sasl/saslauthd.conf

Tue, 29 Mar 2011 20:04:34 +0200

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Tue, 29 Mar 2011 20:04:34 +0200
changeset 334
4a34d7a82eab
permissions
-rw-r--r--

Rework package yet again, correcting and introducing new buildconf logic:
Conditionally disable bootstrap stage comparison correctly, correct
english grammar, better find system as(1) and ld(1), indotruce detailed
optimization option messages, more completely guess cpu types, allow
profiled bootstrapping without a preinstalled GCC because many other
compilers have long since implemented 64-bit arithmetic, instruct make
to build sequentially (not in sparallel) when building a profiled
bootstrap as GCC online documents recommend, and generally improve
comment blocks.

The single most important correction in this changeset relates to the
GCC changed optimization policy since at least GCC 4.5, in which -march
is always passed and not always correctly guessed. In the case of this
package, allowing GCC to guess the architecture leads to wild build
errors at various subcomponents (zlib, libgcc, libiberty...) and
bootstrap stages. It seems quite platform specific, and the safest
approach to correcting this seems to be explicitly always specifying the
-march argument when bootstrapping GCC. Because the best choice 'native'
is not available when bootstrapping using a foreign (non GCC) compiler,
a guess is made according to rpmmacros l_platform in that case.

It is questionable as to whether these recent optimization changes
on the part of GCC or this package are compatible with each other,
or if either are complete or correct at all. At least applying these
corrections allows this package to build again in most cases test.

     1 ##
     2 ##  saslauthd.conf -- SASL Authentication Daemon Configuration
     3 ##
     5 #   white space separated list of LDAP servers
     6 ldap_servers: ldap://127.0.0.1
     8 #   authentication for restricted LDAP servers
     9 #ldap_bind_dn: cn=operator,ou=Profile,o=example.com
    10 #ldap_bind_pw: secret
    12 #   LDAP version to use (2|3)
    13 #ldap_version 3
    15 #   LDAP timeout
    16 #ldap_timeout 5
    18 #   LDAP aliases (search|find|always|never)
    19 ldap_deref: never
    21 #   follow LDAP referrals ?
    22 ldap_referrals: no
    24 #   restart LDAP I/O operations that fail ?
    25 ldap_restart: yes
    27 #   search scope (sub|one|base)
    28 #ldap_scope: sub
    30 #   starting point for a search
    31 ldap_search_base: MUST-SPECIFY
    33 #   authenticate against LDAP (bind|custom|fastbind)
    34 ldap_auth_method: bind
    36 #   Filter LDAP records, %u = username, %r = realm
    37 #   if ldap_auth_method is 'bind' the filter searches for the DN
    38 #   otherwise the filter searches for the userPassword attribute
    39 #ldap_filter: uid=%u
    41 #   debugging LDAP operation
    42 #ldap_debug 0
    44 #   require and verify server certificate
    45 #ldap_tls_check_peer:  no
    46 #ldap_tls_cacert_file:
    47 #ldap_tls_cacert_dir:
    49 #   list of SSL/TLS ciphers to allow
    50 #ldap_tls_ciphers: DEFAULT
    52 #   files containing client certificate and key
    53 #ldap_tls_cert:
    54 #ldap_tls_key:

mercurial