OpenLDAP config update from RPM

[Erwin Rol]

Hey all,

I am working on Open Xchange for FC5, and was wondering what the
"correct" way is to add things to a openldap configuration from
"inside"
an RPM.

For example Open Xchange has a openxchange.schema file with schemas,
that i install in /etc/openldap/schema/. Open Xchange also has a file
describing the access rights and indexing, those have to be added to
the /etc/openldap/slapd.conf file. The question is is there a way to add
configuration things to OpenLDAP in the same way as for example with
apache (the conf.d directory) ? Or is the only thing i can do installing
a README and have the user add those things manually ?

TIA,

Erwin

[Avi Kivity]

Erwin Rol wrote:

> Hey all,
>
> I am working on Open Xchange for FC5, and was wondering what the
> "correct" way is to add things to a openldap configuration from
> "inside"
> an RPM.
>
> For example Open Xchange has a openxchange.schema file with schemas,
> that i install in /etc/openldap/schema/. Open Xchange also has a file
> describing the access rights and indexing, those have to be added to
> the /etc/openldap/slapd.conf file. The question is is there a way to add
> configuration things to OpenLDAP in the same way as for example with
> apache (the conf.d directory) ? Or is the only thing i can do installing
> a README and have the user add those things manually ?
>   
>  
you might have the postinstall script edit the file.

-- 
Do not meddle in the internals of kernels, for they are subtle and quick to panic.

[David Hollis]

On Thu, 2006-02-16 at 23:46 +0100, Erwin Rol wrote:
>  Hey all,
>  
>  I am working on Open Xchange for FC5, and was wondering what the
>  "correct" way is to add things to a openldap configuration from
> "inside"
>  an RPM.
>  
>  For example Open Xchange has a openxchange.schema file with schemas,
>  that i install in /etc/openldap/schema/. Open Xchange also has a file
>  describing the access rights and indexing, those have to be added to
>  the /etc/openldap/slapd.conf file. The question is is there a way to add
>  configuration things to OpenLDAP in the same way as for example with
>  apache (the conf.d directory) ? Or is the only thing i can do installing
>  a README and have the user add those things manually ?
>   
Being an Open-Xchange user, I would suggest the following:

Install the open-xchange.schema file in /etc/openldap/schemas
Install the access-rights file in /etc/openldap as
open-xchange-rights.conf or something to that effect.  Don't actually
edit the /etc/openldap/slapd.conf file itself, that should be left to
the admin.  The access rights bits can be included by the admin with a
simple "include open-xchange-access.conf" statement.

-- 
David Hollis <dhollis(a)davehollis.com&gt;

[Erwin Rol]

On Fri, 2006-02-17 at 09:43 -0500, David Hollis wrote:
>  On Thu, 2006-02-16 at 23:46 +0100, Erwin Rol wrote:
>  
>  Being an Open-Xchange user, I would suggest the following:
>  
>  Install the open-xchange.schema file in /etc/openldap/schemas
>  Install the access-rights file in /etc/openldap as
>  open-xchange-rights.conf or something to that effect.  Don't actually
>  edit the /etc/openldap/slapd.conf file itself, that should be left to
>  the admin.  The access rights bits can be included by the admin with a
>  simple "include open-xchange-access.conf" statement. 
That is what i did now, because i saw some other RPM's that used "patch"
to change system config files like postgres, openldap and httpd/tomcat
setups, but that some how looks just to dangerous to me. 

And if you as a user also think that the final configuration step is an
admin job , i will just leave it as I have it now.

Thanks for the feedback,

Erwin

[David Lutterkort]

On Sat, 2006-02-18 at 01:16 +0100, Erwin Rol wrote:
>  That is what i did now, because i saw some other RPM's that used
> "patch"
>  to change system config files like postgres, openldap and httpd/tomcat 
            
                       ^^^^^^^^

Do you remember which packages dealt with postgres that way ?

David

[Erwin Rol]

On Sun, 2006-02-19 at 19:35 -0800, David Lutterkort wrote:
>  On Sat, 2006-02-18 at 01:16 +0100, Erwin Rol wrote:
>  > That is what i did now, because i saw some other RPM's that used
> "patch"
>  > to change system config files like postgres, openldap and httpd/tomcat
>                                      ^^^^^^^^
>  
>  Do you remember which packages dealt with postgres that way ? 
Those "other RPM's" were some Open Xchange RPM's I found on the net,
nothing official. 

-Erwin

[Rudolf Kastl]

2006/2/20, Erwin Rol <mailinglists(a)erwinrol.com&gt;:
>  On Sun, 2006-02-19 at 19:35 -0800, David Lutterkort wrote:
>  > On Sat, 2006-02-18 at 01:16 +0100, Erwin Rol wrote:
>  > > That is what i did now, because i saw some other RPM's that used
> "patch"
>  > > to change system config files like postgres, openldap and httpd/tomcat
>  >                                     ^^^^^^^^
>  >
>  > Do you remember which packages dealt with postgres that way ?
>
>  Those "other RPM's" were some Open Xchange RPM's I found on the net,
>  nothing official.
>
>  -Erwin
>
>
>
>
>  --
>  fedora-devel-list mailing list
>  fedora-devel-list(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-devel-list
>  
actually with a small python script the "include" bit can be added and
removed from the openldap config in a rather clean way so open xchange
can work out of the box if you do it with %post*
if theres no security problem etc with it why not add it? Sure its
always "not that nice" to do stuff like that but in the end i see it
as somewhat of a design flaw of the server package.
a /etc/ldap.config.d/ or something similar would fix it properly in my eyes.

regards,
rudolf kastl