[ubuntu/focal-proposed] openldap 2.4.49+dfsg-1ubuntu1 (Accepted)

Andreas Hasenack andreas at canonical.com
Mon Feb 10 15:43:00 UTC 2020


openldap (2.4.49+dfsg-1ubuntu1) focal; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - Enable AppArmor support:
      - d/apparmor-profile: add AppArmor profile
      - d/rules: use dh_apparmor
      - d/control: Build-Depends on dh-apparmor
      - d/slapd.README.Debian: add note about AppArmor
    - Enable GSSAPI support:
      - d/patches/gssapi.diff, thanks to Jerry Carter (Likewise):
        - Add --with-gssapi support
        - Make guess_service_principal() more robust when determining
          principal
        [Dropped the ldap_gssapi_bind_s() hunk as that is already
      - d/configure.options: Configure with --with-gssapi
      - d/control: Added heimdal-dev as a build depend
      - d/rules:
        - Explicitly add -I/usr/include/heimdal to CFLAGS.
        - Explicitly add -I/usr/lib/<multiarch>/heimdal to LDFLAGS.
    - Enable ufw support:
      - d/control: suggest ufw.
      - d/rules: install ufw profile.
      - d/slapd.ufw.profile: add ufw profile.
    - Enable nss overlay:
      - d/rules:
        - add nssov to CONTRIB_MODULES
        - add sysconfdir to CONTRIB_MAKEVARS
      - d/slapd.install:
        - install nssov overlay
      - d/slapd.manpages:
        - install slapo-nssov(5) man page
    - d/{rules,slapd.py}: Add apport hook.
    - d/slapd.init.ldif: don't set olcRootDN since it's not defined in
      either the default DIT nor via an Authn mapping.
    - d/slapd.scripts-common:
      - add slapcat_opts to local variables.
      - Fix backup directory naming for multiple reconfiguration.
    - d/{slapd.default,slapd.README.Debian}: use the new configuration style.
    - d/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support
      in the openldap library, as required by Likewise-Open
    - Show distribution in version:
      - d/control: added lsb-release
      - d/patches/fix-ldap-distribution.patch: show distribution in version
    - d/libldap-2.4-2.symbols: Add symbols not present in Debian.
      - CLDAP (UDP) was added in 2.4.17-1ubuntu2
      - GSSAPI support was enabled in 2.4.18-0ubuntu2
    - d/p/contrib-makefiles: given the change in 2.4.47+dfsg-3 regarding
      Debian bug #919136, we also have to patch the nssov makefile
      accordingly and thus update this patch.
  * Dropped:
    - d/control: slapd can depend on perl:any since it only uses perl for
      some maintainer and helper scripts.
      [In 2.4.49+dfsg-1]

openldap (2.4.49+dfsg-1) unstable; urgency=medium

  * New upstream release.
    - Drop patch no-gnutls_global_set_mutex, applied upstream.
  * When validating the DNS domain chosen for slapd's default suffix, set
    LC_COLLATE explicitly for grep to ensure character ranges behave as
    expected. Thanks to Fredrik Roubert. (Closes: #940908)
  * Backport proposed upstream patch to emit detailed messages about errors in
    the TLS configuration. (ITS#9086) (Closes: #837341)
  * slapd.scripts-common: Delete unused copy_example_DB_CONFIG function.
  * Remove debconf support for choosing a database backend. Always use the
    LMDB backend for new installs, as recommended by upstream.
  * Remove the empty olcBackend section from the default configuration.
  * Remove the unused slapd.conf template from /usr/share/slapd. Continue
    shipping it as an example in /usr/share/doc/slapd.
  * Fix a typo in index-files-created-as-root patch.
    Thanks to Quanah Gibson-Mount.
  * Annotate slapd's Depends on perl with :any. Fixes installation of
    foreign-arch slapd. Thanks to Andreas Hasenack.
  * Rename 'stage1' build profile to 'pkg.openldap.noslapd'.
    Thanks to Helmut Grohne. (Closes: #949722)
  * Drop Build-Conflicts: libicu-dev as upstream's configure no longer tests
    for or links with libicu.
  * Note ITS#9126 recommendation in slapd.NEWS.
  * Update Standards-Version to 4.5.0; no changes required.

Date: Mon, 10 Feb 2020 12:13:47 -0300
Changed-By: Andreas Hasenack <andreas at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/openldap/2.4.49+dfsg-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 10 Feb 2020 12:13:47 -0300
Source: openldap
Architecture: source
Version: 2.4.49+dfsg-1ubuntu1
Distribution: focal
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Andreas Hasenack <andreas at canonical.com>
Closes: 837341 940908 949722
Changes:
 openldap (2.4.49+dfsg-1ubuntu1) focal; urgency=medium
 .
   * Merge with Debian unstable. Remaining changes:
     - Enable AppArmor support:
       - d/apparmor-profile: add AppArmor profile
       - d/rules: use dh_apparmor
       - d/control: Build-Depends on dh-apparmor
       - d/slapd.README.Debian: add note about AppArmor
     - Enable GSSAPI support:
       - d/patches/gssapi.diff, thanks to Jerry Carter (Likewise):
         - Add --with-gssapi support
         - Make guess_service_principal() more robust when determining
           principal
         [Dropped the ldap_gssapi_bind_s() hunk as that is already
       - d/configure.options: Configure with --with-gssapi
       - d/control: Added heimdal-dev as a build depend
       - d/rules:
         - Explicitly add -I/usr/include/heimdal to CFLAGS.
         - Explicitly add -I/usr/lib/<multiarch>/heimdal to LDFLAGS.
     - Enable ufw support:
       - d/control: suggest ufw.
       - d/rules: install ufw profile.
       - d/slapd.ufw.profile: add ufw profile.
     - Enable nss overlay:
       - d/rules:
         - add nssov to CONTRIB_MODULES
         - add sysconfdir to CONTRIB_MAKEVARS
       - d/slapd.install:
         - install nssov overlay
       - d/slapd.manpages:
         - install slapo-nssov(5) man page
     - d/{rules,slapd.py}: Add apport hook.
     - d/slapd.init.ldif: don't set olcRootDN since it's not defined in
       either the default DIT nor via an Authn mapping.
     - d/slapd.scripts-common:
       - add slapcat_opts to local variables.
       - Fix backup directory naming for multiple reconfiguration.
     - d/{slapd.default,slapd.README.Debian}: use the new configuration style.
     - d/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support
       in the openldap library, as required by Likewise-Open
     - Show distribution in version:
       - d/control: added lsb-release
       - d/patches/fix-ldap-distribution.patch: show distribution in version
     - d/libldap-2.4-2.symbols: Add symbols not present in Debian.
       - CLDAP (UDP) was added in 2.4.17-1ubuntu2
       - GSSAPI support was enabled in 2.4.18-0ubuntu2
     - d/p/contrib-makefiles: given the change in 2.4.47+dfsg-3 regarding
       Debian bug #919136, we also have to patch the nssov makefile
       accordingly and thus update this patch.
   * Dropped:
     - d/control: slapd can depend on perl:any since it only uses perl for
       some maintainer and helper scripts.
       [In 2.4.49+dfsg-1]
 .
 openldap (2.4.49+dfsg-1) unstable; urgency=medium
 .
   * New upstream release.
     - Drop patch no-gnutls_global_set_mutex, applied upstream.
   * When validating the DNS domain chosen for slapd's default suffix, set
     LC_COLLATE explicitly for grep to ensure character ranges behave as
     expected. Thanks to Fredrik Roubert. (Closes: #940908)
   * Backport proposed upstream patch to emit detailed messages about errors in
     the TLS configuration. (ITS#9086) (Closes: #837341)
   * slapd.scripts-common: Delete unused copy_example_DB_CONFIG function.
   * Remove debconf support for choosing a database backend. Always use the
     LMDB backend for new installs, as recommended by upstream.
   * Remove the empty olcBackend section from the default configuration.
   * Remove the unused slapd.conf template from /usr/share/slapd. Continue
     shipping it as an example in /usr/share/doc/slapd.
   * Fix a typo in index-files-created-as-root patch.
     Thanks to Quanah Gibson-Mount.
   * Annotate slapd's Depends on perl with :any. Fixes installation of
     foreign-arch slapd. Thanks to Andreas Hasenack.
   * Rename 'stage1' build profile to 'pkg.openldap.noslapd'.
     Thanks to Helmut Grohne. (Closes: #949722)
   * Drop Build-Conflicts: libicu-dev as upstream's configure no longer tests
     for or links with libicu.
   * Note ITS#9126 recommendation in slapd.NEWS.
   * Update Standards-Version to 4.5.0; no changes required.
Checksums-Sha1:
 dc7abfa2caadbd8fd9492d8e9be1785b4a65c5f8 3128 openldap_2.4.49+dfsg-1ubuntu1.dsc
 663422d4e7c5db82120a456ac4080cd6de8fd44a 4844726 openldap_2.4.49+dfsg.orig.tar.gz
 5484b7723e78b4881b6b948c562d352f39c7a17c 179600 openldap_2.4.49+dfsg-1ubuntu1.debian.tar.xz
 6c4ab0fa9353587c3fa0a9e9e5e48998ff406364 7425 openldap_2.4.49+dfsg-1ubuntu1_source.buildinfo
Checksums-Sha256:
 ce6614d9480809e7908272746976fea4bcd4d601df4f8bf06726a37298a90faf 3128 openldap_2.4.49+dfsg-1ubuntu1.dsc
 240022395b438f327aa860a631c1d4eef9b17e63ec8965d3aca2aa983e6d81e6 4844726 openldap_2.4.49+dfsg.orig.tar.gz
 7a9cc0befd886b7c73b5e8cc3ce3226ea5ed1f21129df727b7c9042709dab82a 179600 openldap_2.4.49+dfsg-1ubuntu1.debian.tar.xz
 3d6393d0f923519e215b04df2dbf90c4d5e5baa39cc38baf6af4b2f633606cd6 7425 openldap_2.4.49+dfsg-1ubuntu1_source.buildinfo
Files:
 3ac212f19659c1071b492162366cb290 3128 net optional openldap_2.4.49+dfsg-1ubuntu1.dsc
 9361bf80ec1f85440e8ac95fe331459e 4844726 net optional openldap_2.4.49+dfsg.orig.tar.gz
 72e2cbe84e74c1294688522423aba320 179600 net optional openldap_2.4.49+dfsg-1ubuntu1.debian.tar.xz
 fc8f3d07930f0c714f5147349cd69708 7425 net optional openldap_2.4.49+dfsg-1ubuntu1_source.buildinfo
Original-Maintainer: Debian OpenLDAP Maintainers <pkg-openldap-devel at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
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=MVDo
-----END PGP SIGNATURE-----


More information about the Focal-changes mailing list