NetBSD Problem Report #49804

From ef@math.uni-bonn.de  Tue Mar 31 11:03:54 2015
Return-Path: <ef@math.uni-bonn.de>
Received: from mail.netbsd.org (mail.netbsd.org [149.20.53.66])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(Client CN "mail.netbsd.org", Issuer "Postmaster NetBSD.org" (not verified))
	by mollari.NetBSD.org (Postfix) with ESMTPS id 4CFB1A5674
	for <gnats-bugs@gnats.NetBSD.org>; Tue, 31 Mar 2015 11:03:54 +0000 (UTC)
Message-Id: <20150331110348.C75D61BD49@trave.math.uni-bonn.de>
Date: Tue, 31 Mar 2015 13:03:48 +0200 (CEST)
From: ef@math.uni-bonn.de
Reply-To: ef@math.uni-bonn.de
To: gnats-bugs@gnats.NetBSD.org
Subject: nss-pam-ldapd missing from pkgsrc
X-Send-Pr-Version: 3.95

>Number:         49804
>Notify-List:    
>Category:       pkg
>Synopsis:       nss-pam-ldapd missing from pkgsrc
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    he
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Tue Mar 31 11:05:00 +0000 2015
>Last-Modified:  Mon May 29 22:25:01 +0000 2023
>Originator:     Edgar Fuß
>Release:        pkgsrc-2014Q4
>Organization:
	Mathematisches Institut der Universität Bonn
>Environment:

>Description:
	nss-pam-ldapd (a replacement for PADLsoft's nss_ldap/pam-ldap) is missing from pkgsrc.
>How-To-Repeat:
	ls -d */nss-pam-ldapd*
>Fix:
	I did the following port in 2013, based on FreeBSD's 
	GNU-C-libc-nss-compatibility files (which I patch to NetBSD's nss interface).
	I'm running it in production, but have (as stated on tech-userlevel) no idea 
	on how to explicitly test the thread-safe variants. christos@ reported it 
	looked OK to him.
	I didn't test or use pynslcd.

	begin 644 nss-pam-ldapd.tgz
	M'XL(`+MC$%4``^U]^W[;-M)H_Q6?`G7R2RQ;-^IJ.^O=*!)MZ]26O**<-F>[
	MGSZ*I&1N)%)+4DFT63_K>94S`Y`4K[K8\J6IT,8B@<%@``P&@P$PU"TK.Y4F
	MV;$B396?'B<4"N5"K5*!WP)?JQ3@MU@IU?#7"S_QQ5*Q5BN4``+B^5*Y6OJI
	M\DCT!,+,LB63D)^LV71JF'8BW*KT/VC0_?V?GTJV?*M:6RYCO?XOEFM\J5HL
	MT?ZO\,`'N_Y__!#;_^PW*QL3>.B/5'NJJJ9LJDI.OD\9!;Y0J);+2?U?+/)5
	M[/]*H50JE,O8_\5BL5K\J;#MRL:%/WG_OVZK]@>Q^9KC1%9!`MUM&?)G8VKO
	M7W8:]<O^M2!TA58S361I/,YQO5N5J)/96+(U0R<S2]-'Q&$155/VTT2S"'+.
	M6+75\9P,3..SJN<X+IO-$L91^0!'Y0Q3&Z6*!9[/\H4L7R3%XDFE<E*LY#SI
	M0`X+Q4*!.SP\C,6`F4N0,UNH$KYX4BB>E*N!S,!_W/OW)%NK9*KD$/[R-?+^
	M/4<(T89D?Z0I/Y^V;RXOT^0`GD\94K,/S^]<F*D/!IY/,:)OI[,\A3!5>V;J
	MI/"..WREC@%>48>:KBJA!N0."<&F':MZWR;C=_3=-F>R36;Z5!YH"J%_:<+X
	M=-^#35O:?U1CN!\$3E,X6H-%E^%OII`)%)QY0^$S;\9I\A=2H'1X1$,52/Z`
	MJ*:I&T0:FZJDS(FEVN0@CW"0Y`#:T.^*9$M.`I8[\[4*/)_28G)`7E^=.=6(
	M:V`?V,@'%F[C!=C4@5JT,PFV\T7]H]`_%WI8X9M&5X"VAAK.L">AI0_PEV+V
	M^M/A'PK!VNP-/J;3E$^."QG@PT.^P&?X@L,I,^QP8L\<IABQ5S^/8`LX]./C
	M&P:;]=K`31S1Q%&HA4*I/KR^P44IA8P92$_3.OK[$=_C^RL;WU^4TT-41H?"
	MLG'@<,]7U2U5`D((I)"!*DLS2\6D6^F+2H"[9I8T&*LT%6@BX?ZT5.ZYI>&?
	M+ZPQ_P-(GSWF;N]5QHKYGZ^!KH_Z7Z7&%VN5TD],)=C-_T\1%O,_>R"*H5KZ
	M6YL-VK]`W^=N_QJ8O/WLX,W=,/=6LCQ/^#),W"?\TKG;C\"9NOEL\8CP1R<\
	M?U(LQD[=13IUP]_B,17((#&T(8A_0D5_6Q3[%QBER^.9LJ#[D(F50P>VWV>5
	M[/<QR@?[50-^IQE4?38A2"&PA3VSR'?N,(78Q5Z]=R/V>]U/]?-ZJTU.@:1,
	M,.VF7?]8;UV&8MN=WEGGIMT,18LWC88@BJ'8KM"[Z;:YPSO4)-CDQBHHM&^N
	M^@M`POLK8-F*9(Y8?9U,"'HE]"XZS?YUM]/K]#Y="_L3U;XUE#3Y'0K5=)NP
	M]_TO!@KD#/%^I?Y8L^ST`EO?)P/ZIFK-QO:^^26#2@/#M@^OY/24Q+14FOR-
	M[`,@)@O=>OM<@(BVUUKD!%\6P"<4'UF.SY<C.8-30)H$RTO.X/:44X+[FIS!
	MZ4.W!.=U20FL>P$^EB14S%ZIN@+S+$RI"UZED^4B8<'P+"$T#!J=JZM..S(:
	ML/<FAHY,$AC_R^3_=*Y;8UGI7TF?@0_&:D[3[R5C5LE_OLSD?Y4O%?E*E<K_
	M`LP)._G_^&$A_ULZM,1X3)Q>?VL1['.+@*0PR.NQ-E`T,^\D9D"=L\EK5"]]
	ML036@K)*<M.YG(<_AH-`,E4RT'3)G+-YQ('.^]C*FT=*.(\4*CB/%.#_:NP\
	M$H-@,8\<$[YZ4BJ=E(_BYY'R<:8&$PG]P8G$-J;]P4P;*_VI"=B^@61_'X[S
	M@T%]`R#P[B1;INQ+9&_O.7<4L:37^TZ;I=U&XPY#`*RE%^EN=?O7GT">X\SC
	M1$`3$\FV)](4GV0)1BY]&([H#QOO\*1^FYKX^SM;+P3"9`[:.&U#`(`%?1*<
	M--8DBR*#907%-C*-&2WXUK!L_-55VXN#YZ^&^9EA>VX6WX4E89G\QVEC8"FH
	M2]W+[N>&Y?(?-/U"A=E_RR#X:U3_+\!<L)/_3Q!B]7\JW>D"(*#Y??OVC0QG
	MNHR&/YP7B&9;I$%`8)D@W'-<RP8Y81DP^E4%4.C9O@G*I*E)NFTY!D#`EG=9
	M*K1X@`5`Y:14#B\`7*'OS[DP^)4(7SN!A4.E$"OMRX4,7S@BA_2W2N5]K&8<
	MJ.8(!9DN3?IF^MW:\&@/V@1>U6T*?[@^_'K8K8V@0:MTH;,)T$-35:'A&1D@
	MWR?J9*":UJTVW8!\:,X-H$?,N)D$K=J)])`U.V#Z=;,.GGZ=;=3!TZ^;=3"%
	M7[N#-X"&#G:AUZ5DD[ZB[;)!NZ.R,)A#">H2CDO*4ER[^5D>25%,1ALNYC49
	M9$A_8DL#9^%K_>.?I]]1U_D.2)L?^N?=SLUUANPMQO]>AB1(!DC`>)PU?;'D
	M+I.$C\J'6'PT)8*/QB[!1]DK%A]-B>"CL8CO,!$?8"/Q^&A"`KXH?58B/BL6
	MGQL;C\V54%%L;DH0FQN+V++Q=0T(#=J&R3(N0]#:O:3AH..3V"2921)P0:<G
	ML4@R@R3@BE8R46XNZDA\'7!=%\5?FPR=(RYCB'-20N0YL<$>#2*<)0P()R6"
	M<!8=$$&$22/"28D@C!D1$82Q0X*F1(:$#V$,A58B0BL6H1N;@,Z5ZK&#(@:=
	M&[NLNO&,3..3>S<)V2R6DVG\DI[U5?6B(_9$AFTQ`<2@7"2&\"X2PIT208WS
	M1")J3(Q%C0D,=78YU<6E9!<3Z2Y&6X6.<#3Q7==[VYZI0FBW-6&%T&YKWHJB
	MW<KTM4"[Q5EL@?0AD]GR!MC&-!3E@,UGH^@,$L"ZQ8DDA'=K\TD([]:FE2C>
	M[<PN`9;=VB03X-FMS3517GCXE!/E@WO,/'>X3,CBIEBRI'8VRDS5_B*-,^QE
	M@N;<C+-C1J1IFLM^Q_E@L8/8M\G^P5!/[\N&#B#RK622@XQSD@>18U,=9-QX
	M[3]JW\YH-([^3=/#&?[,2`N-#"-A.W,,'B$'L^%0-?_QX>;L3.CVQ=;_%?[)
	M3GH`,#WO,_5>;_NA"&GX+E(/]D#CA_HIK3H#`H).H0TD<[0O33,+6AWBI:$O
	M56/&!CS\@=3Z4L+523N5Q$)/A_H^G>19K@RK6L8Y%\7>TIDWK!*9-VYU`BCB
	M=C%94L8/[>0]#32)<U+%@4?`NQ6[RM'-;OFO[O[>:EXKKL=LAVMQK#PPOV3<
	MQP@.0M?`6V58LB'#'C*>0[BQJK/\B0Q,@@Q,P@Q,%@P<KE<L`Q_2%]8P+,LR
	M=CXD+ID1GB;/S.F'$13[D8(H*ZR/DFPT>$C<X"$Q@X?<+1\!J%H_>`#XD*PS
	M`)RFTO0^9B0'^->3AI0KG6=[/EV+FQ$!S7<88,@',7;,*`W3C6Q'_VTZ8N\Q
	M4K#$*%L[I#A<'3=2(!I;\1YC)3)4Z/(,RL@@PGN-&:>?(L0<Q@[GPTCA3OZ,
	M-'RQXPVW0OAJ)5/$0ZW54J98=0ZU.I#P$QR4R?:PS89EDL5I@W'I#(D8%O6=
	MPZ7H?>\']F1*XRQO^#DD1R:GF:6:_IQN-J?HB?1M9$XS$#V5==N+UNC3V-!'
	M3#[@)J*=&6,7TQ)I!=/N4&%'EZ'T(#NY(P])B)UP7`!*DP^"DNI+LL)I;D9&
	M?=Q,Q>H30X]'O*^]O-8\G4CCL2'O,[P'#D<S<M+>(>$%.#LJ'#BG'#VA]6YW
	M0N#YPF;G?^]W#&#Y_C]>^RN[^_^U6LD]_\OO]O^?("SV_^O*OZ`MR!F(?HAX
	M:Q%_OQ/;(`PREW086/8=XO*VYHN%DU)T:S[^,'!P6__HI%`-7P)RM_5+A0Q_
	M3`[AI\BSF>R`B#>-"]*L7]7/A1Q&T,@&Q:P-M+%FSPG,/!.+#`V3WHTX;]^0
	M!KEDAQ>RECT?J\0]"HQ"736'DJSF0"`>X#]R#;VO*HN&((,Y$901,,_9[/]E
	MR)4$2"=0F(4CB.!I.LV>V41137*C:^2#H>L9BN@OZO`]`-[F9KJ6'4!T3E'_
	M2FG.^P]M6G,K+\/ZDAYDSO;[9U!FJ[F_]]KIH==[=&\SZ^780YW?FB+1MWMA
	M3%/)E":(R1=/50:*/7)PV@<UM6_Q4E`(SHGMZ]-@PMY,SP;H\"6-M8'<GYK:
	M%\EF)"8=8O8BQU^G[%3V-^@.G3"M`O0#6K:J^$Y)N_1,)%`_]>E^FNSW(7??
	M4L=#>#D])7QZ^?(<:\VY2KVK4#BO4PD80V&*5*6,^M-AI>JJ4<[F,DZ:*19^
	MYT@?")[T9:#)5ONO7GUC<ZJ7_#WE@693+*WO5N&S.G<R[K]A:#`&<+!]NO2[
	M%#UR33-MDH?<+0H-$GW`LM"V@SSO`B!N$88NP[HAY=2,O@$L.277O8NN4&_V
	M.^V&T&^U6SUZ.M_I%U'H]7M"]ZK5KO<ZW7V@9[YH!<58-`1M"=0>?O;W,/GO
	M?TD_TK=I"GX8#YX`35*I8"V!\OUY^IU+2PIO"@3[)=PQ6&>W>=WZ9R(]3=LZ
	MFME2;6NJRMI0D_=#/42IP/J$.G6#\B)Y5Q='4GY^N"-?;S60@/N%M+_[&A="
	MXY=`!Z;=YEFGH\C?&/#A&MWDPE)E<3_85VERXG4+3;Y?SV3<_%[&45(SI=/.
	M-<G]>_4)ED2SKU40H?^A<#GB,\='Y/"HE.%K->>B"X=R#V>`V/V]X(*,^%=D
	M)+`DB\WO7XB1P$HLF/F[<V4DQC(8$)GX[L4S0P/Q5A:I`"3,=]Z:[#"U0)ER
	M[(6TP%2*V4/P-70U)^49*1`Q%54!_+!`\24EFUT.`6BH@S3P5FLI1A9$+99'
	MH5JR^B"A0:C0VHT5/[,`R+7)D3>XGG1(88UD#+U79A0(YEQB"B`+<)2%;I93
	MWW64-,J&`Z]&;YQF8?>B_"GL?BRM?-!Z<'B';80\&,]#?7--+L(%_1:XB++%
	M8CD?PSHDP&FI`UIG`$20U`%KZW<XW5!,GN4DQ<H"G@,09RD?Q[/,S$>2&1*T
	M,L92KN%L'0;S#`*KV8JDH$;+V)/"L'J&$"U0.'4,H:$M@$:V%&N6>!JS,7P=
	M8&L'N<.@TV"690Q]L##-I5C2ZF&X+BVLU=<?7`=>!K)D>,%4?[`?)LOK8&>X
	MI0Z\RD0'H)/@7%"/#D!JF4N>!NC>^P.F`<A_OVF`VGVV)/\I+AAYS"'`4XG^
	MU/UE/Q`:!'*-<D%^I(<E?BR1[^>W#47^QAP3EO4!-GEV,9]ZF)Q/9*$7)M\I
	M#[\,\;Z$E!]4NM-S/P^0[I#_?M)]*V*=R?&7K,/[N>O'DM-^SME03M]?0#^W
	MXLW&<L1L0;'@2COE-:+OBC^57P\1Y"]*6K\,0?VR9'26F?=\.'ZF.!R/#!O)
	M\,"`#J(!]@H9/"D](#S0Y*/IDFW0&TF;S`)64(IO.`=8F\T!*`>`O/A*,$LR
	M&JSWF:A(,]M8FE*1WJ?]&DYCI=!$XA][KGN.955WCS_?K^JAW"^VZO1TQE$Q
	M<XQ^":IH^3M:;OES#L/>6RF@^;=HLV&[(VOI"`[HHYG^'/S3K\HCZ`UN/1]B
	M_`/*GE'#<-IE.QI&D`VW84)>AY$VL/XQ=*D#6NN':2%^OG5.^05Y]%FM@5#!
	MI0S['.;``*,_MAH2')GK$O/XVLB"+J^/G2'HTRJB@_)!2T;G6L,#9H?9V@;!
	MT.PP"YAW'C@MS!Q3S^QA%L%-9X3-3()!QIN%#3JS6)L@O8KR8\T$LPUL@J&9
	M8'.F"4\!`4YY3.G_-&;!1"YZ:8*>\O$SROEES1@SXOY<D\##[(8T_X/LA@^4
	M_G^`!4#`<OA#2?.'6P[O(\:?0FN_C^V087DTX^'+DNDO1&U_:;)Z(_OA"EF^
	MD?V0$?10`Z)?G&]N0-QD,HBWHKFU>`X+X@/J'LK]4NO^D//_P?L?34%L=+=U
	MM<`+J_W_5MCW7_A"M4+]__+E4G'G__$I0J#_R=0TOF@*^NPE;30[B:KY19/A
	ME]V*`,X3TV1B*+.Q2NQ;"?T]CHVO%C<W9B:Y;-:OB04Y8**R#1<7O=U&)%DV
	M9N@IPK&GXPU)PFPSU+5LQG,?F^$D72$#R=+P<S-S(NES8J#361C=0\.<L,_.
	MT,*A5/+5F(W1V:0YH="@OI"A:4Q(7K5E;C@&*.:$V#!)NR7FB.NCTE?3Z_%L
	M-*)?IJC/H"`=-$96R!6KZ/YU_2K-08T4@TA!"(B4='_%<QS7N]4L_`:.AI_`
	MF0"PJCA?R;%O-7K_C6`-`:G3DA8>O8;65=2Q.I)LE6+E%%7!4B"SY73"/O7Z
	MFV9U__=,-37(BC=9_`T/'75+IJII:?0**B<;NJXRCYV9$/49]!YL:H,9%FE*
	M@-V)AJ9SZS&5Y,_2""8^=F^"E><X>V8%*I(Z@9;`*F&:OWKR6%.IZ\_G9O)=
	M2`Q!^6],*:?D)I^W6<8*^0]ISO>_"K5RD2_2[[]5=M__>)+PBC@W`$_(HO/)
	M:XZ[_N6\W[GNM3J@;7RL=T]3OHA<@&LHJ'AS?=WI]H2F"W.:^JR:`]4T+&))
	MUM@!.C\7Q`#0*Z).IO:<XW+>-;%<+@__3SZCN]_<@J@]A!F2GRG\OH^:DRNW
	MI'0<EL_FH)*CKMK'FOZY1#'EJ&[>Z+3/6N<W7:%?[YZ+AZ>I;%;1Z#>*LBY&
	M@*0.6Q*+QKI%B[54>69J]CPOS\V9E46@_*8DT%9SBG^\_@^.?RC;QFEVNV6L
	MU/]JON__T>]$\I528:?_/47P1K_;]9DOA,_52!$Z+<_S>;R*RY^4CD\*-2(I
	MTH0(WZ8H'L2+.H\:B8][LH7<48XOY:`]<Z/_I&&]6ZA4:_)0E?A"65&'TD"5
	M9.7H2"I)I6*A,"CQ_."H4.-5F>M>-?EJ826^6EDI#FN2I%2.J[Q4K59J/'\L
	M2</:@"\J1S6U>'1</AX,"IR(QI!5V,I'M>)QA0SFMFHY]9DF?O<2,PP*Y>JQ
	M6J@>'ZEE65'@WU%1&5:4(E\9#@>25!P>J56^+,4A\]]S1ES%XE&E)A>D@E(;
	M5B5`>G1\5"S52L-2N5P^@H&@\H/*4;FP`M<MXAJ6^$%QP,OEDG0LRW*URM>&
	M2O&HI%2+RJ`F%:0!M/JQ7`W@0B2N/W7:5U*A4B[7AL5B656.9%6JEJ7"\:!8
	M'LJ\PI<D&2BK\,>5`)*8+\0@KE(5^KA<46M'/%\IPYM4*Q4J:KDZX$O5H^&Q
	M6JD!:35EIQ@^>PC*?[I6VGH9:W[_%]?_E5*U3-?_E2J_^_[O$X28_@_X9-A&
	M&:N^_U$H59WO/Q=!+E#]O\8C'VRC\%7A3][_^8,L1QUE3.>F-KJUR3[,!C`[
	ME]#+!7[#QR)URS)D38)9DO14^58WQL9HGB$M7<YAUOIX3&A6"YUWH5%`P7A,
	MHB8$RQC:7_$;4%\EBRCJ%W5L3%7%<\/A>+,@UZ;Q+U6V83K&G/]'DO\]@P+K
	M.?)14TQ-5S-$E(8J_4*Q0YEKG4+#AJZXL92D!<67TL`PT6JN(1P6*#JZ.>D"
	MM9(IWY*F]D6ST)QC#..QL,J2F8[./)KU[G4]+U[7?ZUW\2B6;4I`=KM:!;;-
	MPO^-[%&A5$$$^WN-#QU1W$L#@6A*`=*A!*2!XB"-BWI/I(U&R9B:Q@B==#B-
	MUU51):/V&<TQL.#W5#4=6G1FRBJ-8=_5PL:<`)74^&,P(Y`QLQ'+Q%#PSKEK
	M\(%NF.)&@HV&)<<&IC"+$M(U--">A[8JJ)BBT:478L%\$]4^P6<^%R+-PEHY
	M-,D&+((FZ$?&5&U)8U^AA2[X@DD.BR$2=.9EV-!YV"?`)-2&#F@6Q7H6I05-
	M4*@\EK0)FMD`1S%*"!3H:Q&7$*BG,I/51Z*%L%HZF!1#GJ'13W([+0_]P>R7
	M$V`E4Y/&UJ+A:8?1#_7ZJN&-GHN62,3.60\832#P?-WM?&PUA2;Y\`D2!5*_
	MZ5UTNJ3>;A)81_:ZK0\WO4Y7)/_[OW41X-^^Q23*R>U/1/CMNHM?)X0,K:OK
	MRQ:@`;S=>KO7$D1@\';C\J;9:I]G"&`A[4Z/7+:N6K!6)[U.!HM#1-&<I'-&
	MKH0NL'*[5__0NFSU/E&"SEJ]-A9WA@22ZWJWUVK<7,*(N;[I7G=$B@VKU6R)
	MC<MZZTIHY@@0`043X:/0[A%0,R\O_=6$_P.U_"``A?4/EQ05+09JV6QUA48/
	MJ[-X:D";`7&7($&NA48+'X3?!*A)O?LIXZ`5A;_?`!`D(C;F1D@D^RM:!3JD
	M`6OW*Z07VD&\^2#V6KV;GD#..YVFB*@`O2AT/[8:@OB.7'9$VF`WHI"!0GIU
	M6CQ@@=:"9'C^<".V:+NUVCVAV[VA9H8T(KKH_`H-`\36(7>3MG&G3>L,;=3I
	M?D*\V!ZT"S+DUPL!XKO8I+35ZM@6(K1>HX?8?)!0*K1GSU=9TA;.+UOG0KLA
	M8&H'$?W:$H4T]%A+1(`6*_G7^B=:QQM:?>PKH(T]^E@W0WN4M,Y(O?FQA<0[
	MP,`'8LOAF<X9%W'B=,!MR843>E9*<*R4X%>)2_"JE.!4*<:G4L2E4JQ'I22'
	M2LG^E)+=*7%<T'E1R'<1YQR&P?,3B\UDK*KCZZ4IP$CL"K'>7D*^@-!WB><*
	MR'%D\BX`&?"&M-P9DL_GSGU<(?F\V`3*CG5J%*K'!CZ-N'4\&H4<&FWFSVBY
	M@Z*(?Z*'N">ZAW<BO[<@O[,@;K6KH$T\!2UW_O-`WS_KN_Z!$#,<V"U"&#(<
	MGC1XH$.>[]R#?:'$7'Z(NX`9/D,5.D(5<X(J^904%SCJM/IRPAIW(Y<?;EIQ
	MMFGIT:;-O91L>KQIR;&BU9<2HX=X[A)9:R,G'P'6VM#G0M#%PF.S4RK$3XDN
	M$5X.'ZWC#>'%LM%&IX(#;+0V_SRZ`%IZP3OIB&:(S5X,,[TD/EI^Q'&]J\UK
	M,N.FEYJ_0[\OO9F[Y%1=_+FY6+(VO7#\.&3%J1[.(>0DW6/#*\&K=8_5![B7
	M*!^!(]S/JGVL<;CZ2=6/%<>K'V>\)QUJ7G_BV/!.88"]-KW?%;S.]>@L%=9`
	M$F]?O2!>6N?BU<MEI0?K(&OPT.,+HN571=930UX.1[TL9MI0$8F_([&^)K+1
	M#8&8*3]TPG]KJLCST_7<NY.[\-@A?O]_+"LYZW9;9:PZ_UNNE9S]_VJARO.X
	M_U\M%7;G?Y\BO/KY?;?1[(N-;NNZ!V+Z0KB\?,^]XGSG@EUV<([^O7+W(9T4
	MB.@*?[]I=2&B61>N.FV.>]TWY;XU&YC]L4%MOCEZ(2-ORCF,Y3CZC;T]FG^/
	M,^4ODGFZ]_H[QM[M<2`!)Y*NG.Z]O^X*9ZW?WN>M@:;GO713_?=,,U6E3]D5
	MP?!L\2<1#],V6]WW+F0.5@/#/4[]9IM2WT$*X*:*1.UQ4TU!!)B_U3QK70KO
	M]S@.DY!XS*J-R-YK^MUISISI+)8B@6A^[\<0CG'CWSG5MS4)L&K\5TK>_:]*
	MM5BCX[]:V8W_IPC/.OX=1MM<`CCI?;K'.P7E1341]E/OHM/^T&J_7T-&L%K]
	MZ25$</Q[YWBQ&H:^I3)6C/]RL5QRSO]70`&@YS^KY=IN_#]%\(USM_/I&)]9
	M,&H'<[S%"+7.Q[/)"K@L'6,;0%MKP\+3^K#S$!V1ZSI+*YG[@K<I#1V&?K,E
	M]MKU*^$TE0H6\?K[1Z$KMCKM.ZY1[PGGG6Y+$`$*%U@#R5(M[JHN]JC;D1Y-
	MN+7MZ4D^+YGV[<Q4U'\9^BAGF*,0"=Q%YTJXKI\+Z^=H=*[P.!)DN+'4T.54
	M>FY&4_`&J#VG9]I"UUE!<DDC>F>5NVPUA+:(!8_T678\FHZS7XJL!5KMLTX?
	MI2$DOOZ>:]QT0:#>Y9<TI7NWA+NN]QH7`+UV3N>#A!P6)VZ2D8I]CKL1A7ZO
	MT[G$JU4IJ*V!4IL[;]_TO9M7D#!'4.&<X8<"V*1SE[=N)5/-J]\DO,IK!4O@
	M/M:[7@9X_E`7A;L\S`)L9N&XMGB)$VNG\8O0^]NI`T7)M@SYLVISW(>;UF6S
	MWQ3.*'5^^,3K<##7#=EEN`5`X(K<*_J!3>QT0(6\BE>1W>$Q,)SCAGA+E]W.
	M]8XV,A;9_SE-K[J]_MZYAMGR#JTW>TQ`['$AS*<X"/K8&#G+R!7P1ELXIW.D
	M:@_/?`02FJ8T,O2S\3R:),[TCKBB,-ZY/A<!&FL#/US1N[_W"F\DQ[:+H8_G
	MV#C8"(M;RV@%PX_WT:,MFDUN55.EXP=W&.C=:GD>;2F']E!1IRG@F@CMRX`\
	MLNF1PG[CLBZ*`N62H?8->-"^M9PDL8=GY;Q8P&*J6:::S$S5`;H21#$(=J9]
	M<T[YH@Y#I3XF./!TM/F1@F#('^3^4<@>_Y/XGG/?)F.7#J'ISY!5R5OKOU3G
	M6RA:_X61%=#"[OR)H[?82SUZ.(=<&K(T)J)MF'C[W%+5B86'=/%J/#WZ#<**
	M<66V[+^:>55O7+3:0O_ZLMX[ZW2O3JX<*""W_,_<0?8@'6U2]\*E/0XVJB_^
	M=&I8=F*S^@'9,[9M[U(,-*<?BF'*W?H:SY_L-M_O!^3W5WCJ?$CZ?79LB?Q^
	MD/_O[^Z9*R\60#'AK8_?\0N4TGB<]$%/'/=C/)%,J(P%'N>0=>C+"0?2JG%]
	M!\SM"MZ[P*T02/BU^XO8;=SE6107=Y/5FEM8444S3R,]SW$!1H42966!E;QY
	M0SQI_=PJT@\=ENL\VRECU?J_4*YY_E^J)6?]O[O_\R0A7O_G''7VE+!;L[LQ
	M^*.&^/&_W3)6W?\OE,O.^"]5"WCOO\!7=O?_GB8DC/_%ZN)1E\&N]P_$2#4-
	M7]PCKV2OA%Z]?UUO_,*6UW0)V!2NA7:3*H4QAHR_,BW&J6*_W>D*'^].DM>@
	M+-<RI-8]4%K)".%I8X3PE+S8_#RBB\KGYM%=>+P0P[%;+V/M^_^E2K52+CCW
	M_\N[^_]/$.(,MMOV`KG2_T^AZ/K_JA6K=/^_4N8KN_G_"<+._^/._^,:_A_1
	MSX&DZ7[_C\SQX\ZYXQ\[+-NPVU89*^1_L5HH>>N_<H6=_RK6JCOY_P1AY?IO
	MG1U2=EI@CSJ-C%T84K[R+P^IN1A69KVX9<P\L(-V(PK=OU$@C&1QY]W.S?4B
	MDCJ71#B1[K,M\MV=N&\TQQT%I(]^2%\:18+^+I&N!1Y?OF`BC7,I=0Z)!#?[
	MV`['5%/B]_N</!S;X>S3_0!,=>)/71J==V@YWW&=PT4+8'NRC89#6CS=S?3O
	MKY!EFR]<Y]=V'^+$_K70O4(47@5(H#U)L,T(:&R5F%TJG//I;![84/%B3U-T
	M/X7N-03V2'P0/N(6FR2^=+I%DO\?O*[!I!8^!6C-OXW+>>AE'7E91[ZLK&*0
	M=YEO3ER&+TG&175,,L[-E,?IOD>6'BU:VBM).-AP<D\G15AD>3:V^^SE8AO.
	MR9DHO6-M<&I,51U?(K+!L^[D79`LVT,-NSQ]1<Y`#3-52[+0J<Y,_ZP;7_6,
	M;_N9Z6:ZJBI6:)_Z+3J20H5Q2>TL1BR#HQ4,[`[#V&FU@1,O+_M7]5^$_MEE
	M_7PQDND`NJ[W+DYC!@_'48;5V)8:VQZ[N.HT80#`Q`:\`TNF'N:)S?N2S2MQ
	M\__U94OL;;&,5?L_Q8+G_[F&9\'I^@_7@5ND(3'\R>?_]SAWXSD01PUXS>'^
	M/ORK^%@X5W%CCYS8(XX>R&23S[)C,OZ!$((SY9R3O%M#/%N(F)<?H8Q-['_4
	M[E/@R\5J96?_>X(0/8+9%)Q9,K<M;E@E__F*Y_^U6&;^_ZNEZL[_]U,$W_HO
	MT/&X")1!J0/=ABKO=T33N=1U1^QE/3B\BOGZ>_?JCF2')#^SS#SHB?G`H4#R
	M[AT'^IZ\D_`O-,2-_VU_`VJU_=^[_U,JE,IL_[^PV_]_BK"S_^_L_YM^_XF6
	MA_5@].^V`/[`(2K_MZW]K:'_54L1_8^O[.S_3Q%\^M]ZVE]`][ML@^YG4=NR
	M<V4FJ@&ZBN%.%7R)(?D*WO;*6'G^L^*>_^9K97;^IU*K[<Y_/$5XJOT_:^GN
	M'Q4767JGZ(!+OH#FFN][U'L[/4+J$UJ<MS#U`P16M=[U&&KB7NRVA>^11?8.
	M3OY^ETS7DMMM2W<K0#W]`HKSZ=!4U8&E>,0MW7A"<^D]MY[6V2%YR7L5N[#]
	M$)7_V][]6>/^3X7WUO]\@9W_XTN[_9^G"-']']3@8B3#<Q.Z"X\2(K<!'J&,
	M];__5JI6:T6V_P-ZX&[_Y_%#LEN-[96Q]OEOOE@K5=C^?ZV\\__R%.%I]']\
	MBKT<ALJW^['DT++`S>TM"T(Z>]A_PNOOH1BJLS]$ETXXY45U::0."(?),NO<
	M;_<90+P:+<L=U,1#M"]9;7"O2`?MX5\UBSJLZ`N_]81NF\#BP2*S*=ECW[C9
	MHU;F;*=(O^L]T?ZC6D3]HIISM$*/B/15`O+<(U"I;+/=P5-ZO5:C?]5IWEP*
	MHN_3U[LEP0\;HO+_Z?5_WCW_Q>,7P*M,_^=W^_]/$>+U?^_[]3&"R3L)YOFK
	M.=K)@#]LB([_Y]C_+WOCOTC7"7RE4-WI?T\1=OO_N_W_I/W_A.M_2#DM<K?]
	M_\</L5>OMES&)O:?6MFU_^[N_S]%6.XJ=3MEK+K_62GY[G_6>,?_]T[_?XKP
	M1/:?^48W0/]\]S^)Y[M\_9N@83@7`UJ3W&=J`PO=&/7NU^[NC#[MG=$$<Z.J
	MLYW[^7T-DG_D:Z?<J]]^^XU[Y?FT(M-Y]MNW;U$)-);T47XZMV\-/2]-IV-'
	MB65>CW?W.N\;XN?_[=H`-EC_E\LEIO_5=N<_GR3LUO^[]?^F_G\<*;'S`/0#
	MA'CYO]T]H!7ROP0*X4+^.]]_*Q1W]M^G"-']'R]F]87^*"B]T^]JLM1%@/NR
	MV#::NRX$<*?)Y3@Z"^2F\]A(.3;6",;:]D2:1C"XL7)\=!"'+,FW:AB%&RG'
	MQH80#$>1[#1*CHD+9:5KZ$AN-U:.CP[CH)\5B.!P8L,XG.@(#A@1NAWI#']"
	M!).7$D2FXL0=1N1&RK&Q(03?IM'\+$Z.BPSFI@I%.+L;*<?&!A&@FA+.[\3)
	M<9'!W).YLU8*H_`GR(DI062N?A3&Y8N7DQ(BF/`;&C&(G.@('B<^B`8D0A@%
	MBY)CXL)9\<.TT=Q.;!B!$QW"81KX?8AQ!,LB7DY*"&%R!%(8D1<M)\0'T9A3
	M.8R"1<DQ<<&LCH87SKZ(EA/B0VAN)<7X&L'BQLKQT4$<H`&&$;`H.2;.V*E^
	3N[`+N[`+?]3P_P%R6V0:`!@!`&AN
	`
	end

>Release-Note:

>Audit-Trail:
From: Benny Siegert <bsiegert@gmail.com>
To: gnats-bugs@NetBSD.org
Cc: 
Subject: Re: pkg/49804
Date: Sun, 10 Apr 2016 16:49:54 +0200

 If you did not test nor use pynslcd, can we leave it out?

 What=E2=80=99s this in nss-pam-ldapd-pynslcd/Makefile:

 #XXX
 #DEPENDS+=3D py-xxx

From: =?utf-8?Q?Edgar_Fu=C3=9F?= <ef@math.uni-bonn.de>
To: gnats-bugs@NetBSD.org
Cc: 
Subject: Re: pkg/49804
Date: Sun, 10 Apr 2016 18:48:57 +0200

 Thanks for finally picking this up!

 > If you did not test nor use pynslcd, can we leave it out?
 Yes, sure.

 > What=E2=80=99s this in nss-pam-ldapd-pynslcd/Makefile:
 >=20
 > #XXX
 > #DEPENDS+=3D py-xxx
 "Someone who knows about Python has to put the right things here"=

From: Benny Siegert <bsiegert@gmail.com>
To: gnats-bugs@NetBSD.org
Cc: Edgar =?ISO-8859-1?Q?Fu=DF?= <ef@math.uni-bonn.de>,
 pkg-manager@netbsd.org, gnats-admin@netbsd.org, pkgsrc-bugs@netbsd.org,
 ftigeot@wolfpond.org
Subject: Re: pkg/49804
Date: Mon, 18 Apr 2016 22:47:12 +0200

 On Sun, 10 Apr 2016 16:50:01 +0000 (UTC)
 Edgar Fu=DF <ef@math.uni-bonn.de> wrote:

 >  Thanks for finally picking this up!
 > =20
 >  > If you did not test nor use pynslcd, can we leave it out?
 >  Yes, sure.
 > =20
 >  > What=3DE2=3D80=3D99s this in nss-pam-ldapd-pynslcd/Makefile:
 >  >=3D20
 >  > #XXX
 >  > #DEPENDS+=3D3D py-xxx
 >  "Someone who knows about Python has to put the right things here"=3D

 I noticed that pkgsrc-wip already contained a package for nss-pam-ldap. I m=
 erged the two packages: It now contains all your patches but it is a single=
  package including the NSS module, the PAM module and the daemon.

 Please take a look at wip/nss-pam-ldapd and tell me if this is OK. Francois=
 , same for you :). If you don't object, I will import this.

 --=20
 Benny Siegert <bsiegert@gmail.com>

From: Francois Tigeot <ftigeot@wolfpond.org>
To: Benny Siegert <bsiegert@gmail.com>, gnats-bugs@NetBSD.org
Cc: =?UTF-8?Q?Edgar_Fu=c3=9f?= <ef@math.uni-bonn.de>, pkg-manager@netbsd.org,
        gnats-admin@netbsd.org, pkgsrc-bugs@netbsd.org
Subject: Re: pkg/49804
Date: Tue, 19 Apr 2016 11:56:57 +0200

 Benny Siegert wrote:
 > On Sun, 10 Apr 2016 16:50:01 +0000 (UTC) Edgar Fuß
 > <ef@math.uni-bonn.de> wrote:
 >
 >> Thanks for finally picking this up!
 >>
 >>> If you did not test nor use pynslcd, can we leave it out?
 >> Yes, sure.
 >>
 >>> What=E2=80=99s this in nss-pam-ldapd-pynslcd/Makefile: =20 #XXX
 >>> #DEPENDS+=3D py-xxx
 >> "Someone who knows about Python has to put the right things here"=
 >
 > I noticed that pkgsrc-wip already contained a package for
 > nss-pam-ldap. I merged the two packages: It now contains all your
 > patches but it is a single package including the NSS module, the PAM
 > module and the daemon.
 >
 > Please take a look at wip/nss-pam-ldapd and tell me if this is OK.
 > Francois, same for you :). If you don't object, I will import this.

 I don't use pkgsrc anymore; feel free to do whatever you want with this 
 package.

 -- 
 Francois Tigeot

From: Edgar =?iso-8859-1?B?RnXf?= <ef@math.uni-bonn.de>
To: gnats-bugs@NetBSD.org
Cc: 
Subject: Re: pkg/49804
Date: Tue, 19 Apr 2016 12:11:13 +0200

 > I noticed that pkgsrc-wip already contained a package for nss-pam-ldap.
 When I looked at it three years ago, that could only possibly work on Linux.

 > but it is a single package including the NSS module, the PAM module 
 > and the daemon.
 The point of going into the trouble of splitting it up (as discussed on tech-pkg in december, 2013) was that almost every combination of the components makes sense:
 You may want to stick with nss_ldap, but switch to nss-pam-ldapd-pam (or vice versa)
 You may want PAM, but not NSS (or vice versa)
 You may event want a client, but not the server because OpenLDAP has an overlay (slapo-nssov, which is still in my queue of needing to be pkgsrc-ed) speaking the same protocol.

 So I think three separate packages do make sense. At least for me.

Responsible-Changed-From-To: pkg-manager->he
Responsible-Changed-By: bsiegert@NetBSD.org
Responsible-Changed-When: Sun, 02 Jul 2017 13:00:53 +0000
Responsible-Changed-Why:
Havard, you touched it last. The package in wip now contains the changes from
this PR plus yours. I suggest importing the package after the freeze.


From: Benny Siegert <bsiegert@gmail.com>
To: gnats-bugs@NetBSD.org
Cc: pkg-manager@netbsd.org,
 gnats-admin@netbsd.org,
 pkgsrc-bugs@netbsd.org,
 ef@math.uni-bonn.de,
 ftigeot@wolfpond.org,
 Havard Eidnes <he@NetBSD.org>
Subject: Re: pkg/49804
Date: Sun, 2 Jul 2017 13:59:22 +0100

 >> I noticed that pkgsrc-wip already contained a package for =
 nss-pam-ldap.
 > When I looked at it three years ago, that could only possibly work on =
 Linux.

 It looks like he@ (Havard Eidnes) is actually maintaining the package in =
 wip (into which I merged your changes) and has updated it to the latest =
 version. I propose handing this over to him to decide. My proposal is to =
 import as is after the freeze (see below).

 >> but it is a single package including the NSS module, the PAM module=20=

 >> and the daemon.
 > The point of going into the trouble of splitting it up (as discussed =
 on tech-pkg in december, 2013) was that almost every combination of the =
 components makes sense:
 > You may want to stick with nss_ldap, but switch to nss-pam-ldapd-pam =
 (or vice versa)
 > You may want PAM, but not NSS (or vice versa)
 > You may event want a client, but not the server because OpenLDAP has =
 an overlay (slapo-nssov, which is still in my queue of needing to be =
 pkgsrc-ed) speaking the same protocol.
 >=20
 > So I think three separate packages do make sense. At least for me.


 In general, there is nothing wrong with having all the stuff in one =
 package. Merely installing a PAM and/or NSS library does not mean that =
 you are going to use it. In both cases, you need to edit a configuration =
 file to enable them.

 =E2=80=94Benny.=

From: Havard Eidnes <he@NetBSD.org>
To: bsiegert@gmail.com
Cc: gnats-bugs@NetBSD.org, pkg-manager@netbsd.org, gnats-admin@netbsd.org,
 pkgsrc-bugs@netbsd.org, ef@math.uni-bonn.de, ftigeot@wolfpond.org
Subject: Re: pkg/49804
Date: Sun, 02 Jul 2017 18:58:55 +0200 (CEST)

 >>> I noticed that pkgsrc-wip already contained a package for nss-pam-l=
 dap.
 >> When I looked at it three years ago, that could only possibly work o=
 n Linux.
 > =

 > It looks like he@ (Havard Eidnes) is actually maintaining the
 > package in wip (into which I merged your changes) and has updated it
 > to the latest version. I propose handing this over to him to
 > decide. My proposal is to import as is after the freeze (see below).

 Sounds good, and I'm not possessive about the maintainership.  I have
 at least an existence proof that the version I updated to also works
 on NetBSD, with the patches in the package (I seem to recall porting
 them over from the earlier version).  (Not sure those patches are
 portable to e.g. FreeBSD using pkgsrc, though...)

 >>> but it is a single package including the NSS module, the PAM
 >>> module and the daemon.
 >> The point of going into the trouble of splitting it up (as
 >> discussed on tech-pkg in december, 2013) was that almost every
 >> combination of the components makes sense: You may want to stick
 >> with nss_ldap, but switch to nss-pam-ldapd-pam (or vice versa) You
 >> may want PAM, but not NSS (or vice versa) You may event want a
 >> client, but not the server because OpenLDAP has an overlay
 >> (slapo-nssov, which is still in my queue of needing to be
 >> pkgsrc-ed) speaking the same protocol.
 >>
 >> So I think three separate packages do make sense. At least for me.
 >
 > In general, there is nothing wrong with having all the stuff in one
 > package. Merely installing a PAM and/or NSS library does not mean
 > that you are going to use it. In both cases, you need to edit a
 > configuration file to enable them.

 Right.  I, for one, appreciated the integration, and operationally the
 ability to re-authenticate with cached information even if the ldap
 server is down or otherwise inaccessible.  This package doesn't
 actually contain an ldap server (but you all knew that already, I
 suppose).

 I seem to recall I had trouble finding out how to fit the pieces
 together, not sure where an example could be provided.

 Regards,

 - H=E5vard

From: Brett Lymn <blymn@internode.on.net>
To: gnats-bugs@netbsd.org
Cc: 
Subject: Re: pkg/49804
Date: Tue, 30 May 2023 07:53:23 +0930

 --rSIW4owSDXheH2FP
 Content-Type: text/plain; charset=us-ascii
 Content-Disposition: inline


 The getpeercred compat routine is returning pointers to variables on
 function stack, this is dangerous....  The attached patch declares a
 couple of static variables to prevent stack storage addresses being
 returned.

 -- 
 Brett Lymn
 --
 Sent from my NetBSD device.

 "We are were wolves",
 "You mean werewolves?",
 "No we were wolves, now we are something else entirely",
 "Oh"

 --rSIW4owSDXheH2FP
 Content-Type: text/plain; charset=us-ascii
 Content-Disposition: attachment; filename="getpeercred.c.diff"

 --- getpeercred.c	2022-10-11 07:54:45.000000000 +1030
 +++ ../../nss-pam-ldapd-master.modified/compat/getpeercred.c	2023-05-30 07:52:10.429723839 +0930
 @@ -37,6 +37,11 @@

  #include "getpeercred.h"

 +#if defined(HAVE_GETPEEREID)
 +static uid_t tuid;
 +static gid_t tgid;
 +#endif
 +
  /* Note: most of this code is untested, except for the first
           implementation (it may even fail to compile) */

 @@ -96,19 +101,12 @@
    ucred_free(cred);
    return 0;
  #elif defined(HAVE_GETPEEREID)
 -  uid_t tuid;
 -  gid_t tgid;
    if (uid == NULL)
      uid = &tuid;
    if (gid == NULL)
 -    gid = &tguid;
 +    gid = &tgid;
    if (getpeereid(sock, uid, gid))
      return -1;
 -  /* return the data */
 -  if (uid != NULL)
 -    *uid = cred.uid;
 -  if (gid != NULL)
 -    *gid = cred.gid;
    if (pid != NULL)
      *pid = -1; /* we return a -1 pid because we have no usable pid */
    return 0;

 --rSIW4owSDXheH2FP--

>Unformatted:

NetBSD Home
NetBSD PR Database Search

(Contact us) $NetBSD: query-full-pr,v 1.47 2022/09/11 19:34:41 kim Exp $
$NetBSD: gnats_config.sh,v 1.9 2014/08/02 14:16:04 spz Exp $
Copyright © 1994-2023 The NetBSD Foundation, Inc. ALL RIGHTS RESERVED.