review compilation options for new major version of OpenLDAP

[davidcoutadeur]

The new major version of OpenLDAP is an opportunity to review the compilation options.

Some options must be removed:

• maybe tcpwrappers, which are less and less used and source of problems?

Some options must be added / replaced

[davidcoutadeur]

Current configure line is:

./configure --disable-dependency-tracking --prefix=${LDAPDIR} --libdir=${LDAPDIR}/${_LIB} --enable-hdb --enable-bdb --enable-overlays --enable-modules --enable-dynamic=no --with-tls=openssl --enable-debug --with-cyrus-sasl --enable-spasswd --enable-ppolicy --enable-crypt --enable-ldap -enable-slapi --enable-meta --enable-sock --enable-wrappers --enable-rlookups

[davidcoutadeur]

New proposition of configure options:

• disable-dependency-tracking : disable automatic tracking of dependency change (see https://www.gnu.org/software/automake/manual/html_node/Dependency-Tracking.html). The side effect is that one-time builds are faster. The option does not seem to be recognized anymore
• prefix=${LDAPDIR}
• libdir=${LDAPDIR}/${_LIB}
• enable-hdb obsolete database
• enable-bdb obsolete database
• enable-modules=yes enable dynamic module support (required for compiling backends and overlays as modules)
• enable-overlays=mod as discussed in #21, overlays (memberof, ppolicy, syncprov,...) will now be dynamic. We must now load them with moduleload directive.
• enable-backends=mod as discussed in #21, backends (ldap, mdb, meta,...) will now be dynamic. We must now load them with moduleload directive.
• enable-dynamic=yes enable linking built binaries with dynamic libs
• with-tls=openssl
• enable-debug
• with-cyrus-sasl
• enable-spasswd enable cyrus sasl password verification
• enable-ppolicy=mod
• enable-crypt it may be time to remove this option... See http://www.openldap.org/faq/data/cache/344.html and http://www.openldap.org/faq/data/cache/348.html
• enable-slapi
• enable-mdb=mod for explicit declaration of lmdb build
• enable-ldap=mod
• enable-meta=mod
• enable-sock=mod
• enable-wrappers still asked from some customers
• enable-rlookups
• enable-argon2=yes
• enable-otp=mod
• enable-balancer=mod enable ldap load balancer as a module for slapd

To discuss:

• enable-wt https://man7.org/linux/man-pages/man5/slapd-wt.5.html states wt is experimental, but it may be interesting to include it

Note : as backends and overlays are configured as modules, do not forget to verify that the minimal moduleload line is present in configuration (at least mdb)

[davidcoutadeur]

Some useful info catched today on mailing list:

https://bugs.openldap.org/show_bug.cgi?id=9463

--- Comment #2 from Quanah Gibson-Mount quanah@openldap.org --- I would note that this set of fixes has completely destabilized the test suite, resulting in a 96% failure rate when back-wiredtiger is enabled. There's likely significantly more work that needs to be done to make this backend usable.

[davidcoutadeur]

Final configure line is:

./configure --prefix=${LDAPDIR} --libdir=${LDAPDIR}/${_LIB} --enable-modules=yes --enable-overlays=mod --enable-backends=mod --enable-dynamic=yes --with-tls=openssl --enable-debug --with-cyrus-sasl --enable-spasswd --enable-ppolicy=mod --enable-crypt --enable-slapi --enable-mdb=mod --enable-ldap=mod --enable-meta=mod --enable-sock=mod --enable-wrappers --enable-rlookups --enable-argon2=yes --enable-otp=mod --enable-balancer=mod --enable-sql=no --enable-ndb=no --enable-wt=no --enable-perl=no

At this point (e9a2f14), compilation options seem ready