diff --git a/net/openldap26-server/Makefile b/net/openldap26-server/Makefile
index 24c18a9f55a6..bd375c80b447 100644
--- a/net/openldap26-server/Makefile
+++ b/net/openldap26-server/Makefile
@@ -1,459 +1,487 @@
 PORTNAME=		openldap
-DISTVERSION=		2.6.12
+DISTVERSION=		2.6.13
 CATEGORIES=		net databases
 MASTER_SITES=		https://www.openldap.org/software/download/OpenLDAP/%SUBDIR%/ \
 			http://gpl.savoirfairelinux.net/pub/mirrors/openldap/%SUBDIR%/ \
 			http://repository.linagora.org/OpenLDAP/%SUBDIR%/ \
 			http://mirror.eu.oneandone.net/software/openldap/%SUBDIR%/ \
 			ftp://ftp.ntua.gr/mirror/OpenLDAP/%SUBDIR%/ \
 			https://mirror-hk.koddos.net/OpenLDAP/%SUBDIR%/ \
 			ftp://ftp.dti.ad.jp/pub/net/OpenLDAP/%SUBDIR%/ \
 			https://mirror.koddos.net/OpenLDAP/%SUBDIR%/ \
 			https://mirror.lyrahosting.com/OpenLDAP/%SUBDIR%/ \
 			ftp://ftp.OpenLDAP.org/pub/OpenLDAP/%SUBDIR%/ \
 			http://www.openldap.org/software/download/OpenLDAP/%SUBDIR%/
 MASTER_SITE_SUBDIR=	openldap-release
 .if defined(CLIENT_ONLY)
 PKGNAMESUFFIX=		26-client
 .else
 PKGNAMESUFFIX=		26-server
 .endif
 
 MAINTAINER=		delphij@FreeBSD.org
 WWW=		https://www.OpenLDAP.org/
 .if defined(CLIENT_ONLY)
 COMMENT=		Open source LDAP client implementation
 .else
 COMMENT=		Open source LDAP server implementation
 .endif
 
 LICENSE=		OPENLDAP
 LICENSE_NAME=		OpenLDAP Public License
 LICENSE_FILE=		${WRKSRC}/LICENSE
 LICENSE_PERMS=		dist-mirror dist-sell pkg-mirror pkg-sell auto-accept
 
 # :keepla because port uses lt_dlopen
 USES=			cpe gmake libtool:keepla localbase ssl tar:tgz
 BUILD_DEPENDS+=		autoconf>0:devel/autoconf
 
 .if defined(CLIENT_ONLY)
 CONFLICTS_INSTALL=	${PORTNAME}2[0-57-9]-client ${PORTNAME}-client
 .else
 CONFLICTS_INSTALL=	${PORTNAME}2[0-57-9]-server ${PORTNAME}-server
 .endif
 
 GNU_CONFIGURE=		yes
 GNU_CONFIGURE_MANPREFIX=${PREFIX}/share
 
 PORTREVISION_CLIENT=	0
 PORTREVISION_SERVER=	0
 OPENLDAP_SHLIB_MAJOR=	2
 OPENLDAP_SHLIB_MINOR=	0.200
 
 OPTIONS_DEFINE=		DEBUG FETCH GSSAPI
 OPTIONS_DEFAULT+=	DEBUG
 
 FETCH_DESC=		Enable fetch(3) support
 GSSAPI_DESC=		With GSSAPI support
 
 FETCH_CONFIGURE_WITH=	fetch
 
 GSSAPI_RUN_DEPENDS=		cyrus-sasl-gssapi>0:security/cyrus-sasl2-gssapi
 
 .if defined(CLIENT_ONLY)
 OPTIONS_DEFINE+=	DOCS
 .else
 OPTIONS_GROUP=		BKNDS OVLYS
 BKNDS_DESC=		OpenLDAP backends
 BKNDS_DEFAULTS=		ASYNCMETA DNSSRV MDB PASSWD RELAY SOCK
 OPTIONS_GROUP_BKNDS+=	${BKNDS_DEFAULTS}
 OPTIONS_GROUP_BKNDS+=	PERL SQL
 
 OVLYS_DESC=		OpenLDAP overlays
 OPTIONS_GROUP_OVLYS+=	ACCESSLOG
 OPTIONS_GROUP_OVLYS+=	ADDPARTIAL
 OPTIONS_GROUP_OVLYS+=	ALLOP
 OPTIONS_GROUP_OVLYS+=	AUTOCA
 OPTIONS_GROUP_OVLYS+=	AUDITLOG
 OPTIONS_GROUP_OVLYS+=	AUTOGROUP
 OPTIONS_GROUP_OVLYS+=	CLOAK
 OPTIONS_GROUP_OVLYS+=	COLLECT
 OPTIONS_GROUP_OVLYS+=	CONSTRAINT
 OPTIONS_GROUP_OVLYS+=	DDS
 OPTIONS_GROUP_OVLYS+=	DENYOP
 OPTIONS_GROUP_OVLYS+=	DEREF
 OPTIONS_GROUP_OVLYS+=	DYNGROUP
 OPTIONS_GROUP_OVLYS+=	DYNLIST
 OPTIONS_GROUP_OVLYS+=	EMPTYDS
 OPTIONS_GROUP_OVLYS+=	HOMEDIR
 OPTIONS_GROUP_OVLYS+=	LASTBIND
 OPTIONS_GROUP_OVLYS+=	LASTMOD
 OPTIONS_GROUP_OVLYS+=	MEMBEROF
-OPTIONS_GROUP_OVLYS+=	NOPS
 OPTIONS_GROUP_OVLYS+=	NESTGROUP
+OPTIONS_GROUP_OVLYS+=	NOPS
+OPTIONS_GROUP_OVLYS+=	NSSOV
 OPTIONS_GROUP_OVLYS+=	OTP
 OPTIONS_GROUP_OVLYS+=	PROXYCACHE
 OPTIONS_GROUP_OVLYS+=	PPOLICY
 OPTIONS_GROUP_OVLYS+=	REFINT
 OPTIONS_GROUP_OVLYS+=	REMOTEAUTH
 OPTIONS_GROUP_OVLYS+=	RETCODE
 OPTIONS_GROUP_OVLYS+=	RWM
 OPTIONS_GROUP_OVLYS+=	SEQMOD
 OPTIONS_GROUP_OVLYS+=	SHA2
 OPTIONS_GROUP_OVLYS+=	SMBPWD
 OPTIONS_GROUP_OVLYS+=	SSSVLV
 OPTIONS_GROUP_OVLYS+=	SYNCPROV
 OPTIONS_GROUP_OVLYS+=	TRACE
 OPTIONS_GROUP_OVLYS+=	TRANSLUCENT
 OPTIONS_GROUP_OVLYS+=	UNIQUE
 OPTIONS_GROUP_OVLYS+=	VALSORT
 
 OPTIONS_DEFINE+=	DYNACL ACI
 OPTIONS_DEFINE+=	RLOOKUPS SLP SLAPI
 OPTIONS_DEFINE+=	PBKDF2
 OPTIONS_DEFINE+=	OUTLOOK
 OPTIONS_DEFINE+=	ARGON2
 OPTIONS_DEFINE+=	LLOADD
+OPTIONS_DEFINE+=	NETWORKING
 
 OPTIONS_EXCLUDE_FreeBSD_15=	SMBPWD	# Only works with Heimdal
 OPTIONS_EXCLUDE_FreeBSD_16=	SMBPWD	# Only works with Heimdal
 
 OPTIONS_DEFAULT+=	${BKNDS_DEFAULTS}
 OPTIONS_DEFAULT+=	${OPTIONS_GROUP_OVLYS}
 OPTIONS_DEFAULT+=	ARGON2 LLOADD
 
 OPTIONS_SUB=		yes
 
 ACI_DESC=		Per-object ACI (experimental)
 ARGON2_DESC=		Argon2 password hashing module
 DYNACL_DESC=		Run-time loadable ACL (experimental)
 LLOADD_DESC=		Enable load balancer
+NETWORKING_DESC=	Require full network configuration (NETWORKING) before slapd starts
 OUTLOOK_DESC=		Force caseIgnoreOrderingMatch on name attribute (experimental)
 RLOOKUPS_DESC=		With reverse lookups of client hostnames
 SLAPI_DESC=		With Netscape SLAPI plugin API (experimental)
 SLP_DESC=		With SLPv2 (RFC 2608) support
 
 ASYNCMETA_DESC=		With asynchronous metadirectory backend
 DNSSRV_DESC=		With Dnssrv backend
 MDB_DESC=		With Memory-Mapped DB backend
 SQL_DESC=		With SQL backend
 PASSWD_DESC=		With Passwd backend
 PERL_DESC=		With Perl backend
 RELAY_DESC=		With Relay backend
 SOCK_DESC=		With Sock backend
 
 ACCESSLOG_DESC=		With In-Directory Access Logging overlay
 AUDITLOG_DESC=		With Audit Logging overlay
 AUTOCA_DESC=		With Automatic Certificate Authority overlay
 COLLECT_DESC=		With Collect overy Services overlay
 CONSTRAINT_DESC=	With Attribute Constraint overlay
 DDS_DESC=		With Dynamic Directory Services overlay
 DEREF_DESC=		With Dereference overlay
 DYNGROUP_DESC=		With Dynamic Group overlay
 DYNLIST_DESC=		With Dynamic List overlay
 HOMEDIR_DESC=		With Home Directory Management overlay
 MEMBEROF_DESC=		With Reverse Group Membership overlay
 NESTGROUP_DESC=		With nestgroup overlay
 NOPS_DESC=		With nops overlay
+NSSOV_DESC=		With NSS/PAM overlay [baked in nslcd(8)]
 OTP_DESC=		With OTP 2-factor authentication overlay
 PPOLICY_DESC=		With Password Policy overlay
 PROXYCACHE_DESC=	With Proxy Cache overlay
 REFINT_DESC=		With Referential Integrity overlay
 REMOTEAUTH_DESC=	With Deferred Authentication overlay
 RETCODE_DESC=		With Return Code testing overlay
 RWM_DESC=		With Rewrite/Remap overlay
 SEQMOD_DESC=		With Sequential Modify overlay
 SSSVLV_DESC=		With ServerSideSort/VLV overlay
 SYNCPROV_DESC=		With Syncrepl Provider overlay
 TRANSLUCENT_DESC=	With Translucent Proxy overlay
 UNIQUE_DESC=		With attribute Uniqueness overlay
 VALSORT_DESC=		With Value Sorting overlay
 
 ADDPARTIAL_DESC=	With addpartial overlay (experimental)
 ALLOP_DESC=		With allop overlay (experimental)
 AUTOGROUP_DESC=		With autogroup overlay (experimental)
 CLOAK_DESC=		With cloak overlay (experimental)
 DENYOP_DESC=		With denyop overlay (experimental)
 EMPTYDS_DESC=		With emptyds overlay (experimental)
 LASTBIND_DESC=		With lastbind overlay
 LASTMOD_DESC=		With lastmod overlay (experimental)
 TRACE_DESC=		With Trace overlay
 
 PBKDF2_DESC=		With PBKDF2 hash password support
 SHA2_DESC=		With SHA2 Password hashes overlay
 SMBPWD_DESC=		With Samba Password hashes overlay
 
 ACCESSLOG_CONFIGURE_ENABLE=	accesslog=mod
 ACI_CONFIGURE_ENABLE=		aci
 ARGON2_CONFIGURE_ENABLE=	argon2
 ARGON2_CONFIGURE_WITH=		argon2=libsodium
 ARGON2_LIB_DEPENDS=		libsodium.so:security/libsodium
 ASYNCMETA_CONFIGURE_ENABLE=	asyncmeta=mod
 AUDITLOG_CONFIGURE_ENABLE=	auditlog=mod
 AUTOCA_CONFIGURE_ENABLE=	autoca=mod
 COLLECT_CONFIGURE_ENABLE=	collect=mod
 CONSTRAINT_CONFIGURE_ENABLE=	constraint=mod
 DDS_CONFIGURE_ENABLE=		dds=mod
 DEBUG_CONFIGURE_ENABLE=		debug
 DEREF_CONFIGURE_ENABLE=		deref=mod
 DNSSRV_CONFIGURE_ENABLE=	dnssrv=mod
 DYNACL_CONFIGURE_ENABLE=	dynacl
 DYNGROUP_CONFIGURE_ENABLE=	dyngroup=mod
 DYNLIST_CONFIGURE_ENABLE=	dynlist=mod
 HOMEDIR_CONFIGURE_ENABLE=	homedir=mod
 LLOADD_CONFIGURE_ENABLE=	balancer=mod
 LLOADD_LIB_DEPENDS=		libevent.so:devel/libevent
 MDB_CONFIGURE_ENABLE=		mdb=yes
 MEMBEROF_CONFIGURE_ENABLE=	memberof=mod
 NESTGROUP_CONFIGURE_ENABLE=	nestgroup=mod
 OTP_CONFIGURE_ENABLE=		otp=mod
 PASSWD_CONFIGURE_ENABLE=	passwd=mod
 PERL_CONFIGURE_ENABLE=		perl=mod
 PERL_CONFIGURE_ENV=		PERLBIN="${PERL}"
 PERL_USES=			perl5
 PPOLICY_CONFIGURE_ENABLE=	ppolicy=mod
 PROXYCACHE_CONFIGURE_ENABLE=	proxycache=mod
 REFINT_CONFIGURE_ENABLE=	refint=mod
 RELAY_CONFIGURE_ENABLE=		relay=yes
 REMOTEAUTH_CONFIGURE_ENABLE=	remoteauth=mod
 RETCODE_CONFIGURE_ENABLE=	retcode=mod
 RLOOKUPS_CONFIGURE_ENABLE=	rlookups
 RWM_CONFIGURE_ENABLE=		rwm=mod
 SEQMOD_CONFIGURE_ENABLE=	seqmod=mod
 SLAPI_CONFIGURE_ENABLE=		slapi
 SLAPI_USE=			LDCONFIG
 SLP_CONFIGURE_ENABLE=		slp
 SLP_LIB_DEPENDS=		libslp.so:net/openslp
 SOCK_CONFIGURE_ENABLE=		sock=mod
 SQL_CONFIGURE_ENABLE=		sql=mod
 SQL_LDFLAGS=			-L${LOCALBASE}/lib
 SQL_LIB_DEPENDS=		libodbc.so:databases/unixODBC
 SSSVLV_CONFIGURE_ENABLE=	sssvlv=mod
 SYNCPROV_CONFIGURE_ENABLE=	syncprov=yes
 TRANSLUCENT_CONFIGURE_ENABLE=	translucent=mod
 UNIQUE_CONFIGURE_ENABLE=	unique=mod
 VALSORT_CONFIGURE_ENABLE=	valsort=mod
 
 # Force using caseIgnoreOrderingMatch on 'name' attribute.
 # This may be a violation of RFC 4519 2.18 definition.
 # See http://www.openldap.org/lists/openldap-technical/201211/msg00175.html
 OUTLOOK_EXTRA_PATCHES=		${FILESDIR}/extrapatch-outlook-servers__slapd__schema_prep.c
 .endif
 
 CONFIGURE_SED=		-e 's,uuid/uuid.h,xxuuid/uuid.h,g'
 
 .include <bsd.port.options.mk>
 
 .if defined(CLIENT_ONLY)
 OPENLDAP_PORTREVISION=	${PORTREVISION_CLIENT}
 OPENLDAP_PKGFILESUFX=	.client
 
 PORTDOCS=		CHANGES drafts rfc
 
 CONFIGURE_ARGS+=	--disable-slapd \
 			--disable-monitor \
 			--disable-relay \
 			--disable-syncprov
 USE_LDCONFIG=		yes
 .else
 OPENLDAP_PORTREVISION=	${PORTREVISION_SERVER}
 OPENLDAP_PKGFILESUFX=
 
 LIB_DEPENDS+=		libicudata.so:devel/icu \
 			libldap.so:net/openldap26-client \
 			libltdl.so:devel/libltdl
 
 SUB_LIST+=		RC_DIR=${PREFIX} \
 			LDAP_RUN_DIR=${LDAP_RUN_DIR} \
 			DATABASEDIR=${DATABASEDIR}
 
+.if ${PORT_OPTIONS:MNETWORKING}
+SUB_LIST+=		SLAPD_REQUIRE=NETWORKING
+.else
+SUB_LIST+=		SLAPD_REQUIRE=FILESYSTEMS
+.endif
+
 USERS=			ldap
 GROUPS=			ldap
 LDAP_USER?=		ldap
 LDAP_GROUP?=		ldap
 USE_LDCONFIG=		${PREFIX}/libexec/openldap
 SUB_FILES+=		pkg-deinstall
 USE_RC_SUBR=		slapd
 
 EXTRA_PATCHES+=		${FILESDIR}/extrapatch-Makefile.in
 
 LDFLAGS+=		-L${LOCALBASE}/lib
 
 SED_MODULES=		-e 's/\(moduleload[ 	]*back_[a-z]*\)\.la/\1/' \
 			-e 's/\# *\(modulepath\)/\1/'
 
 CONFIGURE_ARGS+=	--enable-modules \
 			--localstatedir=${LOCALSTATEDIR} \
 			--enable-crypt \
 			--enable-ldap=mod \
 			--enable-meta=mod \
 			--enable-null=mod
 .endif
 
 LDAP_RUN_DIR?=		/var/run/openldap
 LOCALSTATEDIR?=		/var/db
 DATABASEDIR?=		${LOCALSTATEDIR}/openldap-data
 BACKUPDIR?=		/var/backups/openldap
 
 DESCR=			${PKGDIR}/pkg-descr${OPENLDAP_PKGFILESUFX}
 PLIST=			${PKGDIR}/pkg-plist${OPENLDAP_PKGFILESUFX}
 
 SUB_FILES+=		pkg-message${OPENLDAP_PKGFILESUFX}
 PKGMESSAGE=		${WRKSRC}/pkg-message${OPENLDAP_PKGFILESUFX}
 
 SUB_LIST+=		LDAP_RUN_DIR=${LDAP_RUN_DIR} \
 			LDAP_USER=${LDAP_USER} \
 			LDAP_GROUP=${LDAP_GROUP} \
 			BACKUPDIR=${BACKUPDIR} \
 			DATABASEDIR=${DATABASEDIR} \
 			PORTNAME=${PORTNAME} \
 			PKGNAME=${PKGNAME} \
 			PKGNAMESUFFIX=${PKGNAMESUFFIX}
 
 CONFIGURE_ARGS+=	--with-threads=posix \
 			--with-tls=openssl \
 			--enable-dynamic
 
 LIB_DEPENDS+=		libsasl2.so:security/cyrus-sasl2
 CONFIGURE_ARGS+=	--with-cyrus-sasl --enable-spasswd
 MAKE_ENV+=		STRIP=${STRIP}
 
 CPPFLAGS+=		-I${LOCALBASE}/include
 LIBS+=			-L${LOCALBASE}/lib
 
 PLIST_SUB+=		${SUB_LIST}
 PLIST_SUB+=		SHLIB_MAJOR=${OPENLDAP_SHLIB_MAJOR}
 PLIST_SUB+=		SHLIB_MINOR=${OPENLDAP_SHLIB_MINOR}
 
 .if ${PORT_OPTIONS:MFETCH} && (defined(OPENSSL_INSTALLED) && ${OPENSSL_INSTALLED} != "" || ${SSL_DEFAULT} != base)
 BROKEN=	using OpenSSL from ports and OPTION FETCH together is not supported
 . endif
 
 .if ${PORT_OPTIONS:MADDPARTIAL}
 CONTRIB_MODULES+=	slapd-modules/addpartial
 CONTRIB_CLEANFILES+=	addpartial.a
 .endif
 .if ${PORT_OPTIONS:MALLOP}
 CONTRIB_MODULES+=	slapd-modules/allop
 CONTRIB_CLEANFILES+=	allop.a
 .endif
 .if ${PORT_OPTIONS:MAUTOGROUP}
 CONTRIB_MODULES+=	slapd-modules/autogroup
 CONTRIB_CLEANFILES+=	autogroup.a
 .endif
 .if ${PORT_OPTIONS:MCLOAK}
 CONTRIB_MODULES+=	slapd-modules/cloak
 CONTRIB_CLEANFILES+=	cloak.a
 .endif
 .if ${PORT_OPTIONS:MDENYOP}
 CONTRIB_MODULES+=	slapd-modules/denyop
 CONTRIB_CLEANFILES+=	denyop.a
 .endif
 .if ${PORT_OPTIONS:MEMPTYDS}
 CONTRIB_MODULES+=	slapd-modules/emptyds
 CONTRIB_CLEANFILES+=	emptyds.a
 .endif
 .if ${PORT_OPTIONS:MLASTBIND}
 CONTRIB_MODULES+=	slapd-modules/lastbind
 CONTRIB_CLEANFILES+=	lastbind.a
 .endif
 .if ${PORT_OPTIONS:MLASTMOD}
 CONTRIB_MODULES+=	slapd-modules/lastmod
 CONTRIB_CLEANFILES+=	lastmod.a
 .endif
 .if ${PORT_OPTIONS:MNOPS}
 CONTRIB_MODULES+=	slapd-modules/nops
 CONTRIB_CLEANFILES+=	nops.a
 .endif
+.if ${PORT_OPTIONS:MNSSOV}
+CONTRIB_MODULES+=	slapd-modules/nssov
+CONTRIB_CLEANFILES+=	nssov.a
+NSLCD_VARDIR!=		${MAKE} -C ../nss-pam-ldapd -V NSLCD_VARDIR
+NSLCD_SOCKET!=		${MAKE} -C ../nss-pam-ldapd -V NSLCD_SOCKET
+SUB_LIST+=		NSLCD_VARDIR=${NSLCD_VARDIR}
+.endif
 .if ${PORT_OPTIONS:MTRACE}
 CONTRIB_MODULES+=	slapd-modules/trace
 CONTRIB_CLEANFILES+=	trace.a
 .endif
 .if ${PORT_OPTIONS:MSHA2}
 CONTRIB_MODULES+=	slapd-modules/passwd/sha2
 CONTRIB_CLEANFILES+=	pw-sha2.a
 .endif
 .if ${PORT_OPTIONS:MPBKDF2}
 CONTRIB_MODULES+=	slapd-modules/passwd/pbkdf2
 CONTRIB_CLEANFILES+=	pw-pbkdf2.a
 .endif
 .if ${PORT_OPTIONS:MSMBPWD}
 CONTRIB_MODULES+=	slapd-modules/smbk5pwd
 CONTRIB_CLEANFILES+=	smbk5pwd.a
 .endif
 
 post-patch:
 	@${REINPLACE_CMD} -e 's|%LOCALSTATEDIR%/run/|${LDAP_RUN_DIR}/|g' \
 		${SED_MODULES} ${WRKSRC}/servers/slapd/slapd.conf
 	@${REINPLACE_CMD} -e 's|%LOCALSTATEDIR%/run/|${LDAP_RUN_DIR}/|g' \
 		${SED_MODULES} ${WRKSRC}/servers/slapd/slapd.ldif
 	@${REINPLACE_CMD} -e 's|^OPT =.*|OPT = ${CFLAGS}|g' \
 		-e 's|^CC =.*|CC = ${CC}|g' \
 		${SED_MODULES} ${WRKSRC}/contrib/slapd-modules/*/Makefile \
 		${WRKSRC}/contrib/slapd-modules/*/*/Makefile
 .if defined(CONFIGURE_SED)
 	@${REINPLACE_CMD} -E ${CONFIGURE_SED} \
 		${CONFIGURE_WRKSRC}/${CONFIGURE_SCRIPT}
 .endif
 .if !${PORT_OPTIONS:MDEBUG}
 	@${REINPLACE_CMD} -E \
 		-e '/ldap_dump_(connection|requests_and_responses);/d' \
 		${WRKSRC}/libraries/libldap/ldap.map
 .endif
 
+post-patch-NSSOV-on:
+	@${REINPLACE_CMD} -E \
+		-e 's|^(#define[[:space:]]+NSLCD_PATH).*|\1	"${NSLCD_VARDIR}"|' \
+		-e 's|^(#define[[:space:]]+NSLCD_SOCKET).*|\1	"${NSLCD_SOCKET}"|' \
+		${WRKSRC}/contrib/slapd-modules/nssov/nssov.h
+	@${REINPLACE_CMD} -e 's|0555|0755|' \
+		${WRKSRC}/contrib/slapd-modules/nssov/nssov.c
+
 pre-configure:
 	@(cd ${WRKSRC} && ${LOCALBASE}/bin/autoconf)
 
 .if !defined(CLIENT_ONLY)
 test: build
 	@(cd ${BUILD_WRKSRC} && ${SETENVI} ${WRK_ENV} ${MAKE_ENV} \
 		${MAKE_CMD} ${MAKE_FLAGS} ${MAKEFILE} ${MAKE_ARGS} test)
 
 post-build:
 .for module in ${CONTRIB_MODULES}
 	@(cd ${BUILD_WRKSRC}/contrib/${module} && \
 		${SETENVI} ${WRK_ENV} ${MAKE_ENV} ${MAKE_CMD} ${MAKE_FLAGS} ${MAKEFILE} \
 		${MAKE_ARGS} prefix="${PREFIX}" all)
 .endfor
 .endif
 
 pre-install:
 .if !defined(CLIENT_ONLY)
 	${MKDIR} ${STAGEDIR}${DATABASEDIR}
 .endif
 
 post-install:
 .if defined(CLIENT_ONLY)
 	${MKDIR} ${STAGEDIR}${DOCSDIR}
 	${INSTALL_DATA} ${WRKSRC}/CHANGES ${STAGEDIR}${DOCSDIR}
 	for dir in drafts rfc; do \
 		${MKDIR} ${STAGEDIR}${DOCSDIR}/$${dir}; \
 		${INSTALL_DATA} ${WRKSRC}/doc/$${dir}/* ${STAGEDIR}${DOCSDIR}/$${dir}; \
 	done
 	for prog in ldapcompare ldapdelete ldapexop ldapmodify ldapmodrdn ldappasswd ldapsearch ldapurl ldapvc ldapwhoami; do\
 		${STRIP_CMD} ${STAGEDIR}${PREFIX}/bin/$${prog}; \
 	done
 	for library in lber ldap; do \
 		${STRIP_CMD} ${STAGEDIR}${PREFIX}/lib/lib$${library}.so.${OPENLDAP_SHLIB_MAJOR}; \
 	done
 .else
 	${MKDIR} ${STAGEDIR}${LDAP_RUN_DIR}
 .for module in ${CONTRIB_MODULES}
 	(cd ${WRKSRC}/contrib/${module} && \
 		${SETENVI} ${WRK_ENV} ${MAKE_ENV} ${MAKE_CMD} ${MAKE_FLAGS} ${MAKEFILE} \
 		${MAKE_ARGS} prefix="${PREFIX}" install)
 .endfor
 .for cleanfile in ${CONTRIB_CLEANFILES}
 	${RM} ${STAGEDIR}${PREFIX}/libexec/openldap/${cleanfile}
 .endfor
 	${STRIP_CMD} ${STAGEDIR}${PREFIX}/libexec/openldap/*.so
 	${STRIP_CMD} ${STAGEDIR}${PREFIX}/libexec/slapd
 	${MKDIR} ${STAGEDIR}${PREFIX}/libexec/openldap
 .endif # defined(CLIENT_ONLY)
 
+post-install-NSSOV-on:
+	${INSTALL_DATA} ${WRKSRC}/contrib/slapd-modules/nssov/ldapns.schema ${STAGEDIR}${ETCDIR}/schema/ldapns.schema.sample
+
 post-install-SLAPI-on:
 	for library in slapi; do \
 		${STRIP_CMD} ${STAGEDIR}${PREFIX}/lib/lib$${library}.so.${OPENLDAP_SHLIB_MAJOR}; \
 	done
 
 .include <bsd.port.mk>
diff --git a/net/openldap26-server/distinfo b/net/openldap26-server/distinfo
index adb619b89be2..ca5d542595d2 100644
--- a/net/openldap26-server/distinfo
+++ b/net/openldap26-server/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1769748218
-SHA256 (openldap-2.6.12.tgz) = 1716ad779e85d743694c3e3b05277fb71b6a5eadca43c7a958aa62683b22208e
-SIZE (openldap-2.6.12.tgz) = 6524579
+TIMESTAMP = 1773450068
+SHA256 (openldap-2.6.13.tgz) = d693b49517a42efb85a1a364a310aed16a53d428d1b46c0d31ef3fba78fcb656
+SIZE (openldap-2.6.13.tgz) = 6525768
diff --git a/net/openldap26-server/files/slapd.in b/net/openldap26-server/files/slapd.in
index bdc2ad538a74..bb5414b22fc9 100644
--- a/net/openldap26-server/files/slapd.in
+++ b/net/openldap26-server/files/slapd.in
@@ -1,217 +1,220 @@
 #!/bin/sh
 
 # PROVIDE: slapd
-# REQUIRE: FILESYSTEMS ldconfig netif
+# REQUIRE: %%SLAPD_REQUIRE%% ldconfig netif
 # BEFORE: SERVERS kdc
 # KEYWORD: shutdown
 
 #
 # Add the following lines to /etc/rc.conf to enable slapd:
 #
 #slapd_enable="YES"
 #slapd_flags='-h "ldapi://%2fvar%2frun%2fopenldap%2fldapi/ ldap://0.0.0.0/"'
 #slapd_sockets="/var/run/openldap/ldapi"
 #
 # See slapd(8) for more flags
 #
 # The `-u' and `-g' flags are automatically extracted from slapd_owner,
 # by default slapd runs under the non-privileged user id `ldap'. If you
 # want to run slapd as root, override this in /etc/rc.conf with
 #
 #slapd_owner="DEFAULT"
 #
 # To use the cn=config style configuration add the following
 # line to /etc/rc.conf:
 #
 #slapd_cn_config="YES"
 #
 # To specify alternative Kerberos 5 Key Table, add the following
 # rc.conf(5) configuration:
 #
 #slapd_krb5_ktname="/path/to/ldap.keytab"
 #
 #slapd_autobackup_enable="YES"
 # To enable automatic backup of OpenLDAP data after successful shutdown
 # in the form of LDIF.
 #
 #slapd_autobackup_num="8"
 # How many automatic backups should this script keep.
 #
 #slapd_autobackup_compress="YES"
 # Compress backup data with zstd (if present) or gzip.
 #
 #slapd_autobackup_name="backup"
 # Name to be used for backups
 
 . /etc/rc.subr
 
 name="slapd"
 rcvar=slapd_enable
 
 # read settings, set defaults
 load_rc_config ${name}
 
 : ${slapd_enable="NO"}
 if [ -n "${slapd_args+set}" ]; then
   warn "slapd_args is deprecated, use slapd_flags"
   : ${slapd_flags="$slapd_args"}
 fi
 : ${slapd_owner="%%LDAP_USER%%:%%LDAP_GROUP%%"}
 : ${slapd_sockets_mode="666"}
 : ${slapd_cn_config="NO"}
 : ${slapd_autobackup_enable="YES"}
 : ${slapd_autobackup_num="8"}
 : ${slapd_autobackup_compress="YES"}
 : ${slapd_autobackup_name="backup"}
 
 command="%%PREFIX%%/libexec/slapd"
 pidfile="%%LDAP_RUN_DIR%%/slapd.pid"
 
 # set required_dirs, required_files and DATABASEDIR
 if checkyesno slapd_cn_config; then
   required_dirs="%%PREFIX%%/etc/openldap/slapd.d"
   required_files="%%PREFIX%%/etc/openldap/slapd.d/cn=config.ldif"
-  DATABASEDIR=`grep olcDbDirectory %%PREFIX%%/etc/openldap/slapd.d/cn=config/olcDatabase=* | awk '{ print $2 }'`
+  DATABASEDIR=`grep -r olcDbDirectory %%PREFIX%%/etc/openldap/slapd.d/cn=config/olcDatabase=* | awk '{ print $2 }'`
 else
   required_files="%%PREFIX%%/etc/openldap/slapd.conf"
   DATABASEDIR=`awk '$1 == "directory" { print $2 }' "%%PREFIX%%/etc/openldap/slapd.conf" 2>&1 /dev/null`
 fi
 
 start_precmd=start_precmd
 start_postcmd=start_postcmd
 stop_postcmd=stop_postcmd
 
 # extract user and group, adjust ownership of directories and database
 
 start_precmd()
 {
   local slapd_ownername slapd_groupname
 
   mkdir -p %%LDAP_RUN_DIR%%
 
   case "$slapd_owner" in
   ""|[Nn][Oo][Nn][Ee]|[Dd][Ee][Ff][Aa][Uu][Ll][Tt])
     ;;
   *)
     local DBDIR
     for DBDIR in ${DATABASEDIR}; do
        if [ ! -d "${DBDIR}" ]; then
           mkdir -p "${DBDIR}"
           [ -f "%%PREFIX%%/etc/openldap/DB_CONFIG.example" ] && cp "%%PREFIX%%/etc/openldap/DB_CONFIG.example" "${DBDIR}/DB_CONFIG"
        fi
        chown -fRL "$slapd_owner" "${DBDIR}"
        chmod 700 "${DBDIR}"
     done
     chown "$slapd_owner" "%%LDAP_RUN_DIR%%"
 
     if checkyesno slapd_cn_config; then
         chown -fR $slapd_owner "%%PREFIX%%/etc/openldap/slapd.d"
     else
         chown $slapd_owner "%%PREFIX%%/etc/openldap/slapd.conf"
     fi
 
     slapd_ownername="${slapd_owner%:*}"
     slapd_groupname="${slapd_owner#*:}"
 
+    if [ -n "%%NSLCD_VARDIR%%" ]; then
+        install -o "${slapd_ownername}" -g "${slapd_groupname}" -m 0755 -d "%%NSLCD_VARDIR%%"
+    fi
     if [ -n "$slapd_ownername" ]; then
       rc_flags="$rc_flags -u $slapd_ownername"
     fi
     if [ -n "$slapd_groupname" ]; then
       rc_flags="$rc_flags -g $slapd_groupname"
     fi
     if [ -n "${slapd_krb5_ktname}" ]; then
       export KRB5_KTNAME=${slapd_krb5_ktname}
     fi
     ;;
   esac
   echo -n "Performing sanity check on slap configuration: "
 
   if ${command} -Tt -u >/dev/null 2>&1; then
     echo "OK"
   else
     echo "FAILED"
     return 1
   fi
 }
 
 # adjust ownership of created unix sockets
 
 start_postcmd()
 {
   local socket seconds
 
   for socket in $slapd_sockets; do
     for seconds in 1 2 3 4 5; do
       [ -e "$socket" ] && break
       sleep 1
     done
     if [ -S "$socket" ]; then
       case "$slapd_owner" in
       ""|[Nn][Oo][Nn][Ee]|[Dd][Ee][Ff][Aa][Uu][Ll][Tt])
         ;;
       *)
         chown "$slapd_owner" "$socket"
         ;;
       esac
       chmod "$slapd_sockets_mode" "$socket"
     else
       warn "slapd: Can't find socket $socket"
     fi
   done
 }
 
 stop_postcmd()
 {
   local compress_program compress_suffix
 
   if checkyesno slapd_autobackup_enable; then
     if checkyesno slapd_autobackup_compress; then
       if [ -x /usr/bin/zstd ]; then
         compress_program="/usr/bin/zstd"
         compress_suffix=".zstd"
       else
         compress_program="/usr/bin/gzip"
         compress_suffix=".gz"
       fi
     else
       compress_program="cat"
       compress_suffix=""
     fi
 
     umask 077
     mkdir -p %%BACKUPDIR%%
     chmod 700 %%BACKUPDIR%%
 
     n=0
     while [ ${n} -lt ${slapd_autobackup_num} ]; do
       backup_file="%%BACKUPDIR%%/${slapd_autobackup_name}.ldif.${n}${compress_suffix}"
       if [ ! -e "${backup_file}" -o -f "${backup_file}" ]; then
         break
       fi
       n=$(( ${n} + 1 ))
     done
     if [ -f "${backup_file}" ]; then
       n=$(( ${n} + 1 ))
       while [ ${n} -lt ${slapd_autobackup_num} ]; do
         next_backup_file="%%BACKUPDIR%%/${slapd_autobackup_name}.ldif.${n}${compress_suffix}"
         if [ -f "${next_backup_file}" ]; then
           [ "${next_backup_file}" -ot "${backup_file}" ] && \
             backup_file=${next_backup_file}
         elif [ ! -e "${next_backup_file}" ]; then
           backup_file=${next_backup_file}
           break
         fi
         n=$(( ${n} + 1 ))
       done
     fi
     if [ -e "${backup_file}" -a ! -f "${backup_file}" ]; then
       err 1 "Unable to backup OpenLDAP data"
     else
       info "Backing up OpenLDAP data to ${backup_file}"
     fi
 
     %%PREFIX%%/sbin/slapcat | ${compress_program} > ${backup_file}
   fi
 }
 
 run_rc_command "$1"
diff --git a/net/openldap26-server/pkg-plist b/net/openldap26-server/pkg-plist
index 9798d579b5eb..48959d11a14b 100644
--- a/net/openldap26-server/pkg-plist
+++ b/net/openldap26-server/pkg-plist
@@ -1,316 +1,322 @@
 %%ETCDIR%%/schema/README
 %%ETCDIR%%/schema/collective.ldif
 @sample %%ETCDIR%%/schema/collective.schema.sample
 %%ETCDIR%%/schema/corba.ldif
 @sample %%ETCDIR%%/schema/corba.schema.sample
 %%ETCDIR%%/schema/core.ldif
 @sample %%ETCDIR%%/schema/core.schema.sample
 %%ETCDIR%%/schema/cosine.ldif
 @sample %%ETCDIR%%/schema/cosine.schema.sample
 %%ETCDIR%%/schema/dsee.ldif
 @sample %%ETCDIR%%/schema/dsee.schema.sample
 %%ETCDIR%%/schema/msuser.ldif
 @sample %%ETCDIR%%/schema/msuser.schema.sample
 %%ETCDIR%%/schema/namedobject.ldif
 @sample %%ETCDIR%%/schema/namedobject.schema.sample
 %%ETCDIR%%/schema/duaconf.ldif
 @sample %%ETCDIR%%/schema/duaconf.schema.sample
 %%ETCDIR%%/schema/dyngroup.ldif
 @sample %%ETCDIR%%/schema/dyngroup.schema.sample
 %%ETCDIR%%/schema/inetorgperson.ldif
 @sample %%ETCDIR%%/schema/inetorgperson.schema.sample
 %%ETCDIR%%/schema/java.ldif
 @sample %%ETCDIR%%/schema/java.schema.sample
 %%ETCDIR%%/schema/misc.ldif
 @sample %%ETCDIR%%/schema/misc.schema.sample
 %%ETCDIR%%/schema/nis.ldif
 @sample %%ETCDIR%%/schema/nis.schema.sample
 %%ETCDIR%%/schema/openldap.ldif
 @sample %%ETCDIR%%/schema/openldap.schema.sample
 %%ETCDIR%%/schema/pmi.ldif
 @sample %%ETCDIR%%/schema/pmi.schema.sample
 @sample %%ETCDIR%%/slapd.conf.sample
 @sample %%ETCDIR%%/slapd.ldif.sample
 %%ACCESSLOG%%libexec/openldap/accesslog.so.%%SHLIB_MAJOR%%
 %%ACCESSLOG%%libexec/openldap/accesslog.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%ACCESSLOG%%libexec/openldap/accesslog.la
 %%ACCESSLOG%%libexec/openldap/accesslog.so
 %%ADDPARTIAL%%libexec/openldap/addpartial.la
 %%ADDPARTIAL%%libexec/openldap/addpartial.so
 %%ADDPARTIAL%%libexec/openldap/addpartial.so.0
 %%ADDPARTIAL%%libexec/openldap/addpartial.so.0.0.0
 %%ALLOP%%libexec/openldap/allop.la
 %%ALLOP%%libexec/openldap/allop.so
 %%ALLOP%%libexec/openldap/allop.so.0
 %%ALLOP%%libexec/openldap/allop.so.0.0.0
 %%ALLOP%%share/man/man5/slapo-allop.5.gz
 %%ARGON2%%libexec/openldap/argon2.so.%%SHLIB_MAJOR%%
 %%ARGON2%%libexec/openldap/argon2.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%ARGON2%%libexec/openldap/argon2.la
 %%ARGON2%%libexec/openldap/argon2.so
 %%ASYNCMETA%%libexec/openldap/back_asyncmeta.so.%%SHLIB_MAJOR%%
 %%ASYNCMETA%%libexec/openldap/back_asyncmeta.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%ASYNCMETA%%libexec/openldap/back_asyncmeta.la
 %%ASYNCMETA%%libexec/openldap/back_asyncmeta.so
 %%AUDITLOG%%libexec/openldap/auditlog.so.%%SHLIB_MAJOR%%
 %%AUDITLOG%%libexec/openldap/auditlog.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%AUDITLOG%%libexec/openldap/auditlog.la
 %%AUDITLOG%%libexec/openldap/auditlog.so
 %%AUTOCA%%libexec/openldap/autoca.so.%%SHLIB_MAJOR%%
 %%AUTOCA%%libexec/openldap/autoca.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%AUTOCA%%libexec/openldap/autoca.la
 %%AUTOCA%%libexec/openldap/autoca.so
 %%AUTOGROUP%%libexec/openldap/autogroup.la
 %%AUTOGROUP%%libexec/openldap/autogroup.so
 %%AUTOGROUP%%libexec/openldap/autogroup.so.0
 %%AUTOGROUP%%libexec/openldap/autogroup.so.0.0.0
 %%AUTOGROUP%%share/man/man5/slapo-autogroup.5.gz
 %%CLOAK%%libexec/openldap/cloak.la
 %%CLOAK%%libexec/openldap/cloak.so
 %%CLOAK%%libexec/openldap/cloak.so.0
 %%CLOAK%%libexec/openldap/cloak.so.0.0.0
 %%CLOAK%%share/man/man5/slapo-cloak.5.gz
 %%COLLECT%%libexec/openldap/collect.so.%%SHLIB_MAJOR%%
 %%COLLECT%%libexec/openldap/collect.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%COLLECT%%libexec/openldap/collect.la
 %%COLLECT%%libexec/openldap/collect.so
 %%CONSTRAINT%%libexec/openldap/constraint.so.%%SHLIB_MAJOR%%
 %%CONSTRAINT%%libexec/openldap/constraint.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%CONSTRAINT%%libexec/openldap/constraint.la
 %%CONSTRAINT%%libexec/openldap/constraint.so
 %%DDS%%libexec/openldap/dds.so.%%SHLIB_MAJOR%%
 %%DDS%%libexec/openldap/dds.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%DDS%%libexec/openldap/dds.la
 %%DDS%%libexec/openldap/dds.so
 %%DENYOP%%libexec/openldap/denyop.la
 %%DENYOP%%libexec/openldap/denyop.so
 %%DENYOP%%libexec/openldap/denyop.so.0
 %%DENYOP%%libexec/openldap/denyop.so.0.0.0
 %%DEREF%%libexec/openldap/deref.so.%%SHLIB_MAJOR%%
 %%DEREF%%libexec/openldap/deref.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%DEREF%%libexec/openldap/deref.la
 %%DEREF%%libexec/openldap/deref.so
 %%DNSSRV%%libexec/openldap/back_dnssrv.so.%%SHLIB_MAJOR%%
 %%DNSSRV%%libexec/openldap/back_dnssrv.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%DNSSRV%%libexec/openldap/back_dnssrv.la
 %%DNSSRV%%libexec/openldap/back_dnssrv.so
 %%DYNGROUP%%libexec/openldap/dyngroup.so.%%SHLIB_MAJOR%%
 %%DYNGROUP%%libexec/openldap/dyngroup.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%DYNGROUP%%libexec/openldap/dyngroup.la
 %%DYNGROUP%%libexec/openldap/dyngroup.so
 %%DYNLIST%%libexec/openldap/dynlist.so.%%SHLIB_MAJOR%%
 %%DYNLIST%%libexec/openldap/dynlist.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%DYNLIST%%libexec/openldap/dynlist.la
 %%DYNLIST%%libexec/openldap/dynlist.so
 %%EMPTYDS%%libexec/openldap/emptyds.la
 %%EMPTYDS%%libexec/openldap/emptyds.so
 %%EMPTYDS%%libexec/openldap/emptyds.so.0
 %%EMPTYDS%%libexec/openldap/emptyds.so.0.0.0
 %%EMPTYDS%%share/man/man5/slapo-emptyds.5.gz
 %%HOMEDIR%%libexec/openldap/homedir.so.%%SHLIB_MAJOR%%
 %%HOMEDIR%%libexec/openldap/homedir.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%HOMEDIR%%libexec/openldap/homedir.la
 %%HOMEDIR%%libexec/openldap/homedir.so
 %%LASTBIND%%libexec/openldap/lastbind.la
 %%LASTBIND%%libexec/openldap/lastbind.so
 %%LASTBIND%%libexec/openldap/lastbind.so.0
 %%LASTBIND%%libexec/openldap/lastbind.so.0.0.0
 %%LASTBIND%%share/man/man5/slapo-lastbind.5.gz
 %%LASTMOD%%libexec/openldap/lastmod.la
 %%LASTMOD%%libexec/openldap/lastmod.so
 %%LASTMOD%%libexec/openldap/lastmod.so.0
 %%LASTMOD%%libexec/openldap/lastmod.so.0.0.0
 %%LASTMOD%%share/man/man5/slapo-lastmod.5.gz
 %%LLOADD%%libexec/%%PORTNAME%%/lloadd.so.%%SHLIB_MAJOR%%
 %%LLOADD%%libexec/%%PORTNAME%%/lloadd.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%LLOADD%%libexec/%%PORTNAME%%/lloadd.la
 %%LLOADD%%libexec/%%PORTNAME%%/lloadd.so
 %%MEMBEROF%%libexec/openldap/memberof.so.%%SHLIB_MAJOR%%
 %%MEMBEROF%%libexec/openldap/memberof.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%MEMBEROF%%libexec/openldap/memberof.la
 %%MEMBEROF%%libexec/openldap/memberof.so
 %%NESTGROUP%%libexec/openldap/nestgroup.la
 %%NESTGROUP%%libexec/openldap/nestgroup.so.%%SHLIB_MAJOR%%
 %%NESTGROUP%%libexec/openldap/nestgroup.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%NESTGROUP%%libexec/openldap/nestgroup.so
 %%NOPS%%libexec/openldap/nops.la
 %%NOPS%%libexec/openldap/nops.so
 %%NOPS%%libexec/openldap/nops.so.0
 %%NOPS%%libexec/openldap/nops.so.0.0.0
 %%NOPS%%share/man/man5/slapo-nops.5.gz
+%%NSSOV%%@sample %%ETCDIR%%/schema/ldapns.schema.sample
+%%NSSOV%%libexec/openldap/nssov.la
+%%NSSOV%%libexec/openldap/nssov.so
+%%NSSOV%%libexec/openldap/nssov.so.0
+%%NSSOV%%libexec/openldap/nssov.so.0.0.0
+%%NSSOV%%share/man/man5/slapo-nssov.5.gz
 %%OTP%%libexec/openldap/otp.so.%%SHLIB_MAJOR%%
 %%OTP%%libexec/openldap/otp.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%OTP%%libexec/openldap/otp.la
 %%OTP%%libexec/openldap/otp.so
 %%PASSWD%%libexec/openldap/back_passwd.so.%%SHLIB_MAJOR%%
 %%PASSWD%%libexec/openldap/back_passwd.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%PASSWD%%libexec/openldap/back_passwd.la
 %%PASSWD%%libexec/openldap/back_passwd.so
 %%PBKDF2%%libexec/openldap/pw-pbkdf2.la
 %%PBKDF2%%libexec/openldap/pw-pbkdf2.so
 %%PBKDF2%%libexec/openldap/pw-pbkdf2.so.0
 %%PBKDF2%%libexec/openldap/pw-pbkdf2.so.0.0.0
 %%PBKDF2%%share/man/man5/slapd-pw-pbkdf2.5.gz
 %%PERL%%libexec/openldap/back_perl.so.%%SHLIB_MAJOR%%
 %%PERL%%libexec/openldap/back_perl.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%PERL%%libexec/openldap/back_perl.la
 %%PERL%%libexec/openldap/back_perl.so
 %%PPOLICY%%libexec/openldap/ppolicy.so.%%SHLIB_MAJOR%%
 %%PPOLICY%%libexec/openldap/ppolicy.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%PPOLICY%%libexec/openldap/ppolicy.la
 %%PPOLICY%%libexec/openldap/ppolicy.so
 %%PROXYCACHE%%libexec/openldap/pcache.so.%%SHLIB_MAJOR%%
 %%PROXYCACHE%%libexec/openldap/pcache.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%PROXYCACHE%%libexec/openldap/pcache.la
 %%PROXYCACHE%%libexec/openldap/pcache.so
 %%REFINT%%libexec/openldap/refint.so.%%SHLIB_MAJOR%%
 %%REFINT%%libexec/openldap/refint.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%REFINT%%libexec/openldap/refint.la
 %%REFINT%%libexec/openldap/refint.so
 %%REMOTEAUTH%%libexec/openldap/remoteauth.so.%%SHLIB_MAJOR%%
 %%REMOTEAUTH%%libexec/openldap/remoteauth.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%REMOTEAUTH%%libexec/openldap/remoteauth.la
 %%REMOTEAUTH%%libexec/openldap/remoteauth.so
 %%RETCODE%%libexec/openldap/retcode.so.%%SHLIB_MAJOR%%
 %%RETCODE%%libexec/openldap/retcode.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%RETCODE%%libexec/openldap/retcode.la
 %%RETCODE%%libexec/openldap/retcode.so
 %%RWM%%libexec/openldap/rwm.so.%%SHLIB_MAJOR%%
 %%RWM%%libexec/openldap/rwm.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%RWM%%libexec/openldap/rwm.la
 %%RWM%%libexec/openldap/rwm.so
 %%SEQMOD%%libexec/openldap/seqmod.so.%%SHLIB_MAJOR%%
 %%SEQMOD%%libexec/openldap/seqmod.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%SEQMOD%%libexec/openldap/seqmod.la
 %%SEQMOD%%libexec/openldap/seqmod.so
 %%SHA2%%libexec/openldap/pw-sha2.la
 %%SHA2%%libexec/openldap/pw-sha2.so
 %%SHA2%%libexec/openldap/pw-sha2.so.0
 %%SHA2%%libexec/openldap/pw-sha2.so.0.0.0
 %%SHA2%%share/man/man5/slapd-pw-sha2.5.gz
 %%SLAPI%%lib/libslapi.so.%%SHLIB_MAJOR%%
 %%SLAPI%%lib/libslapi.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%SLAPI%%lib/libslapi.a
 %%SLAPI%%lib/libslapi.la
 %%SLAPI%%lib/libslapi.so
 %%SMBPWD%%libexec/openldap/smbk5pwd.la
 %%SMBPWD%%libexec/openldap/smbk5pwd.so
 %%SMBPWD%%libexec/openldap/smbk5pwd.so.0
 %%SMBPWD%%libexec/openldap/smbk5pwd.so.0.0.0
 %%SMBPWD%%share/man/man5/slapo-smbk5pwd.5.gz
 %%SOCK%%libexec/openldap/back_sock.so.%%SHLIB_MAJOR%%
 %%SOCK%%libexec/openldap/back_sock.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%SOCK%%libexec/openldap/back_sock.la
 %%SOCK%%libexec/openldap/back_sock.so
 %%SQL%%libexec/openldap/back_sql.so.%%SHLIB_MAJOR%%
 %%SQL%%libexec/openldap/back_sql.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%SQL%%libexec/openldap/back_sql.la
 %%SQL%%libexec/openldap/back_sql.so
 %%SSSVLV%%libexec/openldap/sssvlv.so.%%SHLIB_MAJOR%%
 %%SSSVLV%%libexec/openldap/sssvlv.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%SSSVLV%%libexec/openldap/sssvlv.la
 %%SSSVLV%%libexec/openldap/sssvlv.so
 %%TRACE%%libexec/openldap/trace.la
 %%TRACE%%libexec/openldap/trace.so
 %%TRACE%%libexec/openldap/trace.so.0
 %%TRACE%%libexec/openldap/trace.so.0.0.0
 %%TRANSLUCENT%%libexec/openldap/translucent.so.%%SHLIB_MAJOR%%
 %%TRANSLUCENT%%libexec/openldap/translucent.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%TRANSLUCENT%%libexec/openldap/translucent.la
 %%TRANSLUCENT%%libexec/openldap/translucent.so
 %%UNIQUE%%libexec/openldap/unique.so.%%SHLIB_MAJOR%%
 %%UNIQUE%%libexec/openldap/unique.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%UNIQUE%%libexec/openldap/unique.la
 %%UNIQUE%%libexec/openldap/unique.so
 %%VALSORT%%libexec/openldap/valsort.so.%%SHLIB_MAJOR%%
 %%VALSORT%%libexec/openldap/valsort.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 %%VALSORT%%libexec/openldap/valsort.la
 %%VALSORT%%libexec/openldap/valsort.so
 libexec/openldap/back_ldap.so.%%SHLIB_MAJOR%%
 libexec/openldap/back_ldap.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 libexec/openldap/back_ldap.la
 libexec/openldap/back_ldap.so
 libexec/openldap/back_meta.so.%%SHLIB_MAJOR%%
 libexec/openldap/back_meta.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 libexec/openldap/back_meta.la
 libexec/openldap/back_meta.so
 libexec/openldap/back_null.so.%%SHLIB_MAJOR%%
 libexec/openldap/back_null.so.%%SHLIB_MAJOR%%.%%SHLIB_MINOR%%
 libexec/openldap/back_null.la
 libexec/openldap/back_null.so
 libexec/slapd
 share/man/man5/lloadd.conf.5.gz
 share/man/man5/slapd-asyncmeta.5.gz
 share/man/man5/slapd-config.5.gz
 share/man/man5/slapd-dnssrv.5.gz
 share/man/man5/slapd-ldap.5.gz
 share/man/man5/slapd-ldif.5.gz
 share/man/man5/slapd-mdb.5.gz
 share/man/man5/slapd-meta.5.gz
 share/man/man5/slapd-monitor.5.gz
 share/man/man5/slapd-ndb.5.gz
 share/man/man5/slapd-null.5.gz
 share/man/man5/slapd-passwd.5.gz
 share/man/man5/slapd-perl.5.gz
 share/man/man5/slapd-relay.5.gz
 share/man/man5/slapd-sock.5.gz
 share/man/man5/slapd-sql.5.gz
 share/man/man5/slapd-wt.5.gz
 share/man/man5/slapd.access.5.gz
 share/man/man5/slapd.backends.5.gz
 share/man/man5/slapd.conf.5.gz
 share/man/man5/slapd.overlays.5.gz
 share/man/man5/slapd.plugin.5.gz
 share/man/man5/slapo-accesslog.5.gz
 share/man/man5/slapo-auditlog.5.gz
 share/man/man5/slapo-autoca.5.gz
 share/man/man5/slapo-chain.5.gz
 share/man/man5/slapo-collect.5.gz
 share/man/man5/slapo-constraint.5.gz
 share/man/man5/slapo-dds.5.gz
 share/man/man5/slapo-deref.5.gz
 share/man/man5/slapo-dyngroup.5.gz
 share/man/man5/slapo-dynlist.5.gz
 share/man/man5/slapo-homedir.5.gz
 share/man/man5/slapo-memberof.5.gz
 share/man/man5/slapo-otp.5.gz
 share/man/man5/slapo-pbind.5.gz
 share/man/man5/slapo-pcache.5.gz
 share/man/man5/slapo-ppolicy.5.gz
 share/man/man5/slapo-refint.5.gz
 share/man/man5/slapo-remoteauth.5.gz
 share/man/man5/slapo-retcode.5.gz
 share/man/man5/slapo-rwm.5.gz
 share/man/man5/slapo-sock.5.gz
 share/man/man5/slapo-sssvlv.5.gz
 share/man/man5/slapo-syncprov.5.gz
 share/man/man5/slapo-translucent.5.gz
 share/man/man5/slapo-unique.5.gz
 share/man/man5/slapo-valsort.5.gz
 share/man/man5/slappw-argon2.5.gz
 share/man/man8/lloadd.8.gz
 share/man/man8/slapacl.8.gz
 share/man/man8/slapadd.8.gz
 share/man/man8/slapauth.8.gz
 share/man/man8/slapcat.8.gz
 share/man/man8/slapd.8.gz
 share/man/man8/slapdn.8.gz
 share/man/man8/slapindex.8.gz
 share/man/man8/slapmodify.8.gz
 share/man/man8/slappasswd.8.gz
 share/man/man8/slapschema.8.gz
 share/man/man8/slaptest.8.gz
 sbin/slapacl
 sbin/slapadd
 sbin/slapauth
 sbin/slapcat
 sbin/slapdn
 sbin/slapindex
 sbin/slapmodify
 sbin/slappasswd
 sbin/slapschema
 sbin/slaptest
 @dir %%ETCDIR%%/schema
 @dir libexec/openldap
 @dir(%%LDAP_USER%%,%%LDAP_GROUP%%,775) %%LDAP_RUN_DIR%%
 @dir(%%LDAP_USER%%,%%LDAP_GROUP%%,775) %%DATABASEDIR%%