CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

databases/openldap27-server 2.7.2

Open source LDAP server implementation

0
unaddressed
0
VuXML only
0
fixed
0
open problem reports

Port info

Maintainer
delphij@FreeBSD.org
Packages
latest: 2.7.2
Upstream
up to date
Last update
to 2.7.2 · 157772ac1c
Quarterly
2026Q4: 2.7.1
WWW
https://www.OpenLDAP.org/
Links
cgit · VuXML

Install

Package
# pkg install openldap27-server
installs 2.7.2 from latest; from quarterly (2026Q4) 2.7.1
Port
# cd /usr/ports/databases/openldap27-server && make install clean
# make -C /usr/ports/databases/openldap27-server config  # change options first
Size
1.5 MiB download · 6.2 MiB installed
Depends on
databases/openldap27-client 2.7.2, devel/icu 76.1,1, devel/libevent 2.1.13, devel/libltdl 2.6.2, security/cyrus-sasl2 2.1.28_6, security/libsodium 1.0.22
License
OPENLDAP
Creates
user ldap, group ldap
Options
48 of 58 on in the package: ACCESSLOG ADDPARTIAL ALLOP ARGON2 ASYNCMETA AUDITLOG AUTOCA AUTOGROUP CLOAK COLLECT CONSTRAINT DDS DEBUG DENYOP DEREF DNSSRV DYNGROUP DYNLIST EMPTYDS HOMEDIR LASTBIND LASTMOD LLOADD MDB MEMBEROF NESTGROUP NOPS NSSOV OTP PASSWD PPOLICY PROXYCACHE REFINT RELAY REMOTEAUTH RESULTSTATS RETCODE RWM SEQMOD SHA2 SMBPWD SOCK SSSVLV SYNCPROV TRACE TRANSLUCENT UNIQUE VALSORT
Show the 10 options that are off
ACI DYNACL FETCH GSSAPI NETWORKING OUTLOOK PBKDF2 RLOOKUPS SLAPI SLP
pkg-message
Shown after installing
The OpenLDAP server package has been successfully installed.

In order to run the LDAP server, you need to edit
  /usr/local/etc/openldap/slapd.conf
to suit your needs and add the following lines to /etc/rc.conf:
  slapd_enable="YES"
  slapd_flags='-h "ldapi://%2fvar%2frun%2fopenldap%2fldapi/ ldap://0.0.0.0/"'
  slapd_sockets="/var/run/openldap/ldapi"

Then start the server with
  /usr/local/etc/rc.d/slapd start
or reboot.

Try `man slapd' and the online manual at
  http://www.OpenLDAP.org/doc/
for more information.

slapd runs under a non-privileged user id (by default `ldap'),
see /usr/local/etc/rc.d/slapd for more information.

PLEASE NOTE:

Upgrading from openldap27-server 2.6 to 2.7 requires a full dump
and reimport of database.

Automatic data dumps are saved at /var/backups/openldap when shutting down slapd.

Please refer to the OpenLDAP Software documentation at
  http://www.OpenLDAP.org/doc/
for additional upgrade instructions.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 162.7.22.7.1–
FreeBSD 152.7.22.7.1_1–
FreeBSD 142.7.1_12.7.12.7.1_1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 152.7.12.7.1–
FreeBSD 142.7.12.7.12.7.1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 2.7.2.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (7)

Xin LI (delphij) · 2.7.2
databases/openldap27-server: Update 2.7.1 => 2.7.2
157772ac1c
Xin LI (delphij) · 2.7.1_1
databases/openldap2[567]-server: Restore SMBPWD

Since FreeBSD 15 switched to MIT Kerberos, the SMBPWD option
was excluded because smbk5pwd requires Heimdal for its Kerberos
support.  However, the Samba and shadow password hash parts of
the overlay do not depend on Kerberos and are still useful.

On FreeBSD 15 and later, build smbk5pwd without DO_KRB5 instead
of excluding the option altogether.

PR:		299408
Reported by:	Geoffroy Desvernay <dgeo@centrale-med.fr>
7e085b48a0
Xin LI (delphij) · 2.7.1
databases/openldap2[567]-server: fix COLLECT_DESC

The collect overlay implements collective attributes (RFC 3671);
describe it as such instead of "Collect overy Services".
21639dd14f
Xin LI (delphij) · 2.7.1
databases/openldap27-server: update to 2.7.1
67004084f5
Xin LI (delphij) · 2.7.0
{databases,net}/openldap2[567]-server: use USES=localbase:ldflags

Remove redundant CPPFLAGS, LDFLAGS, LIBS, and SQL_LDFLAGS assignments
that are already covered by USES=localbase:ldflags. Also fix COMMENT/WWW
ordering in openldap25-server.

No functional change to the built packages.
4d8abfb329
Xin LI (delphij) · 2.7.0
databases/openldap27-server: fix patch target for ldap.map.in

In OpenLDAP 2.7.0, ldap.map was changed to a template (ldap.map.in)
that is processed during configure. Update the post-patch sed target
accordingly to fix build failure when DEBUG option is disabled.

Reported by:	sunpoet
6bc317ac2e
Xin LI (delphij) · 2.7.0
databases/openldap27-{client,server}: add OpenLDAP 2.7.0

Add new ports for OpenLDAP 2.7.0 (Feature Release) under databases/
category, which better reflects LDAP's nature as a directory database.

Notable changes from 2.6:
- Perl and SQL backends have been removed upstream
- New resultstats contrib overlay for per-operation result code statistics
- slapi-plugin.h header no longer shipped with client library

Update Mk/Uses/ldap.mk to support version 27 with databases/ category
routing (27+ -> databases/, older -> net/), and add 27 as a possible
value in Mk/bsd.default-versions.mk.
db6f075484