTIAL%%libexec/openldap/addpartial.so
+%%ADDPARTIAL%%libexec/openldap/addpartial.so.0
+%%ADDPARTIAL%%libexec/openldap/addpartial.so.0.0.0
+%%ALLOP%%libexec/openldap/allop.la
+%%ALLOP%%libexec/openldap/allop.so
+%%ALLOP%%libexec/openldap/allop.so.0
+%%ALLOP%%libexec/openldap/allop.so.0.0.0
+%%ALLOP%%man/man5/slapo-allop.5.gz
+%%ARGON2%%libexec/openldap/argon2.so.%%SHLIB_MAJOR%%
+%%ARGON2%%libexec/openldap/argon2.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%ARGON2%%libexec/openldap/argon2.la
+%%ARGON2%%libexec/openldap/argon2.so
+%%ASYNCMETA%%libexec/openldap/back_asyncmeta.so.%%SHLIB_MAJOR%%
+%%ASYNCMETA%%libexec/openldap/back_asyncmeta.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%ASYNCMETA%%libexec/openldap/back_asyncmeta.la
+%%ASYNCMETA%%libexec/openldap/back_asyncmeta.so
+%%AUDITLOG%%libexec/openldap/auditlog.so.%%SHLIB_MAJOR%%
+%%AUDITLOG%%libexec/openldap/auditlog.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%AUDITLOG%%libexec/openldap/auditlog.la
+%%AUDITLOG%%libexec/openldap/auditlog.so
+%%AUTOCA%%libexec/openldap/autoca.so.%%SHLIB_MAJOR%%
+%%AUTOCA%%libexec/openldap/autoca.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%AUTOCA%%libexec/openldap/autoca.la
+%%AUTOCA%%libexec/openldap/autoca.so
+%%AUTOGROUP%%libexec/openldap/autogroup.la
+%%AUTOGROUP%%libexec/openldap/autogroup.so
+%%AUTOGROUP%%libexec/openldap/autogroup.so.0
+%%AUTOGROUP%%libexec/openldap/autogroup.so.0.0.0
+%%CLOAK%%libexec/openldap/cloak.la
+%%CLOAK%%libexec/openldap/cloak.so
+%%CLOAK%%libexec/openldap/cloak.so.0
+%%CLOAK%%libexec/openldap/cloak.so.0.0.0
+%%CLOAK%%man/man5/slapo-cloak.5.gz
+%%COLLECT%%libexec/openldap/collect.so.%%SHLIB_MAJOR%%
+%%COLLECT%%libexec/openldap/collect.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%COLLECT%%libexec/openldap/collect.la
+%%COLLECT%%libexec/openldap/collect.so
+%%CONSTRAINT%%libexec/openldap/constraint.so.%%SHLIB_MAJOR%%
+%%CONSTRAINT%%libexec/openldap/constraint.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%CONSTRAINT%%libexec/openldap/constraint.la
+%%CONSTRAINT%%libexec/openldap/constraint.so
+%%DDS%%libexec/openldap/dds.so.%%SHLIB_MAJOR%%
+%%DDS%%libexec/openldap/dds.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%DDS%%libexec/openldap/dds.la
+%%DDS%%libexec/openldap/dds.so
+%%DENYOP%%libexec/openldap/denyop.la
+%%DENYOP%%libexec/openldap/denyop.so
+%%DENYOP%%libexec/openldap/denyop.so.0
+%%DENYOP%%libexec/openldap/denyop.so.0.0.0
+%%DEREF%%libexec/openldap/deref.so.%%SHLIB_MAJOR%%
+%%DEREF%%libexec/openldap/deref.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%DEREF%%libexec/openldap/deref.la
+%%DEREF%%libexec/openldap/deref.so
+%%DNSSRV%%libexec/openldap/back_dnssrv.so.%%SHLIB_MAJOR%%
+%%DNSSRV%%libexec/openldap/back_dnssrv.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%DNSSRV%%libexec/openldap/back_dnssrv.la
+%%DNSSRV%%libexec/openldap/back_dnssrv.so
+%%DYNGROUP%%libexec/openldap/dyngroup.so.%%SHLIB_MAJOR%%
+%%DYNGROUP%%libexec/openldap/dyngroup.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%DYNGROUP%%libexec/openldap/dyngroup.la
+%%DYNGROUP%%libexec/openldap/dyngroup.so
+%%DYNLIST%%libexec/openldap/dynlist.so.%%SHLIB_MAJOR%%
+%%DYNLIST%%libexec/openldap/dynlist.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%DYNLIST%%libexec/openldap/dynlist.la
+%%DYNLIST%%libexec/openldap/dynlist.so
+%%HOMEDIR%%libexec/openldap/homedir.so.%%SHLIB_MAJOR%%
+%%HOMEDIR%%libexec/openldap/homedir.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%HOMEDIR%%libexec/openldap/homedir.la
+%%HOMEDIR%%libexec/openldap/homedir.so
+%%LASTBIND%%libexec/openldap/lastbind.la
+%%LASTBIND%%libexec/openldap/lastbind.so
+%%LASTBIND%%libexec/openldap/lastbind.so.0
+%%LASTBIND%%libexec/openldap/lastbind.so.0.0.0
+%%LASTBIND%%man/man5/slapo-lastbind.5.gz
+%%LASTMOD%%libexec/openldap/lastmod.la
+%%LASTMOD%%libexec/openldap/lastmod.so
+%%LASTMOD%%libexec/openldap/lastmod.so.0
+%%LASTMOD%%libexec/openldap/lastmod.so.0.0.0
+%%LASTMOD%%man/man5/slapo-lastmod.5.gz
+%%LLOADD%%libexec/%%PORTNAME%%/lloadd.so.%%SHLIB_MAJOR%%
+%%LLOADD%%libexec/%%PORTNAME%%/lloadd.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%LLOADD%%libexec/%%PORTNAME%%/lloadd.la
+%%LLOADD%%libexec/%%PORTNAME%%/lloadd.so
+%%MEMBEROF%%libexec/openldap/memberof.so.%%SHLIB_MAJOR%%
+%%MEMBEROF%%libexec/openldap/memberof.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%MEMBEROF%%libexec/openldap/memberof.la
+%%MEMBEROF%%libexec/openldap/memberof.so
+%%NOPS%%libexec/openldap/nops.la
+%%NOPS%%libexec/openldap/nops.so
+%%NOPS%%libexec/openldap/nops.so.0
+%%NOPS%%libexec/openldap/nops.so.0.0.0
+%%NOPS%%man/man5/slapo-nops.5.gz
+%%OTP%%libexec/openldap/otp.so.%%SHLIB_MAJOR%%
+%%OTP%%libexec/openldap/otp.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%OTP%%libexec/openldap/otp.la
+%%OTP%%libexec/openldap/otp.so
+%%PASSWD%%libexec/openldap/back_passwd.so.%%SHLIB_MAJOR%%
+%%PASSWD%%libexec/openldap/back_passwd.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%PASSWD%%libexec/openldap/back_passwd.la
+%%PASSWD%%libexec/openldap/back_passwd.so
+%%PBKDF2%%libexec/openldap/pw-pbkdf2.la
+%%PBKDF2%%libexec/openldap/pw-pbkdf2.so
+%%PBKDF2%%libexec/openldap/pw-pbkdf2.so.%%SHLIB_MAJOR%%
+%%PBKDF2%%libexec/openldap/pw-pbkdf2.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%PBKDF2%%man/man5/slapd-pw-pbkdf2.5.gz
+%%PERL%%libexec/openldap/back_perl.so.%%SHLIB_MAJOR%%
+%%PERL%%libexec/openldap/back_perl.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%PERL%%libexec/openldap/back_perl.la
+%%PERL%%libexec/openldap/back_perl.so
+%%PPOLICY%%libexec/openldap/ppolicy.so.%%SHLIB_MAJOR%%
+%%PPOLICY%%libexec/openldap/ppolicy.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%PPOLICY%%libexec/openldap/ppolicy.la
+%%PPOLICY%%libexec/openldap/ppolicy.so
+%%PROXYCACHE%%libexec/openldap/pcache.so.%%SHLIB_MAJOR%%
+%%PROXYCACHE%%libexec/openldap/pcache.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%PROXYCACHE%%libexec/openldap/pcache.la
+%%PROXYCACHE%%libexec/openldap/pcache.so
+%%REFINT%%libexec/openldap/refint.so.%%SHLIB_MAJOR%%
+%%REFINT%%libexec/openldap/refint.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%REFINT%%libexec/openldap/refint.la
+%%REFINT%%libexec/openldap/refint.so
+%%REMOTEAUTH%%libexec/openldap/remoteauth.so.%%SHLIB_MAJOR%%
+%%REMOTEAUTH%%libexec/openldap/remoteauth.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%REMOTEAUTH%%libexec/openldap/remoteauth.la
+%%REMOTEAUTH%%libexec/openldap/remoteauth.so
+%%RETCODE%%libexec/openldap/retcode.so.%%SHLIB_MAJOR%%
+%%RETCODE%%libexec/openldap/retcode.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%RETCODE%%libexec/openldap/retcode.la
+%%RETCODE%%libexec/openldap/retcode.so
+%%RWM%%libexec/openldap/rwm.so.%%SHLIB_MAJOR%%
+%%RWM%%libexec/openldap/rwm.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%RWM%%libexec/openldap/rwm.la
+%%RWM%%libexec/openldap/rwm.so
+%%SEQMOD%%libexec/openldap/seqmod.so.%%SHLIB_MAJOR%%
+%%SEQMOD%%libexec/openldap/seqmod.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%SEQMOD%%libexec/openldap/seqmod.la
+%%SEQMOD%%libexec/openldap/seqmod.so
+%%SHA2%%libexec/openldap/pw-sha2.la
+%%SHA2%%libexec/openldap/pw-sha2.so
+%%SHA2%%libexec/openldap/pw-sha2.so.0
+%%SHA2%%libexec/openldap/pw-sha2.so.0.0.0
+%%SHA2%%man/man5/slapd-pw-sha2.5.gz
+%%SLAPI%%lib/libslapi.so.%%SHLIB_MAJOR%%
+%%SLAPI%%lib/libslapi.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%SLAPI%%lib/libslapi.a
+%%SLAPI%%lib/libslapi.la
+%%SLAPI%%lib/libslapi.so
+%%SMBPWD%%libexec/openldap/smbk5pwd.la
+%%SMBPWD%%libexec/openldap/smbk5pwd.so
+%%SMBPWD%%libexec/openldap/smbk5pwd.so.0
+%%SMBPWD%%libexec/openldap/smbk5pwd.so.0.0.0
+%%SMBPWD%%man/man5/slapo-smbk5pwd.5.gz
+%%SOCK%%libexec/openldap/back_sock.so.%%SHLIB_MAJOR%%
+%%SOCK%%libexec/openldap/back_sock.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%SOCK%%libexec/openldap/back_sock.la
+%%SOCK%%libexec/openldap/back_sock.so
+%%SQL%%libexec/openldap/back_sql.so.%%SHLIB_MAJOR%%
+%%SQL%%libexec/openldap/back_sql.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%SQL%%libexec/openldap/back_sql.la
+%%SQL%%libexec/openldap/back_sql.so
+%%SSSVLV%%libexec/openldap/sssvlv.so.%%SHLIB_MAJOR%%
+%%SSSVLV%%libexec/openldap/sssvlv.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%SSSVLV%%libexec/openldap/sssvlv.la
+%%SSSVLV%%libexec/openldap/sssvlv.so
+%%TRACE%%libexec/openldap/trace.la
+%%TRACE%%libexec/openldap/trace.so
+%%TRACE%%libexec/openldap/trace.so.0
+%%TRACE%%libexec/openldap/trace.so.0.0.0
+%%TRANSLUCENT%%libexec/openldap/translucent.so.%%SHLIB_MAJOR%%
+%%TRANSLUCENT%%libexec/openldap/translucent.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%TRANSLUCENT%%libexec/openldap/translucent.la
+%%TRANSLUCENT%%libexec/openldap/translucent.so
+%%UNIQUE%%libexec/openldap/unique.so.%%SHLIB_MAJOR%%
+%%UNIQUE%%libexec/openldap/unique.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%UNIQUE%%libexec/openldap/unique.la
+%%UNIQUE%%libexec/openldap/unique.so
+%%VALSORT%%libexec/openldap/valsort.so.%%SHLIB_MAJOR%%
+%%VALSORT%%libexec/openldap/valsort.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+%%VALSORT%%libexec/openldap/valsort.la
+%%VALSORT%%libexec/openldap/valsort.so
+libexec/openldap/back_ldap.so.%%SHLIB_MAJOR%%
+libexec/openldap/back_ldap.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+libexec/openldap/back_ldap.la
+libexec/openldap/back_ldap.so
+libexec/openldap/back_meta.so.%%SHLIB_MAJOR%%
+libexec/openldap/back_meta.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+libexec/openldap/back_meta.la
+libexec/openldap/back_meta.so
+libexec/openldap/back_null.so.%%SHLIB_MAJOR%%
+libexec/openldap/back_null.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+libexec/openldap/back_null.la
+libexec/openldap/back_null.so
+libexec/slapd
+man/man5/lloadd.conf.5.gz
+man/man5/slapd-asyncmeta.5.gz
+man/man5/slapd-config.5.gz
+man/man5/slapd-dnssrv.5.gz
+man/man5/slapd-ldap.5.gz
+man/man5/slapd-ldif.5.gz
+man/man5/slapd-mdb.5.gz
+man/man5/slapd-meta.5.gz
+man/man5/slapd-monitor.5.gz
+man/man5/slapd-ndb.5.gz
+man/man5/slapd-null.5.gz
+man/man5/slapd-passwd.5.gz
+man/man5/slapd-perl.5.gz
+man/man5/slapd-relay.5.gz
+man/man5/slapd-sock.5.gz
+man/man5/slapd-sql.5.gz
+man/man5/slapd-wt.5.gz
+man/man5/slapd.access.5.gz
+man/man5/slapd.backends.5.gz
+man/man5/slapd.conf.5.gz
+man/man5/slapd.overlays.5.gz
+man/man5/slapd.plugin.5.gz
+man/man5/slapo-accesslog.5.gz
+man/man5/slapo-auditlog.5.gz
+man/man5/slapo-autoca.5.gz
+man/man5/slapo-chain.5.gz
+man/man5/slapo-collect.5.gz
+man/man5/slapo-constraint.5.gz
+man/man5/slapo-dds.5.gz
+man/man5/slapo-deref.5.gz
+man/man5/slapo-dyngroup.5.gz
+man/man5/slapo-dynlist.5.gz
+man/man5/slapo-homedir.5.gz
+man/man5/slapo-memberof.5.gz
+man/man5/slapo-otp.5.gz
+man/man5/slapo-pbind.5.gz
+man/man5/slapo-pcache.5.gz
+man/man5/slapo-ppolicy.5.gz
+man/man5/slapo-refint.5.gz
+man/man5/slapo-remoteauth.5.gz
+man/man5/slapo-retcode.5.gz
+man/man5/slapo-rwm.5.gz
+man/man5/slapo-sock.5.gz
+man/man5/slapo-sssvlv.5.gz
+man/man5/slapo-syncprov.5.gz
+man/man5/slapo-translucent.5.gz
+man/man5/slapo-unique.5.gz
+man/man5/slapo-valsort.5.gz
+man/man5/slappw-argon2.5.gz
+man/man8/lloadd.8.gz
+man/man8/slapacl.8.gz
+man/man8/slapadd.8.gz
+man/man8/slapauth.8.gz
+man/man8/slapcat.8.gz
+man/man8/slapd.8.gz
+man/man8/slapdn.8.gz
+man/man8/slapindex.8.gz
+man/man8/slapmodify.8.gz
+man/man8/slappasswd.8.gz
+man/man8/slapschema.8.gz
+man/man8/slaptest.8.gz
+sbin/slapacl
+sbin/slapadd
+sbin/slapauth
+sbin/slapcat
+sbin/slapdn
+sbin/slapindex
+sbin/slapmodify
+sbin/slappasswd
+sbin/slapschema
+sbin/slaptest
+@dir %%ETCDIR%%/schema
+@dir libexec/openldap
+@dir(%%LDAP_USER%%,%%LDAP_GROUP%%,775) %%LDAP_RUN_DIR%%
+@dir(%%LDAP_USER%%,%%LDAP_GROUP%%,775) %%DATABASEDIR%%
diff --git a/net/openldap26-server/pkg-plist.client b/net/openldap26-server/pkg-plist.client
new file mode 100644
index 000000000000..ef837dbad451
--- /dev/null
+++ b/net/openldap26-server/pkg-plist.client
@@ -0,0 +1,232 @@
+bin/ldapadd
+bin/ldapcompare
+bin/ldapdelete
+bin/ldapexop
+bin/ldapmodify
+bin/ldapmodrdn
+bin/ldappasswd
+bin/ldapsearch
+bin/ldapurl
+bin/ldapvc
+bin/ldapwhoami
+@dir %%ETCDIR%%
+@sample %%ETCDIR%%/ldap.conf.sample
+include/lber.h
+include/lber_types.h
+include/ldap.h
+include/ldap_cdefs.h
+include/ldap_features.h
+include/ldap_schema.h
+include/ldap_utf8.h
+include/ldif.h
+include/openldap.h
+include/slapi-plugin.h
+lib/liblber.so.%%SHLIB_MAJOR%%
+lib/liblber.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+lib/liblber.a
+lib/liblber.la
+lib/liblber.so
+lib/libldap.so.%%SHLIB_MAJOR%%
+lib/libldap.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
+lib/libldap.a
+lib/libldap.la
+lib/libldap.so
+libdata/pkgconfig/lber.pc
+libdata/pkgconfig/ldap.pc
+man/man1/ldapadd.1.gz
+man/man1/ldapcompare.1.gz
+man/man1/ldapdelete.1.gz
+man/man1/ldapexop.1.gz
+man/man1/ldapmodify.1.gz
+man/man1/ldapmodrdn.1.gz
+man/man1/ldappasswd.1.gz
+man/man1/ldapsearch.1.gz
+man/man1/ldapurl.1.gz
+man/man1/ldapvc.1.gz
+man/man1/ldapwhoami.1.gz
+man/man3/ber_alloc_t.3.gz
+man/man3/ber_bvarray_add.3.gz
+man/man3/ber_bvarray_free.3.gz
+man/man3/ber_bvdup.3.gz
+man/man3/ber_bvecadd.3.gz
+man/man3/ber_bvecfree.3.gz
+man/man3/ber_bvfree.3.gz
+man/man3/ber_bvstr.3.gz
+man/man3/ber_bvstrdup.3.gz
+man/man3/ber_dupbv.3.gz
+man/man3/ber_first_element.3.gz
+man/man3/ber_flush.3.gz
+man/man3/ber_free.3.gz
+man/man3/ber_get_bitstring.3.gz
+man/man3/ber_get_boolean.3.gz
+man/man3/ber_get_enum.3.gz
+man/man3/ber_get_int.3.gz
+man/man3/ber_get_next.3.gz
+man/man3/ber_get_null.3.gz
+man/man3/ber_get_stringa.3.gz
+man/man3/ber_get_stringb.3.gz
+man/man3/ber_next_element.3.gz
+man/man3/ber_peek_tag.3.gz
+man/man3/ber_printf.3.gz
+man/man3/ber_put_enum.3.gz
+man/man3/ber_put_int.3.gz
+man/man3/ber_put_null.3.gz
+man/man3/ber_put_ostring.3.gz
+man/man3/ber_put_seq.3.gz
+man/man3/ber_put_set.3.gz
+man/man3/ber_put_string.3.gz
+man/man3/ber_scanf.3.gz
+man/man3/ber_skip_tag.3.gz
+man/man3/ber_start_set.3.gz
+man/man3/ber_str2bv.3.gz
+man/man3/lber-decode.3.gz
+man/man3/lber-encode.3.gz
+man/man3/lber-memory.3.gz
+man/man3/lber-sockbuf.3.gz
+man/man3/lber-types.3.gz
+man/man3/ld_errno.3.gz
+man/man3/ldap.3.gz
+man/man3/ldap_abandon.3.gz
+man/man3/ldap_abandon_ext.3.gz
+man/man3/ldap_add.3.gz
+man/man3/ldap_add_ext.3.gz
+man/man3/ldap_add_ext_s.3.gz
+man/man3/ldap_add_s.3.gz
+man/man3/ldap_attributetype2name.3.gz
+man/man3/ldap_attributetype2str.3.gz
+man/man3/ldap_attributetype_free.3.gz
+man/man3/ldap_bind.3.gz
+man/man3/ldap_bind_s.3.gz
+man/man3/ldap_compare.3.gz
+man/man3/ldap_compare_ext.3.gz
+man/man3/ldap_compare_ext_s.3.gz
+man/man3/ldap_compare_s.3.gz
+man/man3/ldap_control_create.3.gz
+man/man3/ldap_control_dup.3.gz
+man/man3/ldap_control_find.3.gz
+man/man3/ldap_control_free.3.gz
+man/man3/ldap_controls.3.gz
+man/man3/ldap_controls_dup.3.gz
+man/man3/ldap_controls_free.3.gz
+man/man3/ldap_count_entries.3.gz
+man/man3/ldap_count_messages.3.gz
+man/man3/ldap_count_references.3.gz
+man/man3/ldap_count_values.3.gz
+man/man3/ldap_count_values_len.3.gz
+man/man3/ldap_dcedn2dn.3.gz
+man/man3/ldap_delete.3.gz
+man/man3/ldap_delete_ext.3.gz
+man/man3/ldap_delete_ext_s.3.gz
+man/man3/ldap_delete_s.3.gz
+man/man3/ldap_destroy.3.gz
+man/man3/ldap_dn2ad_canonical.3.gz
+man/man3/ldap_dn2dcedn.3.gz
+man/man3/ldap_dn2str.3.gz
+man/man3/ldap_dn2ufn.3.gz
+man/man3/ldap_dnfree.3.gz
+man/man3/ldap_dup.3.gz
+man/man3/ldap_err2string.3.gz
+man/man3/ldap_errlist.3.gz
+man/man3/ldap_error.3.gz
+man/man3/ldap_explode_dn.3.gz
+man/man3/ldap_explode_rdn.3.gz
+man/man3/ldap_extended_operation.3.gz
+man/man3/ldap_extended_operation_s.3.gz
+man/man3/ldap_first_attribute.3.gz
+man/man3/ldap_first_entry.3.gz
+man/man3/ldap_first_message.3.gz
+man/man3/ldap_first_reference.3.gz
+man/man3/ldap_free_urldesc.3.gz
+man/man3/ldap_get_attribute_ber.3.gz
+man/man3/ldap_get_dn.3.gz
+man/man3/ldap_get_option.3.gz
+man/man3/ldap_get_values.3.gz
+man/man3/ldap_get_values_len.3.gz
+man/man3/ldap_init.3.gz
+man/man3/ldap_init_fd.3.gz
+man/man3/ldap_initialize.3.gz
+man/man3/ldap_install_tls.3.gz
+man/man3/ldap_is_ldap_url.3.gz
+man/man3/ldap_matchingrule2name.3.gz
+man/man3/ldap_matchingrule2str.3.gz
+man/man3/ldap_matchingrule_free.3.gz
+man/man3/ldap_memalloc.3.gz
+man/man3/ldap_memcalloc.3.gz
+man/man3/ldap_memfree.3.gz
+man/man3/ldap_memory.3.gz
+man/man3/ldap_memrealloc.3.gz
+man/man3/ldap_memvfree.3.gz
+man/man3/ldap_modify.3.gz
+man/man3/ldap_modify_ext.3.gz
+man/man3/ldap_modify_ext_s.3.gz
+man/man3/ldap_modify_s.3.gz
+man/man3/ldap_modrdn.3.gz
+man/man3/ldap_modrdn2.3.gz
+man/man3/ldap_modrdn2_s.3.gz
+man/man3/ldap_modrdn_s.3.gz
+man/man3/ldap_mods_free.3.gz
+man/man3/ldap_msgfree.3.gz
+man/man3/ldap_msgid.3.gz
+man/man3/ldap_msgtype.3.gz
+man/man3/ldap_next_attribute.3.gz
+man/man3/ldap_next_entry.3.gz
+man/man3/ldap_next_message.3.gz
+man/man3/ldap_next_reference.3.gz
+man/man3/ldap_objectclass2name.3.gz
+man/man3/ldap_objectclass2str.3.gz
+man/man3/ldap_objectclass_free.3.gz
+man/man3/ldap_open.3.gz
+man/man3/ldap_parse_extended_result.3.gz
+man/man3/ldap_parse_intermediate.3.gz
+man/man3/ldap_parse_reference.3.gz
+man/man3/ldap_parse_result.3.gz
+man/man3/ldap_parse_sasl_bind_result.3.gz
+man/man3/ldap_parse_sort_control.3.gz
+man/man3/ldap_parse_vlv_control.3.gz
+man/man3/ldap_perror.3.gz
+man/man3/ldap_rename.3.gz
+man/man3/ldap_rename_s.3.gz
+man/man3/ldap_result.3.gz
+man/man3/ldap_result2error.3.gz
+man/man3/ldap_sasl_bind.3.gz
+man/man3/ldap_sasl_bind_s.3.gz
+man/man3/ldap_schema.3.gz
+man/man3/ldap_scherr2str.3.gz
+man/man3/ldap_search.3.gz
+man/man3/ldap_search_ext.3.gz
+man/man3/ldap_search_ext_s.3.gz
+man/man3/ldap_search_s.3.gz
+man/man3/ldap_search_st.3.gz
+man/man3/ldap_set_option.3.gz
+man/man3/ldap_set_rebind_proc.3.gz
+man/man3/ldap_set_urllist_proc.3.gz
+man/man3/ldap_simple_bind.3.gz
+man/man3/ldap_simple_bind_s.3.gz
+man/man3/ldap_sort.3.gz
+man/man3/ldap_sort_entries.3.gz
+man/man3/ldap_sort_strcasecmp.3.gz
+man/man3/ldap_sort_values.3.gz
+man/man3/ldap_start_tls.3.gz
+man/man3/ldap_start_tls_s.3.gz
+man/man3/ldap_str2attributetype.3.gz
+man/man3/ldap_str2dn.3.gz
+man/man3/ldap_str2matchingrule.3.gz
+man/man3/ldap_str2objectclass.3.gz
+man/man3/ldap_str2syntax.3.gz
+man/man3/ldap_strdup.3.gz
+man/man3/ldap_sync.3.gz
+man/man3/ldap_syntax2name.3.gz
+man/man3/ldap_syntax2str.3.gz
+man/man3/ldap_syntax_free.3.gz
+man/man3/ldap_tls.3.gz
+man/man3/ldap_tls_inplace.3.gz
+man/man3/ldap_unbind.3.gz
+man/man3/ldap_unbind_ext.3.gz
+man/man3/ldap_unbind_ext_s.3.gz
+man/man3/ldap_unbind_s.3.gz
+man/man3/ldap_url.3.gz
+man/man3/ldap_url_parse.3.gz
+man/man3/ldap_value_free.3.gz
+man/man3/ldap_value_free_len.3.gz
+man/man5/ldap.conf.5.gz
+man/man5/ldif.5.gz