Return-Path: Delivered-To: apmail-httpd-users-archive@www.apache.org Received: (qmail 52031 invoked from network); 11 Oct 2005 22:23:16 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur.apache.org with SMTP; 11 Oct 2005 22:23:16 -0000 Received: (qmail 50608 invoked by uid 500); 11 Oct 2005 22:23:05 -0000 Delivered-To: apmail-httpd-users-archive@httpd.apache.org Received: (qmail 50597 invoked by uid 500); 11 Oct 2005 22:23:05 -0000 Mailing-List: contact users-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: users@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list users@httpd.apache.org Received: (qmail 50586 invoked by uid 99); 11 Oct 2005 22:23:05 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (140.211.166.49) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 11 Oct 2005 15:23:05 -0700 Received-SPF: pass (asf.osuosl.org: domain of mboorshtein@gmail.com designates 64.233.184.197 as permitted sender) Received: from [64.233.184.197] (HELO wproxy.gmail.com) (64.233.184.197) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 11 Oct 2005 15:23:07 -0700 Received: by wproxy.gmail.com with SMTP id i7so2553wra for ; Tue, 11 Oct 2005 15:22:43 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references; b=oAHd/CKy9ZpbZWDHqJa/CCOTNvvYnZks+tYFOVj+4/rgo06xBjPiMKznpMuo/jH9fnpEYIYbmh7Cz/LxYMjysu3cOQib/gOig1L4RpwXXCC8ENzII3YpG3Nu9qKyuqqU6Un/qgo7EV7uFbaIapSCPCF7HK37Nud6gc2VuD50IpU= Received: by 10.54.148.10 with SMTP id v10mr30243wrd; Tue, 11 Oct 2005 15:22:43 -0700 (PDT) Received: by 10.54.138.13 with HTTP; Tue, 11 Oct 2005 15:22:43 -0700 (PDT) Message-ID: <800df6390510111522q5acd7207h2939827a261bb202@mail.gmail.com> Date: Tue, 11 Oct 2005 18:22:43 -0400 From: Marc Boorshtein To: "Ricardo M. Stella" Cc: users@httpd.apache.org In-Reply-To: <1377.10.25.1.51.1128091679.squirrel@webmail.rider.edu> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_24954_25256398.1129069363704" References: <800df6390509291920191f8ce6@mail.gmail.com> <1377.10.25.1.51.1128091679.squirrel@webmail.rider.edu> X-Virus-Checked: Checked by ClamAV on apache.org Subject: Re: [users@httpd] Help building mod_auth_ldap.o against the netscape/mozilla SDK X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N ------=_Part_24954_25256398.1129069363704 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Thanks Ricardo, I'm getting closer but am still having a problem. I've trie= d compiling against netscape, sun and mozilla and every time I run configure = I get the following warning: checking for ldap_init in -lldap... yes setting APRUTIL_EXPORT_LIBS to "-lldap -llber" setting APRUTIL_LIBS to "-lldap -llber" checking for ldapssl_install_routines in -lldap... no checking for ldap_start_tls_s in -lldap... yes checking for ber_init in -llber... yes checking lber.h usability... yes checking lber.h presence... yes checking for lber.h... yes checking for ldap.h... yes checking ldap_ssl.h usability... no checking ldap_ssl.h presence... yes configure: WARNING: ldap_ssl.h: present but cannot be compiled configure: WARNING: ldap_ssl.h: check for missing prerequisite headers? configure: WARNING: ldap_ssl.h: see the Autoconf documentation configure: WARNING: ldap_ssl.h: section "Present But Cannot Be Compiled" configure: WARNING: ldap_ssl.h: proceeding with the preprocessor's result configure: WARNING: ldap_ssl.h: in the future, the compiler will take precedence configure: WARNING: ## ------------------------------------------ ## configure: WARNING: ## Report this to the AC_PACKAGE_NAME lists. ## configure: WARNING: ## ------------------------------------------ ## checking for ldap_ssl.h... yes When I then try to compile I get an error about TLS not being present. Is there something specific I need to do? Here's my configure: ./configure --enable-mods-shared=3Dall --with-ldap --with-ldap-lib=3Dh-ldap-include=3D/usr/include/mozilla-1.7.12/ldap --enable-ldap --enable-auth-ldap --with-ssl --enable-so Thanks Marc On 9/30/05, Ricardo M. Stella wrote: > > > > > Hello all, > > > > I'm trying to build the mod_ldap and mod_auth_ldap modules on fedora > core > > 4 > > and am running into some issues. These are the steps I took: > > > > 1. download and extract httpd-2.0.54 source > > 2. copy the netscape sdk to srclib/ldap > > 3; run "./configure --enable-ldap --enable-auth-ldap" > > 4. run "make" > > > > When it gets to the mod_ldap and mod_auth_ldap modules it looks as if i= t > > can't find the netscape libraries. Here is the compilation command: > > > > First, afaik, you need to give configure the '--with-ldap' option or else > it won't even look into it... > > There's a bug in the build of mod_ldap that never looks for the netscape > SDK and only tries to build with openldap (hence it fails). > > I just posted a fix for this to the list 3 days ago. I also included a > patch so TIMEOUT is also implemented when using the sdk. > > Note that I had no luck with Sun's released SDK (5.06). I did compile > Mozilla's latest version (5.14 or 5.16 - can't remember) and it works fin= e > (New version of Mozilla's sdk do include ssl functionality now). > > Basically, to get it to use, look for: > > srclib/apr-util/includes/arp_ldap.h.in > > Search for: > > /* FIXME: remove this when above code works. Default to build with > * OpenLDAP until apu-conf.m4 support exists */ > #define APR_HAS_OPENLDAP_LDAPSDK 1 > #define APR_HAS_LDAP_SSL 1 > > And change it to: > > /* FIXME: remove this when above code works. Default to build with > * OpenLDAP until apu-conf.m4 support exists */ > #define APR_HAS_OPENLDAP_LDAPSDK 0 > #define APR_HAS_NETSCAPE_LDAPSDK 1 > #define APR_HAS_LDAP_SSL 1 > > Building against the Netscape/Sun/Mozilla sdk, allows you to do failover. > But you need to have the TIMEOUT patch in, or else if one of the ldap > servers is down (no response) it'll never failover... > > There are other patches pending for next release 2.0.55 but these I > mention are not in (AFAIK). > > Finally, try to give it a little bit of more options, to help it find > stuff: > > ./configure --with-ldap \ > --with-ldap-lib=3D/usr/local/ldapsdk5/lib \ > --with-ldap-include=3D/usr/local/ldapsdk5/include \ > --enable-auth-ldap \ > --enable-ldap \ > ... > > ------=_Part_24954_25256398.1129069363704 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Thanks Ricardo, I'm getting closer but am still having a problem.  I've tried compiling against netscape, sun and mozilla and every time I run configure I get the following warning:

checking for ldap_init in -lldap... yes
  setting APRUTIL_EXPORT_LIBS to "-lldap -llber"
  setting APRUTIL_LIBS to "-lldap -llber"
checking for ldapssl_install_routines in -lldap... no
checking for ldap_start_tls_s in -lldap... yes
checking for ber_init in -llber... yes
checking lber.h usability... yes
checking lber.h presence... yes
checking for lber.h... yes
checking for ldap.h... yes
checking ldap_ssl.h usability... no
checking ldap_ssl.h presence... yes
configure: WARNING: ldap_ssl.h: present but cannot be compiled
configure: WARNING: ldap_ssl.h:     check for missing p= rerequisite headers?
configure: WARNING: ldap_ssl.h: see the Autoconf documentation
configure: WARNING: ldap_ssl.h:     section "Prese= nt But Cannot Be Compiled"
configure: WARNING: ldap_ssl.h: proceeding with the preprocessor's result configure: WARNING: ldap_ssl.h: in the future, the compiler will take prece= dence
configure: WARNING:     ## ----------------------------= -------------- ##
configure: WARNING:     ## Report this to the AC_PACKAG= E_NAME lists.  ##
configure: WARNING:     ## ----------------------------= -------------- ##
checking for ldap_ssl.h... yes

When I then try to compile I get an error about TLS not being present.  Is there something specific I need to do?  Here's my configure:

./configure --enable-mods-shared=3Dall --with-ldap  --with-ldap-lib=3Dh-ldap-include=3D/usr/include/mozilla-1.7.12/ldap --enable-ldap --enable-auth-ldap --with-ssl --enable-so

Thanks

Marc

On 9/30/05, Ricardo M. Stella <s= tella@rider.edu> wrote:


> Hello all,
>
> I'm trying to build the mod_ldap an= d mod_auth_ldap modules on fedora core
> 4
> and am running int= o some issues. These are the steps I took:
>
> 1. download and = extract=20 httpd-2.0.54 source
> 2. copy the netscape sdk to srclib/ldap
>= 3; run "./configure --enable-ldap --enable-auth-ldap"
> 4.= run "make"
>
> When it gets to the mod_ldap and mod_= auth_ldap modules it looks as if it
> can't find the netscape libraries. Here is the compilation command= :
>

First, afaik, you need to give configure the '--with-ldap'= option or else
it won't even look into it...

There's a bug in th= e build of mod_ldap that never looks for the netscape
SDK and only tries to build with openldap (hence it fails).

I ju= st posted a fix for this to the list 3 days ago.  I also included= a
patch so TIMEOUT is also implemented when using the sdk.

Note = that I had no luck with Sun's released SDK ( 5.06).  I did compile
Mozilla's latest version (5.14 or 5.16 -= can't remember) and it works fine
(New version of Mozilla's sdk do incl= ude ssl functionality now).

Basically, to get it to use, look for:
srclib/apr-util/includes/arp_ldap.h.in

Search for:

/* FIXME: = remove this when above code works.  Default to build with
* O= penLDAP until apu-conf.m4 support exists */
#define APR_HAS_OPENLDAP_LDA= PSDK 1
#define APR_HAS_LDAP_SSL 1

And change it to:

/* FIXME: re= move this when above code works.  Default to build with
* Ope= nLDAP until apu-conf.m4 support exists */
#define APR_HAS_OPENLDAP_LDAPS= DK 0
#define APR_HAS_NETSCAPE_LDAPSDK 1
#define APR_HAS_LDAP_SSL 1

Bui= lding against the Netscape/Sun/Mozilla sdk, allows you to do failover.
B= ut you need to have the TIMEOUT patch in, or else if one of the ldap
servers is down (no response) it'll never failover...

There are othe= r patches pending for next release 2.0.55 but these I
mention are not in= (AFAIK).

Finally, try to give it a little bit of more options, to h= elp it find stuff:

./configure --with-ldap \
--with-ldap-lib=3D/usr/local/ldapsdk5/= lib \
--with-ldap-include=3D/usr/local/ldapsdk5/include \
--enable-au= th-ldap \
--enable-ldap \
...


------=_Part_24954_25256398.1129069363704--