Hello community, here is the log from the commit of package 389-ds for openSUSE:Factory checked in at 2017-08-29 11:44:08 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/389-ds (Old) and /work/SRC/openSUSE:Factory/.389-ds.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "389-ds" Tue Aug 29 11:44:08 2017 rev:10 rq:518666 version:1.3.6.6 Changes: -------- --- /work/SRC/openSUSE:Factory/389-ds/389-ds.changes 2016-11-28 15:10:52.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.389-ds.new/389-ds.changes 2017-08-29 11:44:09.683640576 +0200 @@ -1,0 +2,238 @@ +Tue Aug 15 14:37:47 UTC 2017 - hguo@suse.com + +- Introduce acl as mandatory runtime dependency. + +------------------------------------------------------------------- +Tue Aug 8 14:37:00 UTC 2017 - hguo@suse.com + +- Rename patch 389-ds-base-1.3.2.11_init_fhs.patch -> 0001-init_fhs.patch +- Fix faulty python module import with patch + 0002-use-python2-for-selinux-detection.patch +- Conduct a major clean-up of spec file to remove all outdated macros +- Introduce extra schema files from OpenLDAP distribution with + extra-schema.tgz and LICENSE.openldap + +------------------------------------------------------------------- +Sat May 27 08:46:54 UTC 2017 - mrueckert@suse.de + +- update to 1.3.6.6 + - Ticket 49157 - fix error in ds-logpipe.py + - Ticket 48864 - remove config.h from spal header. + - Ticket 48681 - logconv.pl - Fix SASL Bind stats and rework + report format + - Ticket 49261 - Fix script usage and man pages + - Ticket 49238 - AddressSanitizer: heap-use-after-free in + libreplication + - Ticket 48864 - Fix FreeIPA build + - Ticket 49257 - Reject dbcachesize updates while auto cache + sizing is enabled + - Ticket 49249 - cos_cache is erroneously logging schema checking + failure + - Ticket 49258 - Allow nsslapd-cache-autosize to be modified + while the server is running + - Ticket 49247 - resolve build issues on debian + - Ticket 49246 - ns-slapd crashes in role cache creation + - Ticket 49157 - ds-logpipe.py crashes for non-existing users + - Ticket 49241 - Update man page and usage for db2bak.pl + - Ticket 49075 - Adjust logging severity levels + - Ticket 47662 - db2index not properly evaluating arguments + - Ticket 48989 - fix perf counters +- changes from 1.3.6.5 + - Ticket 49231 - fix sasl mech handling + - Ticket 49233 - Fix crash in persistent search + - Ticket 49230 - slapi_register_plugin creates config entry where + it should not + - Ticket 49135 - PBKDF2 should determine rounds at startup + - Ticket 49236 - Fix CI Tests + - Ticket 48310 - entry distribution should be case insensitive + - Ticket 49224 - without –prefix, $prefixdir would be NONE in + defaults. +- drop 9563d299.patch: included upstream + +------------------------------------------------------------------- +Fri May 19 10:32:03 UTC 2017 - mrueckert@suse.de + +- added 9563d299.patch to fix building slapi-nis and freeipa + +------------------------------------------------------------------- +Thu May 11 11:01:05 UTC 2017 - jengelh@inai.de + +- Do not suppress errors from user/group creation. + Add some safety quoting here and there. + +------------------------------------------------------------------- +Thu Apr 27 21:02:04 UTC 2017 - mrueckert@suse.de + +- update to 1.3.6.4 + - Ticket 49228 - Fix SSE4.2 detection. + - Ticket 49229 - Correct issues in latest commits + - Ticket 49226 - Memory leak in ldap-agent-bin + - Ticket 49214 - Implement htree concept + - Ticket 49119 - Cleanup configure.ac options and defines + - Ticket 49097 - whitespace fixes for pblock change + - Ticket 49097 - Pblock get/set cleanup + - Ticket 49222 - Resolve various test issues on rawhide + - Issue 48978 - Fix the emergency logging functions severity + levels + - Issue 49227 - ldapsearch for nsslapd-errorlog-level returns + incorrect values + - Ticket 49041 - nss won’t start if sql db type set + - Ticket 49223 - Fix sds queue locking + - Issue 49204 - Fix 32bit arch build failures + - Issue 49204 - Need to update function declaration + - Ticket 49204 - Fix lower bounds on import autosize + On small + VM, autotune breaks the access of the suffixes + - Issue 49221 - During an upgrade the provided localhost name is + ignored + - Issue 49220 - Remote crash via crafted LDAP messages (SECURITY + FIX) + - Ticket 49184 - Overflow in memberof + - Ticket 48050 - Add account policy tests to plugins test suite + - Ticket 49207 - Supply docker POC build for DS. + - Issue 47662 - CLI args get removed + - Issue 49210 - Fix regression when checking is password min age + should be checked + - Ticket 48864 - Add cgroup memory limit detection to 389-ds + - Issue 48085 - Expand the repl acceptance test suite + - Ticket 49209 - Hang due to omitted replica lock release + - Ticket 48864 - Cleanup memory detection before we add cgroup + support + - Ticket 48864 - Cleanup up broken format macros and imports + - Ticket 49153 - Remove vacuum lock on transaction cleanup + - Ticket 49200 - provide minimal dse.ldif for python installer + - Issue 49205 - Fix logconv.pl man page + - Issue 49177 - Fix pkg-config file + - Issue 49035 - dbmon.sh shows pages-in-use that exceeds the + cache size + - Ticket 48432 - Linux capabilities on ns-slapd + - Ticket 49196 - Autotune generates crit messages + - Ticket 49194 - Lower default ioblock timeout + - Ticket 49193 - gcc7 warning fixes + - Issue 49039 - password min age should be ignored if password + needs to be reset + - Ticket 48989 - Re-implement lock counter + - Issue 49192 - Deleting suffix can hang server + - Issue 49156 - Modify token :assert: to :expectedresults: + - Ticket 48989 - missing return in counter + - Ticket 48989 - Improve counter overflow fix + - Ticket 49190 - Upgrade lfds to 7.1.1 + - Ticket 49187 - Fix attribute definition + - Ticket 49185 - Fix memleak in compute init + +------------------------------------------------------------------- +Fri Mar 24 13:42:40 UTC 2017 - mrueckert@suse.de + +- update to 1.3.6.3 + This release contains security and bug fixes and a few + enhancements. + - Issue 49177 - rpm would not create valid pkgconfig files(pt2) + - Issue 49186 - Fix NS to improve shutdown relability + - Issue 49174 - nunc-stans can not use negative timeout + - Issue 49076 - To debug DB_DEADLOCK condition, allow to reset + DB_TXN_NOWAIT flag on txn_begin + - Issue 49188 - retrocl can crash server at shutdown + - Issue 47840 - Add setup_ds test suite + - Fix srvcore version dependancy + - Issue 48989 - Overflow in counters and monitor + - Issue 49095 - targetattr wildcard evaluation is incorrectly + case sensitive + - Issue 49177 - rpm would not create valid pkgconfig files + - Issue 49176 - Remove tcmalloc restriction from s390x + - Issue 49157 - ds-logpipe.py crashes for non-existing users + - Issue 49065 - dbmon.sh fails if you have + nsslapd-require-secure-binds enabled + - Issue 49095 - Fix double-free in _cl5NewDBFile() error path + - Issue 49169 - Fix covscan errors(regression) + - Issue 49172 - Fix test schema files + - Issue 49171 - Nunc Stans incorrectly reports a timeout + - Issue 49169 - Fix covscan errors + - Issue 49164 - Change NS to acq-rel semantics for atomics + - Issue 49154 - Nunc Stans stress should assert it has 95% + success rate + - Issue 49165 - pw_verify did not handle external auth + - Issue 49062 - Reset agmt update staus and total init + - Issue 49151 - Remove defunct selinux policy +- add BR for autoconf, autotool, libtool as upstream doesn't ship + a prebuilt configure anymore +- import BR from nunc-stans as it is intree now: + libtevent-devel libtalloc-devel libevent-devel +- added BR for doxygen to build doxygen +- enable auto-dn-suffix feature + +------------------------------------------------------------------- +Mon Feb 20 12:49:23 UTC 2017 - mrueckert@suse.de + +- fix build on factory: libsystemd-* libs got merged into libsystemd. + +------------------------------------------------------------------- +Wed Dec 21 15:48:51 UTC 2016 - mrueckert@suse.de + +- update to 1.3.5.15 + - bz1358565 - Clear and unsalted password types are vulnerable to + timing attack (SECURITY FIX) + - Ticket 49016 - (un)register/migration/remove may fail if there + is no suffix on ‘userRoot’ backend + - Ticket 48328 - Add missing dependency + - Ticket 49009 - args debug logging must be more restrictive + - Ticket 49014 - ns-accountstatus.pl shows wrong status for + accounts inactivated by Account policy plugin + - Ticket 47703 - remove search limit for aci group evaluation + - Ticket 48909 - Replication stops working in FIPS mode +- changes in 1.3.5.14 + - Ticket 48992 - Total init may fail if the pushed schema is + rejected + - Ticket 48832 - Fix CI test suite for password min age + - Ticket 48983 - Configure and Makefile.in from new default paths + work. + - Ticket 48983 - Configure and Makefile.in from new default paths + work. + - Ticket 48983 - generate install path info from autotools + scripts + - Ticket 48944 - on a read only replica invalid state info can + accumulate + - Ticket 48766 - use a consumer maxcsn only as anchor if supplier + is more advanced + - Ticket 48921 - CI Replication stress tests have limits set too + low + - Ticket 48969 - nsslapd-auditfaillog always has an explicit path ++++ 389 more lines (skipped) ++++ between /work/SRC/openSUSE:Factory/389-ds/389-ds.changes ++++ and /work/SRC/openSUSE:Factory/.389-ds.new/389-ds.changes Old: ---- 389-ds-base-1.3.2.11_init_fhs.patch 389-ds-base-1.3.4.14.tar.bz2 New: ---- 0001-init_fhs.patch 0002-use-python2-for-selinux-detection.patch 389-ds-base-1.3.6.6.tar.bz2 LICENSE.openldap extra-schema.tgz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ 389-ds.spec ++++++ --- /var/tmp/diff_new_pack.Chw5JM/_old 2017-08-29 11:44:10.835478202 +0200 +++ /var/tmp/diff_new_pack.Chw5JM/_new 2017-08-29 11:44:10.839477639 +0200 @@ -1,7 +1,7 @@ # # spec file for package 389-ds # -# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -16,50 +16,61 @@ # +# Home directory +%define home /var/lib/dirsrv +# User and group name that own the home directory +%define user_group dirsrv + Name: 389-ds Summary: 389 Directory Server License: GPL-2.0 Group: Productivity/Networking/LDAP/Servers -Version: 1.3.4.14 +Version: 1.3.6.6 Release: 0 Url: http://port389.org/ - -#DL-URL: http://port389.org/wiki/Source -#Git-Clone: git://git.fedorahosted.org/389/ds Source: http://www.port389.org/binaries/%name-base-%version.tar.bz2 +Source1: extra-schema.tgz +Source2: LICENSE.openldap Source9: %name-rpmlintrc # PATCH-FIX-SLES -- Make init scripts LSB conform -Patch1: 389-ds-base-1.3.2.11_init_fhs.patch +Patch1: 0001-init_fhs.patch +Patch2: 0002-use-python2-for-selinux-detection.patch +BuildRoot: %{_tmppath}/%{name}-%{version}-build +BuildRequires: autoconf +BuildRequires: automake BuildRequires: cyrus-sasl-devel BuildRequires: db-devel >= 4.5 +BuildRequires: doxygen BuildRequires: gcc-c++ BuildRequires: krb5-devel +BuildRequires: libcmocka-devel +BuildRequires: libevent-devel +BuildRequires: libtalloc-devel +BuildRequires: libtevent-devel +BuildRequires: libtool # net-snmp-devel is needed to build the snmp ldap-agent BuildRequires: net-snmp-devel >= 5.1.2 BuildRequires: openldap2-devel # pam-devel is required by the pam passthru auth plug-in BuildRequires: pam-devel -%if 0%{?suse_version} < 1220 -BuildRequires: libicu-devel >= 3.4 -BuildRequires: mozilla-nspr-devel >= 4.6.4 -BuildRequires: mozilla-nss-devel >= 3.11.4 -BuildRequires: pcre-devel -BuildRequires: svrcore-devel >= 4.0.3 -%else BuildRequires: pkgconfig +BuildRequires: python3-devel +BuildRequires: python3-setuptools BuildRequires: pkgconfig(icu-i18n) BuildRequires: pkgconfig(icu-uc) BuildRequires: pkgconfig(libpcre) +BuildRequires: pkgconfig(libsystemd) BuildRequires: pkgconfig(nspr) BuildRequires: pkgconfig(nss) BuildRequires: pkgconfig(svrcore) BuildRequires: pkgconfig(systemd) -%endif -BuildRoot: %{_tmppath}/%{name}-%{version}-build +Requires: %_sbindir/service +Requires: acl Requires: cyrus-sasl-digestmd5 Requires: cyrus-sasl-gssapi Requires: mozilla-nss-tools Requires: openldap2-client +Requires: python-selinux Requires: perl(Mozilla::LDAP::API) Requires: perl(Mozilla::LDAP::Conn) Requires: perl(Mozilla::LDAP::Entry) @@ -67,26 +78,10 @@ Requires: perl(Mozilla::LDAP::Utils) Requires: perl(NetAddr::IP) Requires: perl(Socket6) - -%if 0%{?suse_version} < 1220 -%define __without_systemd 0 -%endif - -%bcond_without systemd - -%if 0%{?suse_version} >= 1230 -Requires: %_sbindir/service -%else -Requires: /sbin/service -%endif +Requires(pre): shadow Requires(post): fillup -%if %{with systemd} + %{?systemd_requires} -%else -Requires(post): insserv -Requires(post): /sbin/chkconfig -Requires(preun): /sbin/chkconfig -%endif Obsoletes: 389-ds-base < %version-%release Provides: 389-ds-base = %version-%release @@ -115,25 +110,28 @@ This package contains the development files for 389DS. %prep -%setup -qn %name-base-%version -%patch -P 1 -p1 +%setup -a 1 -qn %name-base-%version +%patch1 -p1 +%patch2 -p1 %build -# openldap has no pkgconfig file; because of that, 389ds will prefer -# mozldap. Force use of openldap. +autoreconf -fi +export CFLAGS="%optflags -std=gnu99" %configure \ - --bindir=%_libexecdir/%name/bin \ - --sbindir=%_libexecdir/%name/sbin \ + --enable-gcc-security \ + --bindir="%_libexecdir/%name/bin" \ + --sbindir="%_libexecdir/%name/sbin" \ --enable-autobind \ - --with-openldap \ -%if %{with systemd} - --with-systemdsystemunitdir \ - --with-systemdsystemconfdir \ + --enable-auto-dn-suffix \ + --enable-nunc-stans \ + --enable-cmocka \ + --with-selinux \ + --with-pythonexec="%_bindir/python3" \ + --with-systemd \ + --with-systemdsystemunitdir="%_unitdir" \ + --with-systemdsystemconfdir="%_sysconfdir/systemd/system" \ + --with-tmpfiles-d="%_tmpfilesdir" \ --with-systemdgroupname=dirsrv.target \ -%else - --with-initddir="%_initddir" \ -%endif - . make %{?_smp_mflags} @@ -144,19 +142,9 @@ install -d "$b/%_sbindir" ln -s "%_libexecdir/%name/sbin/setup-ds.pl" "$b/%_sbindir/setup-ds.pl" -%if %{with systemd} install -d "$b/%_unitdir/dirsrv.target.wants" -%if 0%{?suse_version} >= 1230 ln -s service "$b/%_sbindir/rcdirsrv" ln -s service "$b/%_sbindir/rcdirsrv-snmp" -%else -ln -s /sbin/service "$b/%_sbindir/rcdirsrv" -ln -s /sbin/service "$b/%_sbindir/rcdirsrv-snmp" -%endif -%else -ln -s "%_initddir/dirsrv" "$b/%_sbindir/rcdirsrv" -ln -s "%_initddir/dirsrv-snmp" "$b/%_sbindir/rcdirsrv-snmp" -%endif install -d "$b/%_localstatedir/adm/fillup-templates" for i in "$b/%_sysconfdir/sysconfig"/*; do @@ -166,77 +154,68 @@ # make sure perl scripts have a proper shebang sed -i -e 's|#{{PERL-EXEC}}|#!%_bindir/perl|' "$b/%_datadir/dirsrv/script-templates"/template-*.pl +install -D -d -m 0750 %buildroot%home + +# install extra schema files +cp -R extra-schema "$b/%_datadir/dirsrv/" + +# bring OpenLDAP copyright notice here because it is referenced by several extra schema files +cp %{S:2} ./ -%if %{with systemd} %pre +if ! getent group %user_group >/dev/null; then + %_sbindir/groupadd -f -r %user_group +fi +if ! getent passwd %user_group >/dev/null; then + %_sbindir/useradd -r -g %user_group -s /sbin/nologin -r -d %home -c "User for 389 directory server" %user_group >/dev/null +fi %service_add_pre dirsrv@*.service dirsrv-snmp.service dirsrv.target -%endif %post /sbin/ldconfig -%if %{with systemd} %fillup_only -n dirsrv %fillup_only -n dirsrv.systemd %service_add_post dirsrv@*.service dirsrv-snmp.service dirsrv.target -%else -%fillup_and_insserv dirsrv -%fillup_and_insserv dirsrv-snmp -%endif %preun -%if %{with systemd} %service_del_preun dirsrv@*.service dirsrv-snmp.service dirsrv.target -%else -%stop_on_removal dirsrv -%stop_on_removal dirsrv-snmp -%endif %postun /sbin/ldconfig -%if %{with systemd} %service_del_postun dirsrv@*.service dirsrv-snmp.service dirsrv.target -%else -%restart_on_update dirsrv -%restart_on_update dirsrv-snmp -%insserv_cleanup -%endif %files %defattr(-,root,root) -%doc LICENSE README -%dir %_sysconfdir/dirsrv -%dir %_sysconfdir/dirsrv/schema -%config(noreplace) %_sysconfdir/dirsrv/schema/*.ldif -%dir %_sysconfdir/dirsrv/config -%config(noreplace) %_sysconfdir/dirsrv/config/slapd-collations.conf -%config(noreplace) %_sysconfdir/dirsrv/config/certmap.conf -%config(noreplace) %_sysconfdir/dirsrv/config/ldap-agent.conf -%config(noreplace) %_sysconfdir/dirsrv/config/template-initconfig +%doc LICENSE README LICENSE.openldap +%dir %attr(-,%user_group,%user_group) %home +%config(noreplace) %_sysconfdir/dirsrv/config/* +%config(noreplace) %_sysconfdir/dirsrv/schema/* %_datadir/dirsrv -%if %{with systemd} -%_unitdir/dirsrv* -%else -%_initddir/dirsrv* -%endif -%_libexecdir/%name/ -%_sbindir/* %dir %_libdir/dirsrv -%_libdir/dirsrv/*.so.* -%dir %_libdir/dirsrv/perl +%dir %_libdir/dirsrv/* +%dir %_sysconfdir/dirsrv +%dir %_sysconfdir/dirsrv/config +%dir %_sysconfdir/dirsrv/schema +%_libdir/dirsrv/libns-dshttpd-%version.so %_libdir/dirsrv/perl/*.pm -%dir %_libdir/dirsrv/plugins %_libdir/dirsrv/plugins/*.so -%dir %_libdir/dirsrv/python %_libdir/dirsrv/python/*.py +%_libdir/dirsrv/*.so.* +%_libexecdir/%name/ %_localstatedir/adm/fillup-templates/sysconfig.* %_mandir/man1/* %_mandir/man8/* +%_sbindir/* +%_unitdir/dirsrv* %files devel %defattr(-,root,root) %doc LICENSE README %_includedir/dirsrv -%_libdir/dirsrv/*.so -%_libdir/pkgconfig/dirsrv.pc +%_libdir/dirsrv/libns-dshttpd.so +%_libdir/dirsrv/libnunc-stans.so +%_libdir/dirsrv/libsds.so +%_libdir/dirsrv/libslapd.so +%_libdir/pkgconfig/*.pc %changelog ++++++ 0001-init_fhs.patch ++++++ diff -Ppru 389-ds-base-1.3.2.11.orig/wrappers/initscript.in 389-ds-base-1.3.2.11.init/wrappers/initscript.in --- 389-ds-base-1.3.2.11.orig/wrappers/initscript.in 2014-02-05 22:27:04.000000000 +0100 +++ 389-ds-base-1.3.2.11.init/wrappers/initscript.in 2014-02-17 11:55:35.714453084 +0100 @@ -9,6 +9,16 @@ # piddir: @localstatedir@/run/@package_name@ # datadir: @localstatedir@/lib/@package_name@/slapd-<instance name> # +### BEGIN INIT INFO +# Provides: @package_name@ +# Required-Start: $network $named $syslog $time $remote_fs +# Should-Start: +# Required-Stop: $network $named $syslog $time $remote_fs +# Should-Stop: +# Default-Start: 3 5 +# Default-Stop: +# Description: This starts and stops @package_name@ +### END INIT INFO # Source function library. if [ -f /etc/rc.d/init.d/functions ] ; then diff -Ppru 389-ds-base-1.3.2.11.orig/wrappers/ldap-agent-initscript.in 389-ds-base-1.3.2.11.init/wrappers/ldap-agent-initscript.in --- 389-ds-base-1.3.2.11.orig/wrappers/ldap-agent-initscript.in 2014-02-05 22:27:04.000000000 +0100 +++ 389-ds-base-1.3.2.11.init/wrappers/ldap-agent-initscript.in 2014-02-17 11:55:34.182511462 +0100 @@ -8,6 +8,16 @@ # config: @sysconfdir@/@package_name@/config/ldap-agent.conf # pidfile: @localstatedir@/run/ldap-agent.pid # +### BEGIN INIT INFO +# Provides: @package_name@-snmp +# Required-Start: $network $named $syslog $time $remote_fs +# Should-Start: +# Required-Stop: $network $named $syslog $time $remote_fs +# Should-Stop: +# Default-Start: 3 5 +# Default-Stop: +# Description: @capbrand@ Directory Server SNMP Subagent +### END INIT INFO # Source function library. if [ -f /etc/rc.d/init.d/functions ] ; then ++++++ 0002-use-python2-for-selinux-detection.patch ++++++ Use default python interpreter (python 2) in ds_selinux_enabled python script, because openSUSE and SLES distributions do not yet ship python-selinux in python 3. Howard Guo <hguo@suse.com> 2017-08-08 diff -rupN 389-ds-base-1.3.6.6/ldap/admin/src/scripts/ds_selinux_enabled.in 389-ds-base-1.3.6.6-patched/ldap/admin/src/scripts/ds_selinux_enabled.in --- 389-ds-base-1.3.6.6/ldap/admin/src/scripts/ds_selinux_enabled.in 2017-05-22 18:29:53.000000000 +0200 +++ 389-ds-base-1.3.6.6-patched/ldap/admin/src/scripts/ds_selinux_enabled.in 2017-08-08 16:28:12.999521983 +0200 @@ -1,4 +1,4 @@ -#!@pythonexec@ +#!/usr/bin/env python # BEGIN COPYRIGHT BLOCK # Copyright (C) 2016 Red Hat, Inc. @@ -14,7 +14,6 @@ import sys import selinux -import semanage # Returns 1 for true, 0 for false. ++++++ 389-ds-base-1.3.4.14.tar.bz2 -> 389-ds-base-1.3.6.6.tar.bz2 ++++++ ++++ 300067 lines of diff (skipped) ++++++ LICENSE.openldap ++++++ The OpenLDAP Public License Version 2.8, 17 August 2003 Redistribution and use of this software and associated documentation ("Software"), with or without modification, are permitted provided that the following conditions are met: 1. Redistributions in source form must retain copyright statements and notices, 2. Redistributions in binary form must reproduce applicable copyright statements and notices, this list of conditions, and the following disclaimer in the documentation and/or other materials provided with the distribution, and 3. Redistributions must contain a verbatim copy of this document. The OpenLDAP Foundation may revise this license from time to time. Each revision is distinguished by a version number. You may use this Software under terms of this license revision or under the terms of any subsequent revision of the license. THIS SOFTWARE IS PROVIDED BY THE OPENLDAP FOUNDATION AND ITS CONTRIBUTORS ``AS IS'' AND ANY EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OPENLDAP FOUNDATION, ITS CONTRIBUTORS, OR THE AUTHOR(S) OR OWNER(S) OF THE SOFTWARE BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. The names of the authors and copyright holders must not be used in advertising or otherwise to promote the sale, use or other dealing in this Software without specific, written prior permission. Title to copyright in this Software shall at all times remain with copyright holders. OpenLDAP is a registered trademark of the OpenLDAP Foundation. Copyright 1999-2003 The OpenLDAP Foundation, Redwood City, California, USA. All Rights Reserved. Permission to copy and distribute verbatim copies of this document is granted.