[Freeipa-devel] [PATCH] Replace OpenLDAP with mozldap

W. Michael Petullo mike at flyn.org
Thu Feb 28 09:15:14 UTC 2008


>> I've attached a patch that begins the process of replacing OpenLDAP with
>> mozldap. FreeIPA relies on RedHat's Directory Server, which uses mozldap. A
>> FreeIPA build using mozldap would reduce the project's dependencies and
>> redundant code. In addition, mozldap uses NSS instead of OpenSSL. This is
>> beneficial for the reasons listed in [1].
>> 
>> [1] http://fedoraproject.org/wiki/FedoraCryptoConsolidation

> patch may make sense for shipping for Fedora, but it would be better to
> have a patch that makes the choice between mozldap or openldap libraries
> a compile time option.
> This is because admin tools and client tools are not meant to be run on
> the server only and other distributions may not ship the mozldap bits.
> 
> Do you think you can modify the patch to make it possible to select
> either library through a configure option ?
> 
> Simo.

Attached is a new patch.

This patch now allows one to specify --with-openldap if they want to continue
using OpenLDAP, otherwise mozldap is used. The exception is ipa-server's
ipa-slapi-plugins, which will not build against OpenLDAP.

-- 
Mike

:wq
-------------- next part --------------
Only in freeipa-0.99/ipa-client: aclocal.m4
Only in freeipa-0.99/ipa-client: autom4te.cache
Only in freeipa-0.99/ipa-client: config.guess
Only in freeipa-0.99/ipa-client: config.h.in
Only in freeipa-0.99/ipa-client: config.sub
Only in freeipa-0.99/ipa-client: configure
diff -u --recursive freeipa-0.99-vanilla/ipa-client/configure.ac freeipa-0.99/ipa-client/configure.ac
--- freeipa-0.99-vanilla/ipa-client/configure.ac	2008-02-18 18:21:39.000000000 +0430
+++ freeipa-0.99/ipa-client/configure.ac	2008-02-28 01:22:57.000000000 +0430
@@ -82,42 +82,47 @@
 AC_SUBST(KRB5_LIBS)
 
 dnl ---------------------------------------------------------------------------
-dnl - Check for LDAP
+dnl - Check for Mozilla LDAP or OpenLDAP SDK
 dnl ---------------------------------------------------------------------------
 
-LDAP_LIBS=
-AC_CHECK_HEADER(ldap.h)
-AC_CHECK_HEADER(lber.h)
-
-AC_CHECK_LIB(ldap, ldap_search, with_ldap=yes)
-dnl Check for other libraries we need to link with to get the main routines.
-test "$with_ldap" != "yes" && { AC_CHECK_LIB(ldap, ldap_open, [with_ldap=yes with_ldap_lber=yes], , -llber) }
-test "$with_ldap" != "yes" && { AC_CHECK_LIB(ldap, ldap_open, [with_ldap=yes with_ldap_lber=yes with_ldap_krb=yes], , -llber -lkrb) }
-test "$with_ldap" != "yes" && { AC_CHECK_LIB(ldap, ldap_open, [with_ldap=yes with_ldap_lber=yes with_ldap_krb=yes with_ldap_des=yes], , -llber -lkrb -ldes) }
-dnl Recently, we need -lber even though the main routines are elsewhere,
-dnl because otherwise be get link errors w.r.t. ber_pvt_opt_on.  So just
-dnl check for that (it's a variable not a fun but that doesn't seem to
-dnl matter in these checks)  and stick in -lber if so.  Can't hurt (even to
-dnl stick it in always shouldn't hurt, I don't think) ... #### Someone who
-dnl #### understands LDAP needs to fix this properly.
-test "$with_ldap_lber" != "yes" && { AC_CHECK_LIB(lber, ber_pvt_opt_on, with_ldap_lber=yes) }
-
-if test "$with_ldap" = "yes"; then
-  if test "$with_ldap_des" = "yes" ; then
-    LDAP_LIBS="${LDAP_LIBS} -ldes"
-  fi
-  if test "$with_ldap_krb" = "yes" ; then
-    LDAP_LIBS="${LDAP_LIBS} -lkrb"
-  fi
-  if test "$with_ldap_lber" = "yes" ; then
-    LDAP_LIBS="${LDAP_LIBS} -llber"
-  fi
-  LDAP_LIBS="${LDAP_LIBS} -lldap"
+AC_ARG_WITH(openldap, [  --with-openldap            Use OpenLDAP])
+
+if test x$with_openldap = xyes; then
+        AC_CHECK_LIB(ldap, ldap_search, with_ldap=yes)
+        dnl Check for other libraries we need to link with to get the main routines.
+        test "$with_ldap" != "yes" && { AC_CHECK_LIB(ldap, ldap_open, [with_ldap=yes with_ldap_lber=yes], , -llber) }
+        test "$with_ldap" != "yes" && { AC_CHECK_LIB(ldap, ldap_open, [with_ldap=yes with_ldap_lber=yes with_ldap_krb=yes], , -llber -lkrb) }
+        test "$with_ldap" != "yes" && { AC_CHECK_LIB(ldap, ldap_open, [with_ldap=yes with_ldap_lber=yes with_ldap_krb=yes with_ldap_des=yes], , -llber -lkrb -ldes) }
+        dnl Recently, we need -lber even though the main routines are elsewhere,
+        dnl because otherwise be get link errors w.r.t. ber_pvt_opt_on.  So just
+        dnl check for that (it's a variable not a fun but that doesn't seem to
+        dnl matter in these checks)  and stick in -lber if so.  Can't hurt (even to
+        dnl stick it in always shouldn't hurt, I don't think) ... #### Someone who
+        dnl #### understands LDAP needs to fix this properly.
+        test "$with_ldap_lber" != "yes" && { AC_CHECK_LIB(lber, ber_pvt_opt_on, with_ldap_lber=yes) }
+
+        if test "$with_ldap" = "yes"; then
+          if test "$with_ldap_des" = "yes" ; then
+            OPENLDAP_LIBS="${OPENLDAP_LIBS} -ldes"
+          fi
+          if test "$with_ldap_krb" = "yes" ; then
+            OPENLDAP_LIBS="${OPENLDAP_LIBS} -lkrb"
+          fi
+          if test "$with_ldap_lber" = "yes" ; then
+            OPENLDAP_LIBS="${OPENLDAP_LIBS} -llber"
+          fi
+          OPENLDAP_LIBS="${OPENLDAP_LIBS} -lldap"
+        else
+          AC_MSG_ERROR([OpenLDAP not found])
+        fi
+
+        AC_SUBST(OPENLDAP_LIBS)
 else
-  AC_MSG_ERROR([LDAP not found])
+        PKG_CHECK_MODULES(MOZLDAP, mozldap > 6)
+	MOZLDAP_CFLAGS="${MOZLDAP_CFLAGS} -DWITH_MOZLDAP"
+	AC_SUBST(MOZLDAP_CFLAGS)
 fi
 
-AC_SUBST(LDAP_LIBS)
 
 dnl ---------------------------------------------------------------------------
 dnl - Check for POPT
Only in freeipa-0.99/ipa-client: COPYING
Only in freeipa-0.99/ipa-client: depcomp
Only in freeipa-0.99/ipa-client/firefox: Makefile.in
Only in freeipa-0.99/ipa-client: INSTALL
Only in freeipa-0.99/ipa-client: install-sh
Only in freeipa-0.99/ipa-client/ipaclient: Makefile.in
diff -u --recursive freeipa-0.99-vanilla/ipa-client/ipa-getkeytab.c freeipa-0.99/ipa-client/ipa-getkeytab.c
--- freeipa-0.99-vanilla/ipa-client/ipa-getkeytab.c	2008-02-18 18:21:39.000000000 +0430
+++ freeipa-0.99/ipa-client/ipa-getkeytab.c	2008-02-28 09:42:09.000000000 +0430
@@ -31,7 +31,11 @@
 #include <errno.h>
 #include <time.h>
 #include <krb5.h>
+#ifdef WITH_MOZLDAP
+#include <mozldap/ldap.h>
+#else
 #include <ldap.h>
+#endif
 #include <sasl/sasl.h>
 #include <popt.h>
 
@@ -275,7 +279,6 @@
 	BerElement *ctrl = NULL;
 	BerElement *sctrl = NULL;
 	struct berval *control = NULL;
-	char *ldap_uri = NULL;
 	struct berval **ncvals;
 	char *ldap_base = NULL;
 	char *retoid = NULL;
@@ -306,23 +309,16 @@
 		goto error_out;
 	}
 
-	/* connect to ldap server */
-	ret = asprintf(&ldap_uri, "ldap://%s:389", servername);
-	if (ret == -1) {
-		fprintf(stderr, "Unable to determine server URI!\n");
-		goto error_out;
-	}
-
 	/* TODO: support referrals ? */
-	ret = ldap_initialize(&ld, ldap_uri);
-	if(ret != LDAP_SUCCESS) {
+	ld = ldap_init(servername, 389);
+	if(ld == NULL) {
 		fprintf(stderr, "Unable to initialize ldap library!\n");
 		goto error_out;
 	}
 
 	version = LDAP_VERSION3;
 	ret = ldap_set_option(ld, LDAP_OPT_PROTOCOL_VERSION, &version);
-        if (ret != LDAP_OPT_SUCCESS) {
+        if (ret != LDAP_SUCCESS) {
 		fprintf(stderr, "Unable to set ldap options!\n");
 		goto error_out;
 	}
@@ -427,8 +423,7 @@
 	ber_free(sctrl, 1);
 	ldap_controls_free(srvctrl);
 	ldap_msgfree(res);
-	ldap_unbind_ext_s(ld, NULL, NULL);
-	free(ldap_uri);
+	ldap_unbind_ext(ld, NULL, NULL);
 	return kvno;
 
 error_out:
@@ -436,8 +431,7 @@
 	if (srvctrl) ldap_controls_free(srvctrl);
 	if (err) ldap_memfree(err);
 	if (res) ldap_msgfree(res);
-	if (ld) ldap_unbind_ext_s(ld, NULL, NULL);
-	if (ldap_uri) free(ldap_uri);
+	if (ld) ldap_unbind_ext(ld, NULL, NULL);
 	if (control) ber_bvfree(control);
 	if (encs) free(encs);
 	return 0;
Only in freeipa-0.99/ipa-client/ipa-install: Makefile.in
Only in freeipa-0.99/ipa-client: ltmain.sh
diff -u --recursive freeipa-0.99-vanilla/ipa-client/Makefile.am freeipa-0.99/ipa-client/Makefile.am
--- freeipa-0.99-vanilla/ipa-client/Makefile.am	2008-02-18 18:21:39.000000000 +0430
+++ freeipa-0.99/ipa-client/Makefile.am	2008-02-28 00:42:37.000000000 +0430
@@ -13,7 +13,8 @@
 	-DLIBEXECDIR=\""$(libexecdir)"\"			\
 	-DDATADIR=\""$(datadir)"\"				\
 	$(KRB5_CFLAGS)						\
-	$(LDAP_CFLAGS)						\
+	$(OPENLDAP_CFLAGS)					\
+	$(MOZLDAP_CFLAGS)					\
 	$(SASL_CFLAGS)						\
 	$(POPT_CFLAGS)						\
 	$(WARN_CFLAGS)						\
@@ -29,7 +30,8 @@
 
 ipa_getkeytab_LDADD = 		\
 	$(KRB5_LIBS)		\
-	$(LDAP_LIBS)		\
+	$(OPENLDAP_LIBS)	\
+	$(MOZLDAP_LIBS)		\
 	$(SASL_LIBS)		\
 	$(POPT_LIBS)		\
 	$(NULL)
Only in freeipa-0.99/ipa-client: Makefile.in
Only in freeipa-0.99/ipa-client: missing
Only in freeipa-0.99/ipa-client: py-compile
Only in freeipa-0.99/ipa-server: aclocal.m4
Only in freeipa-0.99/ipa-server: autom4te.cache
Only in freeipa-0.99/ipa-server: config.guess
Only in freeipa-0.99/ipa-server: config.h.in
Only in freeipa-0.99/ipa-server: config.sub
Only in freeipa-0.99/ipa-server: configure
diff -u --recursive freeipa-0.99-vanilla/ipa-server/configure.ac freeipa-0.99/ipa-server/configure.ac
--- freeipa-0.99-vanilla/ipa-server/configure.ac	2008-02-18 18:21:39.000000000 +0430
+++ freeipa-0.99/ipa-server/configure.ac	2008-02-28 13:13:16.000000000 +0430
@@ -87,48 +87,55 @@
 AC_SUBST(KRB5_LIBS)
 
 dnl ---------------------------------------------------------------------------
-dnl - Check for LDAP
+dnl - Check for Mozilla LDAP or OpenLDAP SDK
 dnl ---------------------------------------------------------------------------
 
-LDAP_LIBS=
-AC_CHECK_HEADER(ldap.h)
-AC_CHECK_HEADER(lber.h)
-
-AC_CHECK_LIB(ldap, ldap_search, with_ldap=yes)
-dnl Check for other libraries we need to link with to get the main routines.
-test "$with_ldap" != "yes" && { AC_CHECK_LIB(ldap, ldap_open, [with_ldap=yes with_ldap_lber=yes], , -llber) }
-test "$with_ldap" != "yes" && { AC_CHECK_LIB(ldap, ldap_open, [with_ldap=yes with_ldap_lber=yes with_ldap_krb=yes], , -llber -lkrb) }
-test "$with_ldap" != "yes" && { AC_CHECK_LIB(ldap, ldap_open, [with_ldap=yes with_ldap_lber=yes with_ldap_krb=yes with_ldap_des=yes], , -llber -lkrb -ldes) }
-dnl Recently, we need -lber even though the main routines are elsewhere,
-dnl because otherwise be get link errors w.r.t. ber_pvt_opt_on.  So just
-dnl check for that (it's a variable not a fun but that doesn't seem to
-dnl matter in these checks)  and stick in -lber if so.  Can't hurt (even to
-dnl stick it in always shouldn't hurt, I don't think) ... #### Someone who
-dnl #### understands LDAP needs to fix this properly.
-test "$with_ldap_lber" != "yes" && { AC_CHECK_LIB(lber, ber_pvt_opt_on, with_ldap_lber=yes) }
-
-if test "$with_ldap" = "yes"; then
-  if test "$with_ldap_des" = "yes" ; then
-    LDAP_LIBS="${LDAP_LIBS} -ldes"
-  fi
-  if test "$with_ldap_krb" = "yes" ; then
-    LDAP_LIBS="${LDAP_LIBS} -lkrb"
-  fi
-  if test "$with_ldap_lber" = "yes" ; then
-    LDAP_LIBS="${LDAP_LIBS} -llber"
-  fi
-  LDAP_LIBS="${LDAP_LIBS} -lldap"
-else
-  AC_MSG_ERROR([LDAP not found])
-fi
+AC_ARG_WITH(openldap, [  --with-openldap            Use OpenLDAP])
 
-AC_SUBST(LDAP_LIBS)
+dnl The mozldap libraries are always needed because ipa-slapi-plugins/dna/ 
+dnl will not build against OpenLDAP.
+PKG_CHECK_MODULES(MOZLDAP, mozldap > 6)
 
-dnl ---------------------------------------------------------------------------
-dnl - Check for Mozilla LDAP SDK
-dnl ---------------------------------------------------------------------------
+if test x$with_openldap = xyes; then
+	AC_CHECK_LIB(ldap, ldap_search, with_ldap=yes)
+	dnl Check for other libraries we need to link with to get the main routines.
+	test "$with_ldap" != "yes" && { AC_CHECK_LIB(ldap, ldap_open, [with_ldap=yes with_ldap_lber=yes], , -llber) }
+	test "$with_ldap" != "yes" && { AC_CHECK_LIB(ldap, ldap_open, [with_ldap=yes with_ldap_lber=yes with_ldap_krb=yes], , -llber -lkrb) }
+	test "$with_ldap" != "yes" && { AC_CHECK_LIB(ldap, ldap_open, [with_ldap=yes with_ldap_lber=yes with_ldap_krb=yes with_ldap_des=yes], , -llber -lkrb -ldes) }
+	dnl Recently, we need -lber even though the main routines are elsewhere,
+	dnl because otherwise be get link errors w.r.t. ber_pvt_opt_on.  So just
+	dnl check for that (it's a variable not a fun but that doesn't seem to
+	dnl matter in these checks)  and stick in -lber if so.  Can't hurt (even to
+	dnl stick it in always shouldn't hurt, I don't think) ... #### Someone who
+	dnl #### understands LDAP needs to fix this properly.
+	test "$with_ldap_lber" != "yes" && { AC_CHECK_LIB(lber, ber_pvt_opt_on, with_ldap_lber=yes) }
+	
+	if test "$with_ldap" = "yes"; then
+	  if test "$with_ldap_des" = "yes" ; then
+	    LDAP_LIBS="${LDAP_LIBS} -ldes"
+	  fi
+	  if test "$with_ldap_krb" = "yes" ; then
+	    LDAP_LIBS="${LDAP_LIBS} -lkrb"
+	  fi
+	  if test "$with_ldap_lber" = "yes" ; then
+	    LDAP_LIBS="${LDAP_LIBS} -llber"
+	  fi
+	  LDAP_LIBS="${LDAP_LIBS} -lldap"
+	else
+	  AC_MSG_ERROR([OpenLDAP not found])
+	fi
+	
+	AC_SUBST(LDAP_LIBS)
 
-PKG_CHECK_MODULES(MOZLDAP, mozldap > 6)
+	LDAP_CFLAGS="${LDAP_CFLAGS} -DWITH_OPENLDAP"
+	AC_SUBST(LDAP_CFLAGS)
+else
+	LDAP_LIBS="${MOZLDAP_LIBS}"
+	AC_SUBST(LDAP_LIBS)
+
+	LDAP_CFLAGS="${LDAP_CFLAGS} -DWITH_MOZLDAP"
+	AC_SUBST(LDAP_CFLAGS)
+fi
 
 dnl ---------------------------------------------------------------------------
 dnl - Check for OpenSSL Crypto library
Only in freeipa-0.99/ipa-server: COPYING
Only in freeipa-0.99/ipa-server: depcomp
Only in freeipa-0.99/ipa-server: INSTALL
Only in freeipa-0.99/ipa-server: install-sh
Only in freeipa-0.99/ipa-server/ipa-gui/ipagui/config: Makefile.in
Only in freeipa-0.99/ipa-server/ipa-gui/ipagui/forms: Makefile.in
Only in freeipa-0.99/ipa-server/ipa-gui/ipagui/helpers: Makefile.in
Only in freeipa-0.99/ipa-server/ipa-gui/ipagui: Makefile.in
Only in freeipa-0.99/ipa-server/ipa-gui/ipagui/static/css: Makefile.in
Only in freeipa-0.99/ipa-server/ipa-gui/ipagui/static/images/branding: Makefile.in
Only in freeipa-0.99/ipa-server/ipa-gui/ipagui/static/images: Makefile.in
Only in freeipa-0.99/ipa-server/ipa-gui/ipagui/static/images/template: Makefile.in
Only in freeipa-0.99/ipa-server/ipa-gui/ipagui/static/javascript: Makefile.in
Only in freeipa-0.99/ipa-server/ipa-gui/ipagui/static: Makefile.in
Only in freeipa-0.99/ipa-server/ipa-gui/ipagui/subcontrollers: Makefile.in
Only in freeipa-0.99/ipa-server/ipa-gui/ipagui/templates: Makefile.in
Only in freeipa-0.99/ipa-server/ipa-gui/ipagui/tests: Makefile.in
Only in freeipa-0.99/ipa-server/ipa-gui/ipa_gui.egg-info: Makefile.in
Only in freeipa-0.99/ipa-server/ipa-gui: Makefile.in
Only in freeipa-0.99/ipa-server/ipa-install: Makefile.in
Only in freeipa-0.99/ipa-server/ipa-install/share: Makefile.in
diff -u --recursive freeipa-0.99-vanilla/ipa-server/ipa-kpasswd/ipa_kpasswd.c freeipa-0.99/ipa-server/ipa-kpasswd/ipa_kpasswd.c
--- freeipa-0.99-vanilla/ipa-server/ipa-kpasswd/ipa_kpasswd.c	2008-02-18 18:21:39.000000000 +0430
+++ freeipa-0.99/ipa-server/ipa-kpasswd/ipa_kpasswd.c	2008-02-28 09:41:37.000000000 +0430
@@ -39,13 +39,23 @@
 #include <arpa/inet.h>
 #include <time.h>
 #include <krb5.h>
+#ifdef WITH_MOZLDAP
+#include <mozldap/ldap.h>
+#else
 #include <ldap.h>
+#endif
 #include <sasl/sasl.h>
 
 #define DEFAULT_KEYTAB "FILE:/var/kerberos/krb5kdc/kpasswd.keytab"
 #define TMP_TEMPLATE "/tmp/kpasswd.XXXXXX"
 #define KPASSWD_PORT 464
 
+#ifdef WITH_MOZLDAP
+/* From OpenLDAP's ldap.h */
+#define LDAP_TAG_EXOP_MODIFY_PASSWD_ID  ((ber_tag_t) 0x80U)
+#define LDAP_TAG_EXOP_MODIFY_PASSWD_NEW ((ber_tag_t) 0x82U)
+#endif
+
 /* blacklist entries are released only BLCAKLIST_TIMEOUT seconds
  * after the children performing the noperation has finished.
  * this is to avoid races */
@@ -310,7 +320,6 @@
 	struct berval control;
 	struct berval newpw;
 	char hostname[1024];
-	char *ldap_uri = NULL;
 	struct berval **ncvals;
 	char *ldap_base = NULL;
 	char *filter;
@@ -367,17 +376,10 @@
 		goto done;
 	}
 
-	ret = asprintf(&ldap_uri, "ldap://%s:389", hostname);
-	if (ret == -1) {
-		syslog(LOG_ERR, "Out of memory!");
-		ret = KRB5_KPASSWD_HARDERROR;
-		goto done;
-	}
-
 	/* connect to ldap server */
 	/* TODO: support referrals ? */
-	ret = ldap_initialize(&ld, ldap_uri);
-	if(ret != LDAP_SUCCESS) {
+	ld = ldap_init(hostname, 389);
+	if(ld == NULL) {
 		syslog(LOG_ERR, "Unable to connect to ldap server");
 		ret = KRB5_KPASSWD_HARDERROR;
 		goto done;
@@ -385,7 +387,7 @@
 
 	version = LDAP_VERSION3;
 	ret = ldap_set_option(ld, LDAP_OPT_PROTOCOL_VERSION, &version);
-        if (ret != LDAP_OPT_SUCCESS) {
+        if (ret != LDAP_SUCCESS) {
 		syslog(LOG_ERR, "Unable to set ldap protocol version");
 		ret = KRB5_KPASSWD_HARDERROR;
 		goto done;
@@ -480,11 +482,12 @@
 		ret = KRB5_KPASSWD_HARDERROR;
 		goto done;
 	}
+
 	ber_printf(ctrl, "{tstON}",
 		   LDAP_TAG_EXOP_MODIFY_PASSWD_ID, userdn,
 		   LDAP_TAG_EXOP_MODIFY_PASSWD_NEW, &newpw);
 
-	ret = ber_flatten2(ctrl, &control, 0);
+	ret = ber_flatten(ctrl, &control);
 	if (ret < 0) {
 		syslog(LOG_ERR, "ber flattening failed!");
 		ret = KRB5_KPASSWD_HARDERROR;
@@ -645,8 +648,7 @@
 	if (exterr1) free(exterr1);
 	if (exterr2) free(exterr2);
 	if (userdn) free(userdn);
-	if (ld) ldap_unbind_ext_s(ld, NULL, NULL);
-	if (ldap_uri) free(ldap_uri);
+	if (ld) ldap_unbind_ext(ld, NULL, NULL);
 	if (tmp_file) {
 		unlink(tmp_file);
 		free(tmp_file);
Only in freeipa-0.99/ipa-server/ipa-kpasswd: Makefile.in
Only in freeipa-0.99/ipa-server/ipaserver: Makefile.in
diff -u --recursive freeipa-0.99-vanilla/ipa-server/ipa-slapi-plugins/dna/Makefile.am freeipa-0.99/ipa-server/ipa-slapi-plugins/dna/Makefile.am
--- freeipa-0.99-vanilla/ipa-server/ipa-slapi-plugins/dna/Makefile.am	2008-02-18 18:21:39.000000000 +0430
+++ freeipa-0.99/ipa-server/ipa-slapi-plugins/dna/Makefile.am	2008-02-28 13:05:26.000000000 +0430
@@ -9,7 +9,6 @@
 	-DLIBEXECDIR=\""$(libexecdir)"\"			\
 	-DDATADIR=\""$(datadir)"\"				\
 	$(MOZLDAP_CFLAGS)					\
-	$(LDAP_CFLAGS)						\
 	$(KRB5_CFLAGS)						\
 	$(WARN_CFLAGS)						\
 	$(NULL)
Only in freeipa-0.99/ipa-server/ipa-slapi-plugins/dna: Makefile.in
diff -u --recursive freeipa-0.99-vanilla/ipa-server/ipa-slapi-plugins/ipa-memberof/Makefile.am freeipa-0.99/ipa-server/ipa-slapi-plugins/ipa-memberof/Makefile.am
--- freeipa-0.99-vanilla/ipa-server/ipa-slapi-plugins/ipa-memberof/Makefile.am	2008-02-18 18:21:39.000000000 +0430
+++ freeipa-0.99/ipa-server/ipa-slapi-plugins/ipa-memberof/Makefile.am	2008-02-28 13:05:17.000000000 +0430
@@ -9,7 +9,6 @@
 	-DLIBEXECDIR=\""$(libexecdir)"\"			\
 	-DDATADIR=\""$(datadir)"\"				\
 	$(MOZLDAP_CFLAGS)					\
-	$(LDAP_CFLAGS)						\
 	$(KRB5_CFLAGS)						\
 	$(WARN_CFLAGS)						\
 	$(NULL)
Only in freeipa-0.99/ipa-server/ipa-slapi-plugins/ipa-memberof: Makefile.in
diff -u --recursive freeipa-0.99-vanilla/ipa-server/ipa-slapi-plugins/ipa-pwd-extop/Makefile.am freeipa-0.99/ipa-server/ipa-slapi-plugins/ipa-pwd-extop/Makefile.am
--- freeipa-0.99-vanilla/ipa-server/ipa-slapi-plugins/ipa-pwd-extop/Makefile.am	2008-02-18 18:21:39.000000000 +0430
+++ freeipa-0.99/ipa-server/ipa-slapi-plugins/ipa-pwd-extop/Makefile.am	2008-02-28 13:04:58.000000000 +0430
@@ -9,7 +9,6 @@
 	-DLIBEXECDIR=\""$(libexecdir)"\"			\
 	-DDATADIR=\""$(datadir)"\"				\
 	$(MOZLDAP_CFLAGS)					\
-	$(LDAP_CFLAGS)						\
 	$(KRB5_CFLAGS)						\
 	$(SSL_CFLAGS)						\
 	$(WARN_CFLAGS)						\
Only in freeipa-0.99-vanilla/ipa-server/ipa-slapi-plugins/ipa-pwd-extop: .Makefile.am.swp
Only in freeipa-0.99/ipa-server/ipa-slapi-plugins/ipa-pwd-extop: Makefile.in
Only in freeipa-0.99/ipa-server/ipa-slapi-plugins: Makefile.in
Only in freeipa-0.99/ipa-server: ltmain.sh
Only in freeipa-0.99/ipa-server: Makefile.in
Only in freeipa-0.99/ipa-server: missing
Only in freeipa-0.99/ipa-server: py-compile
Only in freeipa-0.99/ipa-server/xmlrpc-server: Makefile.in
Only in freeipa-0.99/ipa-server/xmlrpc-server/test: Makefile.in


More information about the Freeipa-devel mailing list