Summary: | net-nds/openldap-2.4.45 : misbuilds most contrib modules | ||
---|---|---|---|
Product: | Gentoo Linux | Reporter: | Timo Rothenpieler <timo> |
Component: | Current packages | Assignee: | Gentoo LDAP project <ldap-bugs> |
Status: | UNCONFIRMED --- | ||
Severity: | major | CC: | hojuruku, itumaykin+gentoo, ldap-bugs, pacho, sam, timo |
Priority: | Normal | Keywords: | EBUILD, PATCH, PullRequest |
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
See Also: | https://github.com/gentoo/gentoo/pull/24634 | ||
Whiteboard: | |||
Package list: | Runtime testing required: | --- | |
Attachments: |
patch for openldap-2.4.45.ebuild
openldap-2.4.45.ebuild sample Makefile to build https://github.com/opinsys/smbkrb5pwd in tree |
Description
Timo Rothenpieler
2017-07-07 23:13:52 UTC
Created attachment 481768 [details, diff]
patch for openldap-2.4.45.ebuild
This changes the ebuild to just call the Makefile instead of building manually.
Produces intact and working modules for me.
Created attachment 481770 [details]
openldap-2.4.45.ebuild
fixed ebuild with above patch applied
I can confirm this fix works for pw-kerberos.so, and I talked to Tim on IRC. However I'm battling trying to "just use the Makefile" to get smbkrb5pwd working (the mit-krb5 / github variant) by just building in the slapd-modules directory. It compiles but has the same, dyanmic linking issues (file not found), that pw-kerberos was previously getting. Dynamic modules may have to have some defines added to the compiler command line, as the original gentoo ebuild used. If I get it working I'll patch this ebuild to support smbkrb5pwd in addition to "smbk5pwd" (included in the contrib directory). The use flag is already using "smbkrb5pwd", so the ebuild will have to check if Mit or Heimdial is installed and compile the appropriate module if the "smbkrb5pwd" use flag is enabled. Created attachment 483004 [details] sample Makefile to build https://github.com/opinsys/smbkrb5pwd in tree This is the Makefile I had to use to build the mit-krb5 flavored smbkrb5pwd from github. Not many people want to use hemidal on gentoo, because you nfs-utils and other key components loose kerberos support, which kind of defeats the purpose of having a kdc, if half of your main clients can't use it's client libs. The module was built in tree. I added the pull request #12 for preserving sasl identities too. To integrate this into the ebuild, there would have to be some checks to see if gnutls or openssl is used, and possibly execute /usr/bin/krb5-config to get the libraries. Adding this feature would be a nice edition to the ebuild. Something for me to do on a rainy day, or anyone else with free time. You also have to patch the keytab location. See: https://github.com/opinsys/smbkrb5pwd/wiki/Compiling-on-CentOS Luke what is the situation with 2.4.48? I can confirm that this is indeed still an issue with 2.4.58(and likely also 2.5, given the build_contrib_module function is untouched): # ldd /usr/lib64/openldap/openldap/lastmod.so.0.0.0 linux-vdso.so.1 (0x00007ffff7ffe000) libc.so.6 => /lib64/libc.so.6 (0x00007f9d3c48d000) /lib64/ld-linux-x86-64.so.2 (0x00007f9d3c669000) Should look more like this: # ldd /usr/lib64/openldap/openldap/memberof-2.4.so.2.11.6 linux-vdso.so.1 (0x00007fff43dfe000) liblber-2.4.so.2 => /usr/lib64/liblber-2.4.so.2 (0x00007f8f92580000) libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f8f92560000) libc.so.6 => /lib64/libc.so.6 (0x00007f8f92399000) /lib64/ld-linux-x86-64.so.2 (0x00007f8f925ab000) The fix will probably also still look similar to the old patch. The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d12a02243969b7c715e9b639345ec8aacd925a28 commit d12a02243969b7c715e9b639345ec8aacd925a28 Author: Dennis Lamm <expeditioneer@gentoo.org> AuthorDate: 2022-02-05 23:24:54 +0000 Commit: Robin H. Johnson <robbat2@gentoo.org> CommitDate: 2022-03-19 18:07:51 +0000 net-nds/openldap 2.6.1 version bump Closes: https://bugs.gentoo.org/799092 Bug: https://bugs.gentoo.org/624178 Bug: https://bugs.gentoo.org/815844 Bug: https://bugs.gentoo.org/609486 Signed-off-by: Dennis Lamm <expeditioneer@gentoo.org> (cherry picked from commit c2e92fe1e144e8563f753a76d9d0cba923bb8878) Signed-off-by: Robin H. Johnson <robbat2@gentoo.org> net-nds/openldap/Manifest | 1 + net-nds/openldap/files/openldap-2.6.1-cloak.patch | 25 + .../files/openldap-2.6.1-fix-missing-mapping.patch | 21 + net-nds/openldap/files/openldap-2.6.1-flags.patch | 416 +++++++++++ .../openldap/files/openldap-2.6.1-system-mdb.patch | 148 ++++ net-nds/openldap/files/slapd-2.6.1.service | 12 + net-nds/openldap/files/slapd-confd-2.6.1 | 26 + net-nds/openldap/metadata.xml | 4 + net-nds/openldap/openldap-2.6.1.ebuild | 796 +++++++++++++++++++++ 9 files changed, 1449 insertions(+) |