path: root/databases/openldap27-server/Makefile

PORTNAME=	openldap
DISTVERSION=	2.7.0
PORTREVISION=	${OPENLDAP_PORTREVISION}
CATEGORIES=	databases net
MASTER_SITES=	https://www.openldap.org/software/download/OpenLDAP/%SUBDIR%/ \
		http://gpl.savoirfairelinux.net/pub/mirrors/openldap/%SUBDIR%/ \
		http://repository.linagora.org/OpenLDAP/%SUBDIR%/ \
		http://mirror.eu.oneandone.net/software/openldap/%SUBDIR%/ \
		ftp://ftp.ntua.gr/mirror/OpenLDAP/%SUBDIR%/ \
		https://mirror-hk.koddos.net/OpenLDAP/%SUBDIR%/ \
		ftp://ftp.dti.ad.jp/pub/net/OpenLDAP/%SUBDIR%/ \
		https://mirror.koddos.net/OpenLDAP/%SUBDIR%/ \
		https://mirror.lyrahosting.com/OpenLDAP/%SUBDIR%/ \
		ftp://ftp.OpenLDAP.org/pub/OpenLDAP/%SUBDIR%/ \
		http://www.openldap.org/software/download/OpenLDAP/%SUBDIR%/
MASTER_SITE_SUBDIR=	openldap-release
.if defined(CLIENT_ONLY)
PKGNAMESUFFIX=	27-client
.else
PKGNAMESUFFIX=	27-server
.endif

MAINTAINER=	delphij@FreeBSD.org
.if defined(CLIENT_ONLY)
COMMENT=	Open source LDAP client implementation
.else
COMMENT=	Open source LDAP server implementation
.endif
WWW=		https://www.OpenLDAP.org/

LICENSE=	OPENLDAP
LICENSE_NAME=	OpenLDAP Public License
LICENSE_FILE=	${WRKSRC}/LICENSE
LICENSE_PERMS=	dist-mirror dist-sell pkg-mirror pkg-sell auto-accept

# :keepla because port uses lt_dlopen
USES=		cpe gmake libtool:keepla localbase:ldflags ssl tar:tgz
BUILD_DEPENDS+=	autoconf>0:devel/autoconf

.if defined(CLIENT_ONLY)
CONFLICTS_INSTALL=	${PORTNAME}-client ${PORTNAME}2[0-68-9]-client
.else
CONFLICTS_INSTALL=	${PORTNAME}-server ${PORTNAME}2[0-68-9]-server
.endif

GNU_CONFIGURE=	yes
GNU_CONFIGURE_MANPREFIX=	${PREFIX}/share

PORTREVISION_CLIENT=	0
PORTREVISION_SERVER=	0
OPENLDAP_SHLIB_MAJOR=	2
OPENLDAP_SHLIB_MINOR=	0.201

OPTIONS_DEFINE=		DEBUG FETCH GSSAPI
OPTIONS_DEFAULT+=	DEBUG

FETCH_DESC=	Enable fetch(3) support
GSSAPI_DESC=	With GSSAPI support

FETCH_CONFIGURE_WITH=	fetch

GSSAPI_RUN_DEPENDS=	cyrus-sasl-gssapi>0:security/cyrus-sasl2-gssapi

.if defined(CLIENT_ONLY)
OPTIONS_DEFINE+=	DOCS
.else
OPTIONS_GROUP=		BKNDS OVLYS
BKNDS_DEFAULTS=		ASYNCMETA DNSSRV MDB PASSWD RELAY SOCK
OPTIONS_GROUP_BKNDS+=	${BKNDS_DEFAULTS}

OPTIONS_GROUP_OVLYS+=	ACCESSLOG ADDPARTIAL ALLOP AUDITLOG AUTOCA AUTOGROUP \
			CLOAK COLLECT CONSTRAINT DDS DENYOP DEREF DYNGROUP \
			DYNLIST EMPTYDS HOMEDIR LASTBIND LASTMOD MEMBEROF \
			NESTGROUP NOPS NSSOV OTP PPOLICY PROXYCACHE REFINT \
			REMOTEAUTH RESULTSTATS RETCODE RWM SEQMOD SHA2 \
			SMBPWD SSSVLV SYNCPROV TRACE TRANSLUCENT UNIQUE \
			VALSORT

OPTIONS_DEFINE+=	ACI ARGON2 DYNACL LLOADD NETWORKING OUTLOOK PBKDF2 \
			RLOOKUPS SLAPI SLP

OPTIONS_EXCLUDE_FreeBSD_15=	SMBPWD # Only works with Heimdal
OPTIONS_EXCLUDE_FreeBSD_16=	SMBPWD # Only works with Heimdal

OPTIONS_DEFAULT+=	${BKNDS_DEFAULTS} ${OPTIONS_GROUP_OVLYS} ARGON2 LLOADD

OPTIONS_SUB=	yes

ACCESSLOG_DESC=		With In-Directory Access Logging overlay
ACI_DESC=		Per-object ACI (experimental)
ADDPARTIAL_DESC=	With addpartial overlay (experimental)
ALLOP_DESC=		With allop overlay (experimental)
ARGON2_DESC=		Argon2 password hashing module
ASYNCMETA_DESC=		With asynchronous metadirectory backend
AUDITLOG_DESC=		With Audit Logging overlay
AUTOCA_DESC=		With Automatic Certificate Authority overlay
AUTOGROUP_DESC=		With autogroup overlay (experimental)
BKNDS_DESC=		OpenLDAP backends
CLOAK_DESC=		With cloak overlay (experimental)
COLLECT_DESC=		With Collect overy Services overlay
CONSTRAINT_DESC=	With Attribute Constraint overlay
DDS_DESC=		With Dynamic Directory Services overlay
DENYOP_DESC=		With denyop overlay (experimental)
DEREF_DESC=		With Dereference overlay
DNSSRV_DESC=		With Dnssrv backend
DYNACL_DESC=		Run-time loadable ACL (experimental)
DYNGROUP_DESC=		With Dynamic Group overlay
DYNLIST_DESC=		With Dynamic List overlay
EMPTYDS_DESC=		With emptyds overlay (experimental)
HOMEDIR_DESC=		With Home Directory Management overlay
LASTBIND_DESC=		With lastbind overlay
LASTMOD_DESC=		With lastmod overlay (experimental)
LLOADD_DESC=		Enable load balancer
MDB_DESC=		With Memory-Mapped DB backend
MEMBEROF_DESC=		With Reverse Group Membership overlay
NESTGROUP_DESC=		With nestgroup overlay
NETWORKING_DESC=	Require full network configuration (NETWORKING) before slapd starts
NOPS_DESC=		With nops overlay
NSSOV_DESC=		With NSS/PAM overlay [baked in nslcd(8)]
OTP_DESC=		With OTP 2-factor authentication overlay
OUTLOOK_DESC=		Force caseIgnoreOrderingMatch on name attribute (experimental)
OVLYS_DESC=		OpenLDAP overlays
PASSWD_DESC=		With Passwd backend
PBKDF2_DESC=		With PBKDF2 hash password support
PPOLICY_DESC=		With Password Policy overlay
PROXYCACHE_DESC=	With Proxy Cache overlay
REFINT_DESC=		With Referential Integrity overlay
RELAY_DESC=		With Relay backend
REMOTEAUTH_DESC=	With Deferred Authentication overlay
RESULTSTATS_DESC=	With per-operation result code statistics overlay
RETCODE_DESC=		With Return Code testing overlay
RLOOKUPS_DESC=		With reverse lookups of client hostnames
RWM_DESC=		With Rewrite/Remap overlay
SEQMOD_DESC=		With Sequential Modify overlay
SHA2_DESC=		With SHA2 Password hashes overlay
SLAPI_DESC=		With Netscape SLAPI plugin API (experimental)
SLP_DESC=		With SLPv2 (RFC 2608) support
SMBPWD_DESC=		With Samba Password hashes overlay
SOCK_DESC=		With Sock backend
SSSVLV_DESC=		With ServerSideSort/VLV overlay
SYNCPROV_DESC=		With Syncrepl Provider overlay
TRACE_DESC=		With Trace overlay
TRANSLUCENT_DESC=	With Translucent Proxy overlay
UNIQUE_DESC=		With attribute Uniqueness overlay
VALSORT_DESC=		With Value Sorting overlay

ACCESSLOG_CONFIGURE_ENABLE=	accesslog=mod
ACI_CONFIGURE_ENABLE=		aci
ARGON2_LIB_DEPENDS=		libsodium.so:security/libsodium
ARGON2_CONFIGURE_ENABLE=	argon2
ARGON2_CONFIGURE_WITH=		argon2=libsodium
ASYNCMETA_CONFIGURE_ENABLE=	asyncmeta=mod
AUDITLOG_CONFIGURE_ENABLE=	auditlog=mod
AUTOCA_CONFIGURE_ENABLE=	autoca=mod
COLLECT_CONFIGURE_ENABLE=	collect=mod
CONSTRAINT_CONFIGURE_ENABLE=	constraint=mod
DDS_CONFIGURE_ENABLE=		dds=mod
DEBUG_CONFIGURE_ENABLE=		debug
DEREF_CONFIGURE_ENABLE=		deref=mod
DNSSRV_CONFIGURE_ENABLE=	dnssrv=mod
DYNACL_CONFIGURE_ENABLE=	dynacl
DYNGROUP_CONFIGURE_ENABLE=	dyngroup=mod
DYNLIST_CONFIGURE_ENABLE=	dynlist=mod
HOMEDIR_CONFIGURE_ENABLE=	homedir=mod
LLOADD_LIB_DEPENDS=		libevent.so:devel/libevent
LLOADD_CONFIGURE_ENABLE=	balancer=mod
MDB_CONFIGURE_ENABLE=		mdb=yes
MEMBEROF_CONFIGURE_ENABLE=	memberof=mod
NESTGROUP_CONFIGURE_ENABLE=	nestgroup=mod
OTP_CONFIGURE_ENABLE=		otp=mod
# Force using caseIgnoreOrderingMatch on 'name' attribute.
# This may be a violation of RFC 4519 2.18 definition.
# See http://www.openldap.org/lists/openldap-technical/201211/msg00175.html
OUTLOOK_EXTRA_PATCHES=		${FILESDIR}/extrapatch-outlook-servers__slapd__schema_prep.c
PASSWD_CONFIGURE_ENABLE=	passwd=mod
PPOLICY_CONFIGURE_ENABLE=	ppolicy=mod
PROXYCACHE_CONFIGURE_ENABLE=	proxycache=mod
REFINT_CONFIGURE_ENABLE=	refint=mod
RELAY_CONFIGURE_ENABLE=		relay=yes
REMOTEAUTH_CONFIGURE_ENABLE=	remoteauth=mod
RETCODE_CONFIGURE_ENABLE=	retcode=mod
RLOOKUPS_CONFIGURE_ENABLE=	rlookups
RWM_CONFIGURE_ENABLE=		rwm=mod
SEQMOD_CONFIGURE_ENABLE=	seqmod=mod
SLAPI_USE=			LDCONFIG
SLAPI_CONFIGURE_ENABLE=		slapi
SLP_LIB_DEPENDS=		libslp.so:net/openslp
SLP_CONFIGURE_ENABLE=		slp
SOCK_CONFIGURE_ENABLE=		sock=mod
SSSVLV_CONFIGURE_ENABLE=	sssvlv=mod
SYNCPROV_CONFIGURE_ENABLE=	syncprov=yes
TRANSLUCENT_CONFIGURE_ENABLE=	translucent=mod
UNIQUE_CONFIGURE_ENABLE=	unique=mod
VALSORT_CONFIGURE_ENABLE=	valsort=mod
.endif

CONFIGURE_SED=	-e 's,uuid/uuid.h,xxuuid/uuid.h,g'

.include <bsd.port.options.mk>

.if defined(CLIENT_ONLY)
OPENLDAP_PORTREVISION=	${PORTREVISION_CLIENT}
OPENLDAP_PKGFILESUFX=	.client

PORTDOCS=	CHANGES drafts rfc

CONFIGURE_ARGS+=	--disable-monitor \
			--disable-relay \
			--disable-slapd \
			--disable-syncprov
USE_LDCONFIG=		yes
.else
OPENLDAP_PORTREVISION=	${PORTREVISION_SERVER}
OPENLDAP_PKGFILESUFX=

LIB_DEPENDS+=	libicudata.so:devel/icu \
		libldap.so:databases/openldap27-client \
		libltdl.so:devel/libltdl

SUB_LIST+=	DATABASEDIR=${DATABASEDIR} \
		LDAP_RUN_DIR=${LDAP_RUN_DIR} \
		RC_DIR=${PREFIX}

.if ${PORT_OPTIONS:MNETWORKING}
SUB_LIST+=	SLAPD_REQUIRE=NETWORKING
.else
SUB_LIST+=	SLAPD_REQUIRE=FILESYSTEMS
.endif

USERS=		ldap
GROUPS=		ldap
LDAP_USER?=	ldap
LDAP_GROUP?=	ldap
USE_LDCONFIG=	${PREFIX}/libexec/openldap
SUB_FILES+=	pkg-deinstall
USE_RC_SUBR=	slapd

EXTRA_PATCHES+=	${FILESDIR}/extrapatch-Makefile.in

SED_MODULES=	-e 's/\(moduleload[ 	]*back_[a-z]*\)\.la/\1/' -e \
		's/\# *\(modulepath\)/\1/'

CONFIGURE_ARGS+=	--enable-crypt \
			--enable-ldap=mod \
			--enable-meta=mod \
			--enable-modules \
			--enable-null=mod \
			--localstatedir=${LOCALSTATEDIR}
.endif

LDAP_RUN_DIR?=	/var/run/openldap
LOCALSTATEDIR?=	/var/db
DATABASEDIR?=	${LOCALSTATEDIR}/openldap-data
BACKUPDIR?=	/var/backups/openldap

DESCR=		${PKGDIR}/pkg-descr${OPENLDAP_PKGFILESUFX}
PLIST=		${PKGDIR}/pkg-plist${OPENLDAP_PKGFILESUFX}

SUB_FILES+=	pkg-message${OPENLDAP_PKGFILESUFX}
PKGMESSAGE=	${WRKSRC}/pkg-message${OPENLDAP_PKGFILESUFX}

SUB_LIST+=	BACKUPDIR=${BACKUPDIR} \
		DATABASEDIR=${DATABASEDIR} \
		LDAP_GROUP=${LDAP_GROUP} \
		LDAP_RUN_DIR=${LDAP_RUN_DIR} \
		LDAP_USER=${LDAP_USER} \
		NSLCD_VARDIR=${NSLCD_VARDIR} \
		PKGNAME=${PKGNAME} \
		PKGNAMESUFFIX=${PKGNAMESUFFIX} \
		PORTNAME=${PORTNAME}

CONFIGURE_ARGS+=	--enable-dynamic \
			--with-threads=posix \
			--with-tls=openssl

LIB_DEPENDS+=		libsasl2.so:security/cyrus-sasl2
CONFIGURE_ARGS+=	--enable-spasswd \
			--with-cyrus-sasl
MAKE_ENV+=		STRIP=${STRIP}

PLIST_SUB+=	${SUB_LIST} \
		SHLIB_MAJOR=${OPENLDAP_SHLIB_MAJOR} \
		SHLIB_MINOR=${OPENLDAP_SHLIB_MINOR}

.if ${PORT_OPTIONS:MFETCH} && (defined(OPENSSL_INSTALLED) && \
	${OPENSSL_INSTALLED} != "" || ${SSL_DEFAULT} != base)
BROKEN=		using OpenSSL from ports and OPTION FETCH together is not supported
.endif

.if ${PORT_OPTIONS:MADDPARTIAL}
CONTRIB_MODULES+=	slapd-modules/addpartial
CONTRIB_CLEANFILES+=	addpartial.a
.endif
.if ${PORT_OPTIONS:MALLOP}
CONTRIB_MODULES+=	slapd-modules/allop
CONTRIB_CLEANFILES+=	allop.a
.endif
.if ${PORT_OPTIONS:MAUTOGROUP}
CONTRIB_MODULES+=	slapd-modules/autogroup
CONTRIB_CLEANFILES+=	autogroup.a
.endif
.if ${PORT_OPTIONS:MCLOAK}
CONTRIB_MODULES+=	slapd-modules/cloak
CONTRIB_CLEANFILES+=	cloak.a
.endif
.if ${PORT_OPTIONS:MDENYOP}
CONTRIB_MODULES+=	slapd-modules/denyop
CONTRIB_CLEANFILES+=	denyop.a
.endif
.if ${PORT_OPTIONS:MEMPTYDS}
CONTRIB_MODULES+=	slapd-modules/emptyds
CONTRIB_CLEANFILES+=	emptyds.a
.endif
.if ${PORT_OPTIONS:MLASTBIND}
CONTRIB_MODULES+=	slapd-modules/lastbind
CONTRIB_CLEANFILES+=	lastbind.a
.endif
.if ${PORT_OPTIONS:MLASTMOD}
CONTRIB_MODULES+=	slapd-modules/lastmod
CONTRIB_CLEANFILES+=	lastmod.a
.endif
.if ${PORT_OPTIONS:MNOPS}
CONTRIB_MODULES+=	slapd-modules/nops
CONTRIB_CLEANFILES+=	nops.a
.endif
.if ${PORT_OPTIONS:MNSSOV}
CONTRIB_MODULES+=	slapd-modules/nssov
CONTRIB_CLEANFILES+=	nssov.a
NSLCD_VARDIR!=		${MAKE} -C ${.CURDIR:H:H}/net/nss-pam-ldapd -V NSLCD_VARDIR
NSLCD_SOCKET!=		${MAKE} -C ${.CURDIR:H:H}/net/nss-pam-ldapd -V NSLCD_SOCKET
.endif
.if ${PORT_OPTIONS:MRESULTSTATS}
CONTRIB_MODULES+=	slapd-modules/resultstats
CONTRIB_CLEANFILES+=	resultstats.a
.endif
.if ${PORT_OPTIONS:MTRACE}
CONTRIB_MODULES+=	slapd-modules/trace
CONTRIB_CLEANFILES+=	trace.a
.endif
.if ${PORT_OPTIONS:MSHA2}
CONTRIB_MODULES+=	slapd-modules/passwd/sha2
CONTRIB_CLEANFILES+=	pw-sha2.a
.endif
.if ${PORT_OPTIONS:MPBKDF2}
CONTRIB_MODULES+=	slapd-modules/passwd/pbkdf2
CONTRIB_CLEANFILES+=	pw-pbkdf2.a
.endif
.if ${PORT_OPTIONS:MSMBPWD}
CONTRIB_MODULES+=	slapd-modules/smbk5pwd
CONTRIB_CLEANFILES+=	smbk5pwd.a
.endif

post-patch:
	@${REINPLACE_CMD} -e 's|%LOCALSTATEDIR%/run/|${LDAP_RUN_DIR}/|g' \
		${SED_MODULES} ${WRKSRC}/servers/slapd/slapd.conf
	@${REINPLACE_CMD} -e 's|%LOCALSTATEDIR%/run/|${LDAP_RUN_DIR}/|g' \
		${SED_MODULES} ${WRKSRC}/servers/slapd/slapd.ldif
	@${REINPLACE_CMD} -e 's|^OPT =.*|OPT = ${CFLAGS}|g' \
		-e 's|^CC =.*|CC = ${CC}|g' \
		${SED_MODULES} ${WRKSRC}/contrib/slapd-modules/*/Makefile \
		${WRKSRC}/contrib/slapd-modules/*/*/Makefile
.if defined(CONFIGURE_SED)
	@${REINPLACE_CMD} -E ${CONFIGURE_SED} \
		${CONFIGURE_WRKSRC}/${CONFIGURE_SCRIPT}
.endif
.if !${PORT_OPTIONS:MDEBUG}
	@${REINPLACE_CMD} -E \
		-e '/ldap_dump_(connection|requests_and_responses);/d' \
		${WRKSRC}/libraries/libldap/ldap.map.in
.endif

post-patch-NSSOV-on:
	@${REINPLACE_CMD} -E \
		-e 's|^(#define[[:space:]]+NSLCD_PATH).*|\1	"${NSLCD_VARDIR}"|' \
		-e 's|^(#define[[:space:]]+NSLCD_SOCKET).*|\1	"${NSLCD_SOCKET}"|' \
		${WRKSRC}/contrib/slapd-modules/nssov/nssov.h
	@${REINPLACE_CMD} -e 's|0555|0755|' \
		${WRKSRC}/contrib/slapd-modules/nssov/nssov.c

pre-configure:
	@(cd ${WRKSRC} && ${LOCALBASE}/bin/autoconf)

.if !defined(CLIENT_ONLY)
test: build
	@(cd ${BUILD_WRKSRC} && ${SETENVI} ${WRK_ENV} ${MAKE_ENV} \
		${MAKE_CMD} ${MAKE_FLAGS} ${MAKEFILE} ${MAKE_ARGS} test)

post-build:
.for module in ${CONTRIB_MODULES}
	@(cd ${BUILD_WRKSRC}/contrib/${module} && \
		${SETENVI} ${WRK_ENV} ${MAKE_ENV} ${MAKE_CMD} ${MAKE_FLAGS} ${MAKEFILE} \
		${MAKE_ARGS} prefix="${PREFIX}" all)
.endfor
.endif

pre-install:
.if !defined(CLIENT_ONLY)
	${MKDIR} ${STAGEDIR}${DATABASEDIR}
.endif

post-install:
.if defined(CLIENT_ONLY)
	${MKDIR} ${STAGEDIR}${DOCSDIR}
	${INSTALL_DATA} ${WRKSRC}/CHANGES ${STAGEDIR}${DOCSDIR}
	for dir in drafts rfc; do \
		${MKDIR} ${STAGEDIR}${DOCSDIR}/$${dir}; \
		${INSTALL_DATA} ${WRKSRC}/doc/$${dir}/* ${STAGEDIR}${DOCSDIR}/$${dir}; \
	done
	for prog in ldapcompare ldapdelete ldapexop ldapmodify ldapmodrdn ldappasswd ldapsearch ldapurl ldapvc ldapwhoami; do\
		${STRIP_CMD} ${STAGEDIR}${PREFIX}/bin/$${prog}; \
	done
	for library in lber ldap; do \
		${STRIP_CMD} ${STAGEDIR}${PREFIX}/lib/lib$${library}.so.${OPENLDAP_SHLIB_MAJOR}; \
	done
.else
	${MKDIR} ${STAGEDIR}${LDAP_RUN_DIR}
.for module in ${CONTRIB_MODULES}
	(cd ${WRKSRC}/contrib/${module} && \
		${SETENVI} ${WRK_ENV} ${MAKE_ENV} ${MAKE_CMD} ${MAKE_FLAGS} ${MAKEFILE} \
		${MAKE_ARGS} prefix="${PREFIX}" install)
.endfor
.for cleanfile in ${CONTRIB_CLEANFILES}
	${RM} ${STAGEDIR}${PREFIX}/libexec/openldap/${cleanfile}
.endfor
	${STRIP_CMD} ${STAGEDIR}${PREFIX}/libexec/openldap/*.so
	${STRIP_CMD} ${STAGEDIR}${PREFIX}/libexec/slapd
	${MKDIR} ${STAGEDIR}${PREFIX}/libexec/openldap
.endif # defined(CLIENT_ONLY)

post-install-NSSOV-on:
	${INSTALL_DATA} ${WRKSRC}/contrib/slapd-modules/nssov/ldapns.schema ${STAGEDIR}${ETCDIR}/schema/ldapns.schema.sample

post-install-SLAPI-on:
	for library in slapi; do \
		${STRIP_CMD} ${STAGEDIR}${PREFIX}/lib/lib$${library}.so.${OPENLDAP_SHLIB_MAJOR}; \
	done

.include <bsd.port.mk>