From owner-freebsd-current@FreeBSD.ORG Fri Nov 27 00:59:02 2009 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 5F245106568B for ; Fri, 27 Nov 2009 00:59:02 +0000 (UTC) (envelope-from m.seaman@infracaninophile.co.uk) Received: from smtp.infracaninophile.co.uk (gate6.infracaninophile.co.uk [IPv6:2001:8b0:151:1::1]) by mx1.freebsd.org (Postfix) with ESMTP id C4C9E8FC22 for ; Fri, 27 Nov 2009 00:59:01 +0000 (UTC) Received: from happy-idiot-talk.infracaninophile.co.uk (localhost [IPv6:::1]) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.14.3/8.14.3) with ESMTP id nAR0wuwi053627 for ; Fri, 27 Nov 2009 00:58:57 GMT (envelope-from m.seaman@infracaninophile.co.uk) X-DKIM: Sendmail DKIM Filter v2.8.3 smtp.infracaninophile.co.uk nAR0wuwi053627 DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=infracaninophile.co.uk; s=200708; t=1259283537; bh=DARvMWB570NVLMayoazuis7Hn4Qiw+l7JUmGPpcbXVo=; h=Message-ID:Date:From:MIME-Version:To:Subject:References: In-Reply-To:Content-Type:Cc:Content-Type:Date:From:In-Reply-To: Message-ID:Mime-Version:References:To; z=Message-ID:=20<4B0F244A.60404@infracaninophile.co.uk>|Date:=20Fri ,=2027=20Nov=202009=2000:58:50=20+0000|From:=20Matthew=20Seaman=20 |Organization:=20Infracaninophile |User-Agent:=20Thunderbird=202.0.0.23=20(X11/20090823)|MIME-Versio n:=201.0|To:=20freebsd-current@freebsd.org|Subject:=20Re:=20Buildi ng=20RELENG_8_0=20confused=20by=20openldap.|References:=20<4B0E57C C.7050509@infracaninophile.co.uk>|In-Reply-To:=20<4B0E57CC.7050509 @infracaninophile.co.uk>|X-Enigmail-Version:=200.95.6|Content-Type :=20multipart/signed=3B=20micalg=3Dpgp-sha256=3B=0D=0A=20protocol= 3D"application/pgp-signature"=3B=0D=0A=20boundary=3D"------------e nig4D14DC53F8C923C05D68866C"; b=4UbQiZGzAEsDKUFNoGRbaEiF7ZOzsw58das8DNugrImK4dxx7Ak35jmrT0Mko1T8Y NkWt7tPeQ1h1X3prW3jND2iXz4CUecxbnn3lbiHotvIu2HMg5gTHRW9QsMVm2Qzau4 LJQcQTYsCNBlA1CjdsDwoYrZtGVS7PvThmuPdasw= X-Authentication-Warning: happy-idiot-talk.infracaninophile.co.uk: Host localhost [IPv6:::1] claimed to be happy-idiot-talk.infracaninophile.co.uk Message-ID: <4B0F244A.60404@infracaninophile.co.uk> Date: Fri, 27 Nov 2009 00:58:50 +0000 From: Matthew Seaman Organization: Infracaninophile User-Agent: Thunderbird 2.0.0.23 (X11/20090823) MIME-Version: 1.0 To: freebsd-current@freebsd.org References: <4B0E57CC.7050509@infracaninophile.co.uk> In-Reply-To: <4B0E57CC.7050509@infracaninophile.co.uk> X-Enigmail-Version: 0.95.6 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------enig4D14DC53F8C923C05D68866C" X-Virus-Scanned: clamav-milter 0.95.3 at happy-idiot-talk.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-3.0 required=5.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VERIFIED,NO_RELAYS autolearn=ham version=3.2.5 X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on happy-idiot-talk.infracaninophile.co.uk Subject: Re: Building RELENG_8_0 confused by openldap. X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Nov 2009 00:59:02 -0000 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig4D14DC53F8C923C05D68866C Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable Matthew Seaman wrote: > Hi, >=20 > I realise that 8.0 is literally just heading out of the door, but I see= m to > have discovered a problem. >=20 > When building the RELENG_8_0 world preparatory to upgrading a RELENG_7_= 2 > machine with OpenLDAP 2.4.19 installed, the build falls over because Ke= rberos ipropd picks up the presence of /usr/local/lib/libldap.so ultimate= ly causing linking to fail because of missing OpenSSL symbols: >=20 > =3D=3D=3D> kerberos5/libexec/ipropd-master (all) > cc -O2 -pipe -I/usr/src/kerberos5/libexec/ipropd-master/../../../crypt= o/heimdal/lib/krb5 -I/usr/src/kerberos5/libexec/ipropd-master/../../../cr= ypto/heimdal/lib/asn1 -I/usr/src/kerberos5/libexec/ipropd-master/../../..= /crypto/heimdal/lib/roken -I. -I/usr/local/include -DOPENLDAP=3D1 -DHAVE= _CONFIG_H -I/usr/src/kerberos5/libexec/ipropd-master/../../include -std=3D= gnu99 -fstack-protector -c /usr/src/kerberos5/libexec/ipropd-master/../.= =2E/../crypto/heimdal/lib/kadm5/ipropd_common.c > cc -O2 -pipe -I/usr/src/kerberos5/libexec/ipropd-master/../../../crypt= o/heimdal/lib/krb5 -I/usr/src/kerberos5/libexec/ipropd-master/../../../cr= ypto/heimdal/lib/asn1 -I/usr/src/kerberos5/libexec/ipropd-master/../../..= /crypto/heimdal/lib/roken -I. -I/usr/local/include -DOPENLDAP=3D1 -DHAVE= _CONFIG_H -I/usr/src/kerberos5/libexec/ipropd-master/../../include -std=3D= gnu99 -fstack-protector -c /usr/src/kerberos5/libexec/ipropd-master/../.= =2E/../crypto/heimdal/lib/kadm5/ipropd_master.c > cc -O2 -pipe -I/usr/src/kerberos5/libexec/ipropd-master/../../../crypt= o/heimdal/lib/krb5 -I/usr/src/kerberos5/libexec/ipropd-master/../../../cr= ypto/heimdal/lib/asn1 -I/usr/src/kerberos5/libexec/ipropd-master/../../..= /crypto/heimdal/lib/roken -I. -I/usr/local/include -DOPENLDAP=3D1 -DHAVE= _CONFIG_H -I/usr/src/kerberos5/libexec/ipropd-master/../../include -std=3D= gnu99 -fstack-protector -L/usr/local/lib -Wl,-rpath,/usr/local/lib -o ip= ropd-master ipropd_common.o ipropd_master.o -lkadm5srv -lhdb -lkrb5 -lhx5= 09 -lroken /usr/obj/usr/src/kerberos5/libexec/ipropd-master/../../lib/lib= vers/libvers.a -lasn1 -lcrypto -lcrypt -lcom_err -lldap -llber > /usr/obj/usr/src/tmp/usr/bin/ld: warning: libssl.so.5, needed by /usr/l= ocal/lib/libldap.so, not found (try using -rpath or -rpath-link) > /usr/obj/usr/src/tmp/usr/bin/ld: warning: libcrypto.so.5, needed by /us= r/local/lib/libldap.so, not found (try using -rpath or -rpath-link) > /usr/local/lib/libldap.so: undefined reference to `SSL_CTX_set_tmp_rsa_= callback' > /usr/local/lib/libldap.so: undefined reference to `SSL_CTX_set_info_cal= lback' > /usr/local/lib/libldap.so: undefined reference to `SSL_CTX_free' > /usr/local/lib/libldap.so: undefined reference to `SSL_shutdown' > /usr/local/lib/libldap.so: undefined reference to `SSL_load_client_CA_f= ile' > /usr/local/lib/libldap.so: undefined reference to `SSL_CTX_set_default_= verify_paths' > /usr/local/lib/libldap.so: undefined reference to `SSL_CTX_set_session_= id_context' > /usr/local/lib/libldap.so: undefined reference to `SSL_get_error' > /usr/local/lib/libldap.so: undefined reference to `SSL_read' > /usr/local/lib/libldap.so: undefined reference to `SSL_new' > /usr/local/lib/libldap.so: undefined reference to `SSL_add_dir_cert_sub= jects_to_stack' > /usr/local/lib/libldap.so: undefined reference to `SSL_CTX_new' > /usr/local/lib/libldap.so: undefined reference to `SSL_library_init' > /usr/local/lib/libldap.so: undefined reference to `SSL_CTX_load_verify_= locations' > /usr/local/lib/libldap.so: undefined reference to `SSL_pending' > /usr/local/lib/libldap.so: undefined reference to `SSL_CTX_set_verify' > /usr/local/lib/libldap.so: undefined reference to `SSL_set_bio' > /usr/local/lib/libldap.so: undefined reference to `SSL_load_error_strin= gs' > /usr/local/lib/libldap.so: undefined reference to `SSL_get_certificate'= > /usr/local/lib/libldap.so: undefined reference to `SSL_CTX_set_cipher_l= ist' > /usr/local/lib/libldap.so: undefined reference to `SSL_accept' > /usr/local/lib/libldap.so: undefined reference to `SSL_CTX_ctrl' > /usr/local/lib/libldap.so: undefined reference to `SSL_CTX_get_cert_sto= re' > /usr/local/lib/libldap.so: undefined reference to `SSL_get_current_ciph= er' > /usr/local/lib/libldap.so: undefined reference to `SSL_CIPHER_get_bits'= > /usr/local/lib/libldap.so: undefined reference to `SSLv23_method' > /usr/local/lib/libldap.so: undefined reference to `SSL_alert_desc_strin= g_long' > /usr/local/lib/libldap.so: undefined reference to `SSL_CTX_use_PrivateK= ey_file' > /usr/local/lib/libldap.so: undefined reference to `SSL_alert_type_strin= g_long' > /usr/local/lib/libldap.so: undefined reference to `SSL_CTX_set_tmp_dh_c= allback' > /usr/local/lib/libldap.so: undefined reference to `SSL_CTX_use_certific= ate_file' > /usr/local/lib/libldap.so: undefined reference to `SSL_state_string_lon= g' > /usr/local/lib/libldap.so: undefined reference to `SSL_connect' > /usr/local/lib/libldap.so: undefined reference to `SSL_free' > /usr/local/lib/libldap.so: undefined reference to `SSL_get_peer_certifi= cate' > /usr/local/lib/libldap.so: undefined reference to `SSL_get_verify_resul= t' > /usr/local/lib/libldap.so: undefined reference to `SSL_CTX_set_client_C= A_list' > /usr/local/lib/libldap.so: undefined reference to `SSL_write' > *** Error code 1 >=20 > Stop in /usr/src/kerberos5/libexec/ipropd-master. > *** Error code 1 >=20 > Stop in /usr/src/kerberos5/libexec. > *** Error code 1 >=20 > Stop in /usr/src/kerberos5. > *** Error code 1 >=20 > Stop in /usr/src. > *** Error code 1 >=20 > Stop in /usr/src. > *** Error code 1 >=20 > Stop in /usr/src. >=20 This seems to only affect the compilation of RELENG_8_0 sources in RELENG= _7_2. Worked around by setting WITHOUT_KERBEROS=3Dyes in /etc/src.conf, upgradi= ng the system through the usual procedure including rebuilding all of the ports,= and then removing /etc/src.conf and rebuilding world,kernel one more time. Still, ipropd-{master,slave} end up linked against the LDAP shlibs instal= led from ports which seems wrong to me, at least not without having to expres= sly set make variables to turn that behaviour on. % ldd /usr/libexec/ipropd-master=20 /usr/libexec/ipropd-master: libkadm5srv.so.10 =3D> /usr/lib/libkadm5srv.so.10 (0x80064b000) libhdb.so.10 =3D> /usr/lib/libhdb.so.10 (0x80075a000) libkrb5.so.10 =3D> /usr/lib/libkrb5.so.10 (0x800876000) libhx509.so.10 =3D> /usr/lib/libhx509.so.10 (0x8009e3000) libroken.so.10 =3D> /usr/lib/libroken.so.10 (0x800b22000) libasn1.so.10 =3D> /usr/lib/libasn1.so.10 (0x800c33000) libcrypto.so.6 =3D> /lib/libcrypto.so.6 (0x800db2000) libcrypt.so.5 =3D> /lib/libcrypt.so.5 (0x80104b000) libcom_err.so.5 =3D> /usr/lib/libcom_err.so.5 (0x801164000) libldap-2.4.so.7 =3D> /usr/local/lib/libldap-2.4.so.7 (0x80126600= 0) liblber-2.4.so.7 =3D> /usr/local/lib/liblber-2.4.so.7 (0x8013a400= 0) libc.so.7 =3D> /lib/libc.so.7 (0x8014b1000) libssl.so.6 =3D> /usr/lib/libssl.so.6 (0x8016e7000) Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate Kent, CT11 9PW --------------enig4D14DC53F8C923C05D68866C Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.13 (FreeBSD) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEAREIAAYFAksPJFAACgkQ8Mjk52CukIxG3wCeMLJMyqp0jqC1PS/kUk84i1hY y4QAnR3TN2EiX1ttpA02itMD124mtkD5 =n92O -----END PGP SIGNATURE----- --------------enig4D14DC53F8C923C05D68866C--