[Buildroot] [PATCH 1/2] sudo: Add ldap support for sudoers rules

[Buildroot] [PATCH 1/2] sudo: Add ldap support for sudoers rules

[Chris Frederick]

Added Config.in options to enable/disable the option, and check options
in sudo.mk to add openldap as a dependancy and compile with --with-ldap.
Also added more help text to describe behaviour changes.

Signed-off-by: Chris Frederick <cdf123@cdf123.net>
---
 package/sudo/Config.in | 14 ++++++++++++++
 package/sudo/sudo.mk   |  7 +++++++
 2 files changed, 21 insertions(+)

diff --git a/package/sudo/Config.in b/package/sudo/Config.in
index cbef15d..ae8dbf9 100644
--- a/package/sudo/Config.in
+++ b/package/sudo/Config.in
@@ -9,3 +9,17 @@ config BR2_PACKAGE_SUDO
 	  but still allow people to get their work done.
 
 	  http://www.sudo.ws/sudo/
+
+if BR2_PACKAGE_SUDO && BR2_PACKAGE_OPENLDAP
+config BR2_PACKAGE_SUDO_LDAP
+	bool "ldap integration"
+	depends on BR2_PACKAGE_SUDO
+	help
+	  Allows you to manage sudoers rules in a centralized ldap
+	  directory. This restricts the /etc/sudoers file from
+	  defining rules, only defaults will be read. All rules will
+	  need to be provided via ldap configured in /etc/ldap.conf
+
+	  http://www.sudo.ws/man/1.8.15/sudoers.ldap.man.html
+endif
+
diff --git a/package/sudo/sudo.mk b/package/sudo/sudo.mk
index f28312a..45273bb 100644
--- a/package/sudo/sudo.mk
+++ b/package/sudo/sudo.mk
@@ -30,6 +30,13 @@ else
 SUDO_CONF_OPTS += --without-pam
 endif
 
+ifeq ($(BR2_PACKAGE_SUDO_LDAP),y)
+SUDO_DEPENDENCIES += openldap
+SUDO_CONF_OPTS += --with-ldap
+else
+SUDO_CONF_OPTS += --without-ldap
+endif
+
 # mksigname/mksiglist needs to run on build host to generate source files
 define SUDO_BUILD_MKSIGNAME_MKSIGLIST_HOST
 	$(MAKE) $(HOST_CONFIGURE_OPTS) \
-- 
2.7.3

[Buildroot] [PATCH 2/2] postgresql: enable ldap support for pg_service.conf

[Chris Frederick]

Just needed to add --with-ldap to POSTGRESQL_CONF_OPTS and add openldap
to POSTGRESQL_DEPENDENCIES when BR2_PACKAGE_OPENLDAP is on

Signed-off-by: Chris Frederick <cdf123@cdf123.net>
---
 package/postgresql/postgresql.mk | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/package/postgresql/postgresql.mk b/package/postgresql/postgresql.mk
index e2756bf..1b184e7 100644
--- a/package/postgresql/postgresql.mk
+++ b/package/postgresql/postgresql.mk
@@ -57,6 +57,13 @@ POSTGRESQL_DEPENDENCIES += openssl
 POSTGRESQL_CONF_OPTS += --with-openssl
 endif
 
+ifeq ($(BR2_PACKAGE_OPENLDAP),y)
+POSTGRESQL_DEPENDENCIES += openldap
+POSTGRESQL_CONF_OPTS += --with-ldap
+else
+POSTGRESQL_CONF_OPTS += --without-ldap
+endif
+
 define POSTGRESQL_USERS
 	postgres -1 postgres -1 * /var/lib/pgsql /bin/sh - PostgreSQL Server
 endef
-- 
2.7.3

[Buildroot] [PATCH 2/2] postgresql: enable ldap support for pg_service.conf

[Thomas Petazzoni]

Hello,

On Mon, 24 Oct 2016 09:13:18 -0500, Chris Frederick wrote:
> Just needed to add --with-ldap to POSTGRESQL_CONF_OPTS and add openldap
> to POSTGRESQL_DEPENDENCIES when BR2_PACKAGE_OPENLDAP is on
> 
> Signed-off-by: Chris Frederick <cdf123@cdf123.net>
> ---
>  package/postgresql/postgresql.mk | 7 +++++++
>  1 file changed, 7 insertions(+)

Applied to master, thanks.

Thomas
-- 
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com

[Buildroot] [PATCH 1/2] sudo: Add ldap support for sudoers rules

[Chris Frederick]

Disregard this patch.  A new one is on the way.

On 10/24/16 09:13, Chris Frederick wrote:
> Added Config.in options to enable/disable the option, and check options
> in sudo.mk to add openldap as a dependancy and compile with --with-ldap.
> Also added more help text to describe behaviour changes.
> 
> Signed-off-by: Chris Frederick <cdf123@cdf123.net>
> ---
>  package/sudo/Config.in | 14 ++++++++++++++
>  package/sudo/sudo.mk   |  7 +++++++
>  2 files changed, 21 insertions(+)
> 
> diff --git a/package/sudo/Config.in b/package/sudo/Config.in
> index cbef15d..ae8dbf9 100644
> --- a/package/sudo/Config.in
> +++ b/package/sudo/Config.in
> @@ -9,3 +9,17 @@ config BR2_PACKAGE_SUDO
>  	  but still allow people to get their work done.
>  
>  	  http://www.sudo.ws/sudo/
> +
> +if BR2_PACKAGE_SUDO && BR2_PACKAGE_OPENLDAP
> +config BR2_PACKAGE_SUDO_LDAP
> +	bool "ldap integration"
> +	depends on BR2_PACKAGE_SUDO
> +	help
> +	  Allows you to manage sudoers rules in a centralized ldap
> +	  directory. This restricts the /etc/sudoers file from
> +	  defining rules, only defaults will be read. All rules will
> +	  need to be provided via ldap configured in /etc/ldap.conf
> +
> +	  http://www.sudo.ws/man/1.8.15/sudoers.ldap.man.html
> +endif
> +
> diff --git a/package/sudo/sudo.mk b/package/sudo/sudo.mk
> index f28312a..45273bb 100644
> --- a/package/sudo/sudo.mk
> +++ b/package/sudo/sudo.mk
> @@ -30,6 +30,13 @@ else
>  SUDO_CONF_OPTS += --without-pam
>  endif
>  
> +ifeq ($(BR2_PACKAGE_SUDO_LDAP),y)
> +SUDO_DEPENDENCIES += openldap
> +SUDO_CONF_OPTS += --with-ldap
> +else
> +SUDO_CONF_OPTS += --without-ldap
> +endif
> +
>  # mksigname/mksiglist needs to run on build host to generate source files
>  define SUDO_BUILD_MKSIGNAME_MKSIGLIST_HOST
>  	$(MAKE) $(HOST_CONFIGURE_OPTS) \
> 

[Buildroot] [PATCH 1/2] sudo: Add ldap support for sudoers rules

[Chris Frederick]

Added Config.in options to enable/disable the option, and check options
in sudo.mk to add openldap as a dependancy and compile with --with-ldap.

Signed-off-by: Chris Frederick <cdf123@cdf123.net>
---
 package/sudo/Config.in | 12 ++++++++++++
 package/sudo/sudo.mk   |  5 +++++
 2 files changed, 17 insertions(+)

diff --git a/package/sudo/Config.in b/package/sudo/Config.in
index cbef15d..2e9e35a 100644
--- a/package/sudo/Config.in
+++ b/package/sudo/Config.in
@@ -9,3 +9,15 @@ config BR2_PACKAGE_SUDO
 	  but still allow people to get their work done.
 
 	  http://www.sudo.ws/sudo/
+
+if BR2_PACKAGE_SUDO && BR2_PACKAGE_OPENLDAP
+config BR2_PACKAGE_SUDO_LDAP
+	bool "ldap integration"
+	depends on BR2_PACKAGE_SUDO
+	help
+	  Allows you to manage sudoers rules in a centralized ldap
+	  directory.
+
+	  http://www.sudo.ws/man/1.8.15/sudoers.ldap.man.html
+endif
+
diff --git a/package/sudo/sudo.mk b/package/sudo/sudo.mk
index f28312a..b4d071c 100644
--- a/package/sudo/sudo.mk
+++ b/package/sudo/sudo.mk
@@ -30,6 +30,11 @@ else
 SUDO_CONF_OPTS += --without-pam
 endif
 
+ifeq ($(BR2_PACKAGE_SUDO_LDAP),y)
+SUDO_DEPENDENCIES += openldap
+SUDO_CONF_OPTS += --with-ldap
+endif
+
 # mksigname/mksiglist needs to run on build host to generate source files
 define SUDO_BUILD_MKSIGNAME_MKSIGLIST_HOST
 	$(MAKE) $(HOST_CONFIGURE_OPTS) \
-- 
2.7.3

[Buildroot] [PATCH 2/2] postgresql: enable ldap support for pg_service.conf

[Chris Frederick]

Just needed to add --with-ldap to POSTGRESQL_CONF_OPTS and add openldap
to POSTGRESQL_DEPENDENCIES when BR2_PACKAGE_OPENLDAP is on

Signed-off-by: Chris Frederick <cdf123@cdf123.net>
---
 package/postgresql/postgresql.mk | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/package/postgresql/postgresql.mk b/package/postgresql/postgresql.mk
index 7179bbe..ab615d0 100644
--- a/package/postgresql/postgresql.mk
+++ b/package/postgresql/postgresql.mk
@@ -57,6 +57,11 @@ POSTGRESQL_DEPENDENCIES += openssl
 POSTGRESQL_CONF_OPTS += --with-openssl
 endif
 
+ifeq ($(BR2_PACKAGE_OPENLDAP),y)
+POSTGRESQL_DEPENDENCIES += openldap
+POSTGRESQL_CONF_OPTS += --with-ldap
+endif
+
 define POSTGRESQL_USERS
 	postgres -1 postgres -1 * /var/lib/pgsql /bin/sh - PostgreSQL Server
 endef
-- 
2.7.3

[Buildroot] [PATCH 2/2] postgresql: enable ldap support for pg_service.conf

[Peter Seiderer]

Hello Chris,

On Wed, 19 Oct 2016 11:08:30 -0500, Chris Frederick <cdf123@cdf123.net> wrote:

> Just needed to add --with-ldap to POSTGRESQL_CONF_OPTS and add openldap
> to POSTGRESQL_DEPENDENCIES when BR2_PACKAGE_OPENLDAP is on
> 
> Signed-off-by: Chris Frederick <cdf123@cdf123.net>
> ---
>  package/postgresql/postgresql.mk | 5 +++++
>  1 file changed, 5 insertions(+)
> 
> diff --git a/package/postgresql/postgresql.mk b/package/postgresql/postgresql.mk
> index 7179bbe..ab615d0 100644
> --- a/package/postgresql/postgresql.mk
> +++ b/package/postgresql/postgresql.mk
> @@ -57,6 +57,11 @@ POSTGRESQL_DEPENDENCIES += openssl
>  POSTGRESQL_CONF_OPTS += --with-openssl
>  endif
>  
> +ifeq ($(BR2_PACKAGE_OPENLDAP),y)
> +POSTGRESQL_DEPENDENCIES += openldap
> +POSTGRESQL_CONF_OPTS += --with-ldap
> +endif
> +
>  define POSTGRESQL_USERS
>  	postgres -1 postgres -1 * /var/lib/pgsql /bin/sh - PostgreSQL Server
>  endef

Tested-by: Peter Seiderer <ps.report@gmx.net>

Compile tested (and checked for the 'build with LDAP support... yes' configure output).

Regards,
Peter

[Buildroot] [PATCH 2/2] postgresql: enable ldap support for pg_service.conf

[Arnout Vandecappelle]

On 19-10-16 18:08, Chris Frederick wrote:
> Just needed to add --with-ldap to POSTGRESQL_CONF_OPTS and add openldap
> to POSTGRESQL_DEPENDENCIES when BR2_PACKAGE_OPENLDAP is on
> 
> Signed-off-by: Chris Frederick <cdf123@cdf123.net>
> ---
>  package/postgresql/postgresql.mk | 5 +++++
>  1 file changed, 5 insertions(+)
> 
> diff --git a/package/postgresql/postgresql.mk b/package/postgresql/postgresql.mk
> index 7179bbe..ab615d0 100644
> --- a/package/postgresql/postgresql.mk
> +++ b/package/postgresql/postgresql.mk
> @@ -57,6 +57,11 @@ POSTGRESQL_DEPENDENCIES += openssl
>  POSTGRESQL_CONF_OPTS += --with-openssl
>  endif
>  
> +ifeq ($(BR2_PACKAGE_OPENLDAP),y)
> +POSTGRESQL_DEPENDENCIES += openldap
> +POSTGRESQL_CONF_OPTS += --with-ldap

 Same here: add --without-ldap.

 Regards,
 Arnout

> +endif
> +
>  define POSTGRESQL_USERS
>  	postgres -1 postgres -1 * /var/lib/pgsql /bin/sh - PostgreSQL Server
>  endef
> 

-- 
Arnout Vandecappelle                          arnout at mind be
Senior Embedded Software Architect            +32-16-286500
Essensium/Mind                                http://www.mind.be
G.Geenslaan 9, 3001 Leuven, Belgium           BE 872 984 063 RPR Leuven
LinkedIn profile: http://www.linkedin.com/in/arnoutvandecappelle
GPG fingerprint:  7493 020B C7E3 8618 8DEC 222C 82EB F404 F9AC 0DDF

[Buildroot] [PATCH 2/2] postgresql: enable ldap support for pg_service.conf

[Peter Seiderer]

Hello Arnout, Chris,

On Fri, 21 Oct 2016 21:14:16 +0200, Arnout Vandecappelle <arnout@mind.be> wrote:

> 
> 
> On 19-10-16 18:08, Chris Frederick wrote:
> > Just needed to add --with-ldap to POSTGRESQL_CONF_OPTS and add openldap
> > to POSTGRESQL_DEPENDENCIES when BR2_PACKAGE_OPENLDAP is on
> > 
> > Signed-off-by: Chris Frederick <cdf123@cdf123.net>
> > ---
> >  package/postgresql/postgresql.mk | 5 +++++
> >  1 file changed, 5 insertions(+)
> > 
> > diff --git a/package/postgresql/postgresql.mk b/package/postgresql/postgresql.mk
> > index 7179bbe..ab615d0 100644
> > --- a/package/postgresql/postgresql.mk
> > +++ b/package/postgresql/postgresql.mk
> > @@ -57,6 +57,11 @@ POSTGRESQL_DEPENDENCIES += openssl
> >  POSTGRESQL_CONF_OPTS += --with-openssl
> >  endif
> >  
> > +ifeq ($(BR2_PACKAGE_OPENLDAP),y)
> > +POSTGRESQL_DEPENDENCIES += openldap
> > +POSTGRESQL_CONF_OPTS += --with-ldap
> 
>  Same here: add --without-ldap.

Not needed for this option (as with openssl), because there is no
auto detection in case the option is not given (as opposed to the
readline and zlib options), see [1] for discussion of this...

Should have added a comment about this back in 2014...

Regards,
Peter

[1] http://lists.busybox.net/pipermail/buildroot/2014-March/093215.html

> 
>  Regards,
>  Arnout
> 
> > +endif
> > +
> >  define POSTGRESQL_USERS
> >  	postgres -1 postgres -1 * /var/lib/pgsql /bin/sh - PostgreSQL Server
> >  endef
> > 
>