RE: [gentoo-server] qmail <-> openldap-2.1.XX

[Ricardo Nuno]

Hi,

Just want to ask you guys to not make this discution private,
alot of people like myself are interressed on it.

Next year i'm going to start testing qmail-ldap, it's something i should had
started
this year, but i didn't had time.

One question i already have a LDAP server up and running, is there any
change for qmail-ldap
work with a remote LDAP server ?

Best regards,
RNuno


-----Original Message-----
From: Benjamin Coles [mailto:sj7trunks@g.o]
Sent: quarta-feira, 31 de Dezembro de 2003 16:27
To: gentoo-server@l.g.o
Subject: Re: [gentoo-server] qmail <-> openldap-2.1.XX


Aiko,
	Much apologies on the missing qmail.schema missing, I made a diff and
worked on it a month ago but got caught up on other projects. If you
didn't notice it didn't copy the control files to the right directory.
My aim is for openldap 2.0.xx series, can you let me know if that patch
is backwards compatible? I also see that you enabled tls by default
which should be the choice of the user by setting the ssl flag in
make.conf. As for openldap 2.1.x series, it's been stable for months
it's just that we have problems with other programs using berkdb-4 and
we're not about to upgrade that. Berkdb-4 is a dependancy for openldap
2.1 to work, after the latest patch I made gets applied to the tree, we
can work on moving it to stable and then make another ebuild for
openldap 2.1 and deem it unstable. My tester has said it worked
perfectly fine with the patch I gave him so moving it to stable seems
like a good idea.
	I also have plans to release a qmail-ldap document sometime in the
future so everyone can take the fruits of the running qmail with ldap. I
wrote the ldap document currently on gentoo.org and I feel like I'm
going to have to upgrade that as well with the upgrade of openldap 2.1.
	Email me directly if you want to help out and we'll talk more.

Thanks,
Benjamin Coles
Gentoo Infrastructure

On Wed, 2003-12-31 at 05:07, Aiko Barz wrote:
> On Tue, Dec 30, 2003 at 11:29:13PM -0800, Benjamin Coles wrote:
> > Hi there Aiko,
> > 	There already is a qmail-ldap in the portage that has SMTPAUTH and
> > TLS... There are a number of fixes that I need to apply to it, I'll try
> > getting it done by next week. To use the TLS in the ebuild you need an
> > extra TLS in your make.conf use flags, I know this is out of standard
> > but not everyone uses this but building with ssl usually gave tls in the
> > past. Maybe you can make comments on my ebuild after I update the
> > mishaps in the first one.
>
> I also updated the first ebuild in #28203 to get ezmlm support and to
> get the qmail.schema copied into /etc/openldap/schema.
> This worked fine for nearly 5 month, i guess.
> (btw: It's stable stable stable)
>
> But the qmail.schema in qmail-ldap-1.03-r1.ebuild will never work with
> openldap-2.1.XX. To get this done out of the box, you need the new
> patch from André Oppermann.
> Then you will realise, that this patch already contains smtp-auth and
> TLS.
> Have a look at those features
> http://bugs.gentoo.org/attachment.cgi?id=22859&action=view.
> (btw.: This ebuild is also based on the first ebuild. Make a diff!)
>
> That ebuild is working at my box right now. The smtp-auth and TLS
> stuff is working perfectly. The ezmlm-Mainlinglist is doing its job...
>
> Openldap-2.0.27-r4 seems to be stable, but after a month uptime there
> are far to many ESTABLISHED connections. But i donnow. Since there are
> quite some differences between 2.0 and 2.1 i will stay with
> openldap-2.1.
> If gentoo switches to openldap-2.1.XX in the stable tree the openldap
> users won't be able to restart their openldap-servers. One reason is
> the broken qmail.schema. So qmail-ldap must be also ready for this
> moment.
>
> Bis denne,
>         Aiko