RE: [gentoo-server] qmail <-> openldap-2.1.XX

[Benjamin Coles]

Ricardo,
	The discussion isn't about getting it running but fixing the glitches
in the already made ebuilds. As I said before I have plans to write a
Document on this which will go on gentoo.org so you can follow. It's
pretty straight forward right now and yes you can have a remote ldap
server going, you just need to edit your control files to where it needs
to be pointed.

Thanks,
Benjamin Coles
Gentoo Infrastructure

On Wed, 2003-12-31 at 09:26, Ricardo Nuno wrote:
> Hi,
>
> Just want to ask you guys to not make this discution private,
> alot of people like myself are interressed on it.
>
> Next year i'm going to start testing qmail-ldap, it's something i should had
> started
> this year, but i didn't had time.
>
> One question i already have a LDAP server up and running, is there any
> change for qmail-ldap
> work with a remote LDAP server ?
>
> Best regards,
> RNuno
>
>
> -----Original Message-----
> From: Benjamin Coles [mailto:sj7trunks@g.o]
> Sent: quarta-feira, 31 de Dezembro de 2003 16:27
> To: gentoo-server@l.g.o
> Subject: Re: [gentoo-server] qmail <-> openldap-2.1.XX
>
>
> Aiko,
> 	Much apologies on the missing qmail.schema missing, I made a diff and
> worked on it a month ago but got caught up on other projects. If you
> didn't notice it didn't copy the control files to the right directory.
> My aim is for openldap 2.0.xx series, can you let me know if that patch
> is backwards compatible? I also see that you enabled tls by default
> which should be the choice of the user by setting the ssl flag in
> make.conf. As for openldap 2.1.x series, it's been stable for months
> it's just that we have problems with other programs using berkdb-4 and
> we're not about to upgrade that. Berkdb-4 is a dependancy for openldap
> 2.1 to work, after the latest patch I made gets applied to the tree, we
> can work on moving it to stable and then make another ebuild for
> openldap 2.1 and deem it unstable. My tester has said it worked
> perfectly fine with the patch I gave him so moving it to stable seems
> like a good idea.
> 	I also have plans to release a qmail-ldap document sometime in the
> future so everyone can take the fruits of the running qmail with ldap. I
> wrote the ldap document currently on gentoo.org and I feel like I'm
> going to have to upgrade that as well with the upgrade of openldap 2.1.
> 	Email me directly if you want to help out and we'll talk more.
>
> Thanks,
> Benjamin Coles
> Gentoo Infrastructure
>
> On Wed, 2003-12-31 at 05:07, Aiko Barz wrote:
> > On Tue, Dec 30, 2003 at 11:29:13PM -0800, Benjamin Coles wrote:
> > > Hi there Aiko,
> > > 	There already is a qmail-ldap in the portage that has SMTPAUTH and
> > > TLS... There are a number of fixes that I need to apply to it, I'll try
> > > getting it done by next week. To use the TLS in the ebuild you need an
> > > extra TLS in your make.conf use flags, I know this is out of standard
> > > but not everyone uses this but building with ssl usually gave tls in the
> > > past. Maybe you can make comments on my ebuild after I update the
> > > mishaps in the first one.
> >
> > I also updated the first ebuild in #28203 to get ezmlm support and to
> > get the qmail.schema copied into /etc/openldap/schema.
> > This worked fine for nearly 5 month, i guess.
> > (btw: It's stable stable stable)
> >
> > But the qmail.schema in qmail-ldap-1.03-r1.ebuild will never work with
> > openldap-2.1.XX. To get this done out of the box, you need the new
> > patch from André Oppermann.
> > Then you will realise, that this patch already contains smtp-auth and
> > TLS.
> > Have a look at those features
> > http://bugs.gentoo.org/attachment.cgi?id=22859&action=view.
> > (btw.: This ebuild is also based on the first ebuild. Make a diff!)
> >
> > That ebuild is working at my box right now. The smtp-auth and TLS
> > stuff is working perfectly. The ezmlm-Mainlinglist is doing its job...
> >
> > Openldap-2.0.27-r4 seems to be stable, but after a month uptime there
> > are far to many ESTABLISHED connections. But i donnow. Since there are
> > quite some differences between 2.0 and 2.1 i will stay with
> > openldap-2.1.
> > If gentoo switches to openldap-2.1.XX in the stable tree the openldap
> > users won't be able to restart their openldap-servers. One reason is
> > the broken qmail.schema. So qmail-ldap must be also ready for this
> > moment.
> >
> > Bis denne,
> >         Aiko
>
>