For OpenBSD 4.4 and current the flavor "bdb" is broken on openldap
BROKEN=    OpenLDAP 2.3 is incompatible with Berkeley DB 4.6

So, what to do?  My experience is that compiling BDB and OpenLDAP
yourself isn't hard,

yep, I remember compiling apache back in the  middle 90's
For security and laziness, I have been trying to use the ports this decade tho ;)

> If your LDAP use is write-heavy, or you're planning on using replication....

I was using openldap for the password auth for sendmail smtpauth and cyrus-imap
on an older openbsd server and was looking to upgrade then saw this issue.
Hmmm. The passwords don't change often, because that customer has a small mail server for just three domains but they could change if one of the hundred or so users changes their email password, but that is very
infrequent. ... So we are not write heavy.

However, I saw your link to the issue that lbm is removed from openldap 2.4.12... arggg.. geez I really don't like using a storage method that is not used going forward.

So choices for those with older openbsd port of openldap with bdb flavor are:
* don't upgrade ( bad choice)
* upgrade to openbsd 4.4 or current using the official port and renter data storing in the obsolete backend ldbm (ughhh)
* Or go ahead and make a port for openldap 2.4.13 for current openbsd  :(

Since in the above situation the ldap is not write heavy and changes little I could just use the obsolete storage method. But first I'll see how ugly it is to compile OpenLDAP 2.4.13 on current or 4.4...
thanks for the input.

Reply via email to