diff --git a/openldap-slapd-conf.patch b/openldap-slapd-conf.patch index 843049f..a0ae7aa 100644 --- a/openldap-slapd-conf.patch +++ b/openldap-slapd-conf.patch @@ -1,9 +1,9 @@ Updates initial slapd configuration. -diff -urNPp openldap-2.4.23.old/servers/slapd/slapd.conf openldap-2.4.23.new/servers/slapd/slapd.conf +diff -uNPrp openldap-2.4.23.old/servers/slapd/slapd.conf openldap-2.4.23.new/servers/slapd/slapd.conf --- openldap-2.4.23.old/servers/slapd/slapd.conf 2007-02-13 21:22:22.000000000 +0100 -+++ openldap-2.4.23.new/servers/slapd/slapd.conf 2010-08-19 15:45:05.835681213 +0200 -@@ -2,22 +2,57 @@ ++++ openldap-2.4.23.new/servers/slapd/slapd.conf 2010-11-22 17:39:02.334511902 +0100 +@@ -2,22 +2,71 @@ # See slapd.conf(5) for details on configuration options. # This file should NOT be world readable. # @@ -35,24 +35,39 @@ diff -urNPp openldap-2.4.23.old/servers/slapd/slapd.conf openldap-2.4.23.new/ser +pidfile /var/run/openldap/slapd.pid +argsfile /var/run/openldap/slapd.args - # Load dynamic backend modules: +-# Load dynamic backend modules: -# modulepath %MODULEDIR% -# moduleload back_bdb.la -# moduleload back_hdb.la -# moduleload back_ldap.la -+# modulepath /usr/lib/openldap # or /usr/lib64/openldap ++# Load dynamic backend modules ++# - modulepath is architecture dependent value (32/64-bit system) ++# - back_sql.la overlay requires openldap-server-sql package ++# - dyngroup.la and dynlist.la cannot be used at the same time ++ ++# modulepath /usr/lib/openldap ++# modulepath /usr/lib64/openldap ++ +# moduleload accesslog.la +# moduleload auditlog.la +# moduleload back_sql.la -+# moduleload denyop.la ++# moduleload chain.la ++# moduleload collect.la ++# moduleload constraint.la ++# moduleload dds.la ++# moduleload deref.la +# moduleload dyngroup.la +# moduleload dynlist.la -+# moduleload lastmod.la ++# moduleload memberof.la ++# moduleload pbind.la +# moduleload pcache.la +# moduleload ppolicy.la +# moduleload refint.la +# moduleload retcode.la +# moduleload rwm.la ++# moduleload seqmod.la ++# moduleload smbk5pwd.la ++# moduleload sssvlv.la +# moduleload syncprov.la +# moduleload translucent.la +# moduleload unique.la @@ -69,7 +84,7 @@ diff -urNPp openldap-2.4.23.old/servers/slapd/slapd.conf openldap-2.4.23.new/ser # Sample security restrictions # Require integrity protection (prevent hijacking) -@@ -47,19 +82,42 @@ argsfile %LOCALSTATEDIR%/run/slapd.args +@@ -47,19 +96,42 @@ argsfile %LOCALSTATEDIR%/run/slapd.args # rootdn can always read and write EVERYTHING! ####################################################################### diff --git a/openldap.spec b/openldap.spec index 387c269..d1e77f7 100644 --- a/openldap.spec +++ b/openldap.spec @@ -657,6 +657,7 @@ exit 0 * Mon Nov 22 2010 Jan Vcelak 2.4.23-4 - Mozilla NSS - implement full non-blocking semantics ldapsearch -Z hangs server if starttls fails (#652822) +- updated list of all overlays in slapd.conf (#655899) * Thu Nov 18 2010 Jan Vcelak 2.4.23-3 - add support for multiple prefixed Mozilla NSS database files in TLS_CACERTDIR