Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 20 Mar 2004 16:23:32 +0000
From:      Matthew Seaman <m.seaman@infracaninophile.co.uk>
To:        Robert Fitzpatrick <robert@webtent.com>
Cc:        FreeBSD <freebsd-questions@freebsd.org>
Subject:   Re: Building Heimal without using ports
Message-ID:  <20040320162331.GA22432@happy-idiot-talk.infracaninophile.co.uk>
In-Reply-To: <1079796327.5137.10.camel@columbus>
References:  <1079796327.5137.10.camel@columbus>

next in thread | previous in thread | raw e-mail | index | archive | help

--IS0zKkzwUGydFO0o
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Robert,

On Sat, Mar 20, 2004 at 10:25:27AM -0500, Robert Fitzpatrick wrote:
> Well, I have sent two posts to the FreeBSD questions list, one to the
> ports list, one to Heimdal and one to OpenLDAP and copied the port
> maintainer on the last one to the FreeBSD questions list. No help on how
> to get LDAP backend support built in to Heimdal using the port
> security/heimdal.

Do you already have any version of OpenLDAP installed?  I've tried to
reproduce what you saw in your earlier post, but defining WITH_LDAP
makes evrything link against libldap.so as expected for me:

    % ldd kadmind=20
    kadmind:
            libkadm5srv.so.7 =3D> /home/matthew/tmp/local/lib/libkadm5srv.s=
o.7 (0x28074000)
            libhdb.so.7 =3D> /home/matthew/tmp/local/lib/libhdb.so.7 (0x280=
80000)
            libkrb5.so.19 =3D> /home/matthew/tmp/local/lib/libkrb5.so.19 (0=
x2808f000)
            libldap.so.2 =3D> /usr/local/lib/libldap.so.2 (0x280c8000)
            liblber.so.2 =3D> /usr/local/lib/liblber.so.2 (0x280f5000)
            libasn1.so.6 =3D> /home/matthew/tmp/local/lib/libasn1.so.6 (0x2=
8100000)
            libroken.so.16 =3D> /home/matthew/tmp/local/lib/libroken.so.16 =
(0x28121000)
            libcrypto.so.3 =3D> /usr/lib/libcrypto.so.3 (0x2812f000)
            libcom_err.so.2 =3D> /usr/lib/libcom_err.so.2 (0x2822c000)
            libcrypt.so.2 =3D> /usr/lib/libcrypt.so.2 (0x2822e000)
            libc.so.4 =3D> /usr/lib/libc.so.4 (0x28247000)
            libsasl2.so.2 =3D> /usr/local/lib/libsasl2.so.2 (0x282e3000)
            libssl.so.3 =3D> /usr/lib/libssl.so.3 (0x282f7000)
    % ldd kdc
    kdc:
            libhdb.so.7 =3D> /home/matthew/tmp/local/lib/libhdb.so.7 (0x280=
7b000)
            libkrb5.so.19 =3D> /home/matthew/tmp/local/lib/libkrb5.so.19 (0=
x2808a000)
            libldap.so.2 =3D> /usr/local/lib/libldap.so.2 (0x280c3000)
            liblber.so.2 =3D> /usr/local/lib/liblber.so.2 (0x280f0000)
            libasn1.so.6 =3D> /home/matthew/tmp/local/lib/libasn1.so.6 (0x2=
80fb000)
            libroken.so.16 =3D> /home/matthew/tmp/local/lib/libroken.so.16 =
(0x2811c000)
            libcrypto.so.3 =3D> /usr/lib/libcrypto.so.3 (0x2812a000)
            libcom_err.so.2 =3D> /usr/lib/libcom_err.so.2 (0x28227000)
            libcrypt.so.2 =3D> /usr/lib/libcrypt.so.2 (0x28229000)
            libc.so.4 =3D> /usr/lib/libc.so.4 (0x28242000)
            libsasl2.so.2 =3D> /usr/local/lib/libsasl2.so.2 (0x282de000)
            libssl.so.3 =3D> /usr/lib/libssl.so.3 (0x282f2000)

I think that the problem is the port doesn't add any dependencies
against OpenLDAP even if WITH_LDAP is defined.  That's a bug.

In fact, can you try this patch to the security/heimdal Makefile?

% diff -u Makefile.orig Makefile=20
--- Makefile.orig       Sat Mar 20 16:15:56 2004
+++ Makefile    Sat Mar 20 16:17:08 2004
@@ -32,6 +32,7 @@
 CONFIGURE_ENV+=3D                CFLAGS=3D"${CFLAGS}"
 CONFIGURE_ARGS+=3D       --enable-shared --without-krb4
 .if defined(WITH_LDAP)
+USE_OPENLDAP=3D          yes
 CONFIGURE_ARGS+=3D       --with-openldap=3D${LOCALBASE}
 .endif

This should cause your system to install one of the OpenLDAP ports as
a dependency of security/heimdal before it builds the heimdal stuff
itself -- net/openldap21-client is probably what will be installed.
When you rebuild the security/heimdal port using WITH_LDAP=3Dyes, be
sure to do a 'make clean' first so you force the configuration scripts
to be run again.

Since you'll be installing OpenLDAP, you might want to refer to
http://www.padl.com/Research/Heimdal.html -- I don't know if the
patches spoken of there are still necessary (that page could well be
out of date as it seems to be a few versions behind on the OpenLDAP
releases), but if they are, you can try building the OpenLDAP stuff
with "WITH_SASL=3Dyes"

	Cheers,

	Matthew

--=20
Dr Matthew J Seaman MA, D.Phil.                       26 The Paddocks
                                                      Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey         Marlow
Tel: +44 1628 476614                                  Bucks., SL7 1TH UK

--IS0zKkzwUGydFO0o
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (FreeBSD)

iD8DBQFAXHADdtESqEQa7a0RAl1IAJ4rrj6FB/Xe2XPtxb89+YQcmKHMJACfYC3K
LrmqlIX8yCqZxuxrfmdVDlM=
=uBvM
-----END PGP SIGNATURE-----

--IS0zKkzwUGydFO0o--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040320162331.GA22432>