Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 27 Nov 2009 00:58:50 +0000
From:      Matthew Seaman <m.seaman@infracaninophile.co.uk>
To:        freebsd-current@freebsd.org
Subject:   Re: Building RELENG_8_0 confused by openldap.
Message-ID:  <4B0F244A.60404@infracaninophile.co.uk>
In-Reply-To: <4B0E57CC.7050509@infracaninophile.co.uk>
References:  <4B0E57CC.7050509@infracaninophile.co.uk>

next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig4D14DC53F8C923C05D68866C
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: quoted-printable

Matthew Seaman wrote:
> Hi,
>=20
> I realise that 8.0 is literally just heading out of the door, but I see=
m to
> have discovered a problem.
>=20
> When building the RELENG_8_0 world preparatory to upgrading a RELENG_7_=
2
> machine with OpenLDAP 2.4.19 installed, the build falls over because Ke=
rberos ipropd picks up the presence of /usr/local/lib/libldap.so ultimate=
ly causing linking to fail because of missing OpenSSL symbols:
>=20
> =3D=3D=3D> kerberos5/libexec/ipropd-master (all)
> cc -O2 -pipe  -I/usr/src/kerberos5/libexec/ipropd-master/../../../crypt=
o/heimdal/lib/krb5 -I/usr/src/kerberos5/libexec/ipropd-master/../../../cr=
ypto/heimdal/lib/asn1 -I/usr/src/kerberos5/libexec/ipropd-master/../../..=
/crypto/heimdal/lib/roken  -I. -I/usr/local/include -DOPENLDAP=3D1 -DHAVE=
_CONFIG_H -I/usr/src/kerberos5/libexec/ipropd-master/../../include -std=3D=
gnu99 -fstack-protector  -c /usr/src/kerberos5/libexec/ipropd-master/../.=
=2E/../crypto/heimdal/lib/kadm5/ipropd_common.c
> cc -O2 -pipe  -I/usr/src/kerberos5/libexec/ipropd-master/../../../crypt=
o/heimdal/lib/krb5 -I/usr/src/kerberos5/libexec/ipropd-master/../../../cr=
ypto/heimdal/lib/asn1 -I/usr/src/kerberos5/libexec/ipropd-master/../../..=
/crypto/heimdal/lib/roken  -I. -I/usr/local/include -DOPENLDAP=3D1 -DHAVE=
_CONFIG_H -I/usr/src/kerberos5/libexec/ipropd-master/../../include -std=3D=
gnu99 -fstack-protector  -c /usr/src/kerberos5/libexec/ipropd-master/../.=
=2E/../crypto/heimdal/lib/kadm5/ipropd_master.c
> cc -O2 -pipe  -I/usr/src/kerberos5/libexec/ipropd-master/../../../crypt=
o/heimdal/lib/krb5 -I/usr/src/kerberos5/libexec/ipropd-master/../../../cr=
ypto/heimdal/lib/asn1 -I/usr/src/kerberos5/libexec/ipropd-master/../../..=
/crypto/heimdal/lib/roken  -I. -I/usr/local/include -DOPENLDAP=3D1 -DHAVE=
_CONFIG_H -I/usr/src/kerberos5/libexec/ipropd-master/../../include -std=3D=
gnu99 -fstack-protector  -L/usr/local/lib -Wl,-rpath,/usr/local/lib -o ip=
ropd-master ipropd_common.o ipropd_master.o -lkadm5srv -lhdb -lkrb5 -lhx5=
09 -lroken /usr/obj/usr/src/kerberos5/libexec/ipropd-master/../../lib/lib=
vers/libvers.a  -lasn1 -lcrypto -lcrypt -lcom_err -lldap -llber
> /usr/obj/usr/src/tmp/usr/bin/ld: warning: libssl.so.5, needed by /usr/l=
ocal/lib/libldap.so, not found (try using -rpath or -rpath-link)
> /usr/obj/usr/src/tmp/usr/bin/ld: warning: libcrypto.so.5, needed by /us=
r/local/lib/libldap.so, not found (try using -rpath or -rpath-link)
> /usr/local/lib/libldap.so: undefined reference to `SSL_CTX_set_tmp_rsa_=
callback'
> /usr/local/lib/libldap.so: undefined reference to `SSL_CTX_set_info_cal=
lback'
> /usr/local/lib/libldap.so: undefined reference to `SSL_CTX_free'
> /usr/local/lib/libldap.so: undefined reference to `SSL_shutdown'
> /usr/local/lib/libldap.so: undefined reference to `SSL_load_client_CA_f=
ile'
> /usr/local/lib/libldap.so: undefined reference to `SSL_CTX_set_default_=
verify_paths'
> /usr/local/lib/libldap.so: undefined reference to `SSL_CTX_set_session_=
id_context'
> /usr/local/lib/libldap.so: undefined reference to `SSL_get_error'
> /usr/local/lib/libldap.so: undefined reference to `SSL_read'
> /usr/local/lib/libldap.so: undefined reference to `SSL_new'
> /usr/local/lib/libldap.so: undefined reference to `SSL_add_dir_cert_sub=
jects_to_stack'
> /usr/local/lib/libldap.so: undefined reference to `SSL_CTX_new'
> /usr/local/lib/libldap.so: undefined reference to `SSL_library_init'
> /usr/local/lib/libldap.so: undefined reference to `SSL_CTX_load_verify_=
locations'
> /usr/local/lib/libldap.so: undefined reference to `SSL_pending'
> /usr/local/lib/libldap.so: undefined reference to `SSL_CTX_set_verify'
> /usr/local/lib/libldap.so: undefined reference to `SSL_set_bio'
> /usr/local/lib/libldap.so: undefined reference to `SSL_load_error_strin=
gs'
> /usr/local/lib/libldap.so: undefined reference to `SSL_get_certificate'=

> /usr/local/lib/libldap.so: undefined reference to `SSL_CTX_set_cipher_l=
ist'
> /usr/local/lib/libldap.so: undefined reference to `SSL_accept'
> /usr/local/lib/libldap.so: undefined reference to `SSL_CTX_ctrl'
> /usr/local/lib/libldap.so: undefined reference to `SSL_CTX_get_cert_sto=
re'
> /usr/local/lib/libldap.so: undefined reference to `SSL_get_current_ciph=
er'
> /usr/local/lib/libldap.so: undefined reference to `SSL_CIPHER_get_bits'=

> /usr/local/lib/libldap.so: undefined reference to `SSLv23_method'
> /usr/local/lib/libldap.so: undefined reference to `SSL_alert_desc_strin=
g_long'
> /usr/local/lib/libldap.so: undefined reference to `SSL_CTX_use_PrivateK=
ey_file'
> /usr/local/lib/libldap.so: undefined reference to `SSL_alert_type_strin=
g_long'
> /usr/local/lib/libldap.so: undefined reference to `SSL_CTX_set_tmp_dh_c=
allback'
> /usr/local/lib/libldap.so: undefined reference to `SSL_CTX_use_certific=
ate_file'
> /usr/local/lib/libldap.so: undefined reference to `SSL_state_string_lon=
g'
> /usr/local/lib/libldap.so: undefined reference to `SSL_connect'
> /usr/local/lib/libldap.so: undefined reference to `SSL_free'
> /usr/local/lib/libldap.so: undefined reference to `SSL_get_peer_certifi=
cate'
> /usr/local/lib/libldap.so: undefined reference to `SSL_get_verify_resul=
t'
> /usr/local/lib/libldap.so: undefined reference to `SSL_CTX_set_client_C=
A_list'
> /usr/local/lib/libldap.so: undefined reference to `SSL_write'
> *** Error code 1
>=20
> Stop in /usr/src/kerberos5/libexec/ipropd-master.
> *** Error code 1
>=20
> Stop in /usr/src/kerberos5/libexec.
> *** Error code 1
>=20
> Stop in /usr/src/kerberos5.
> *** Error code 1
>=20
> Stop in /usr/src.
> *** Error code 1
>=20
> Stop in /usr/src.
> *** Error code 1
>=20
> Stop in /usr/src.
>=20

This seems to only affect the compilation of RELENG_8_0 sources in RELENG=
_7_2.
Worked around by setting WITHOUT_KERBEROS=3Dyes in /etc/src.conf, upgradi=
ng the
system through the usual procedure including rebuilding all of the ports,=
 and
then removing /etc/src.conf and rebuilding world,kernel one more time.

Still, ipropd-{master,slave} end up linked against the LDAP shlibs instal=
led
from ports which seems wrong to me, at least not without having to expres=
sly
set make  variables to turn that behaviour on.

% ldd /usr/libexec/ipropd-master=20
/usr/libexec/ipropd-master:
        libkadm5srv.so.10 =3D> /usr/lib/libkadm5srv.so.10 (0x80064b000)
        libhdb.so.10 =3D> /usr/lib/libhdb.so.10 (0x80075a000)
        libkrb5.so.10 =3D> /usr/lib/libkrb5.so.10 (0x800876000)
        libhx509.so.10 =3D> /usr/lib/libhx509.so.10 (0x8009e3000)
        libroken.so.10 =3D> /usr/lib/libroken.so.10 (0x800b22000)
        libasn1.so.10 =3D> /usr/lib/libasn1.so.10 (0x800c33000)
        libcrypto.so.6 =3D> /lib/libcrypto.so.6 (0x800db2000)
        libcrypt.so.5 =3D> /lib/libcrypt.so.5 (0x80104b000)
        libcom_err.so.5 =3D> /usr/lib/libcom_err.so.5 (0x801164000)
        libldap-2.4.so.7 =3D> /usr/local/lib/libldap-2.4.so.7 (0x80126600=
0)
        liblber-2.4.so.7 =3D> /usr/local/lib/liblber-2.4.so.7 (0x8013a400=
0)
        libc.so.7 =3D> /lib/libc.so.7 (0x8014b1000)
        libssl.so.6 =3D> /usr/lib/libssl.so.6 (0x8016e7000)


	Cheers,

	Matthew

--=20
Dr Matthew J Seaman MA, D.Phil.                   7 Priory Courtyard
                                                  Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey     Ramsgate
                                                  Kent, CT11 9PW


--------------enig4D14DC53F8C923C05D68866C
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.13 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEAREIAAYFAksPJFAACgkQ8Mjk52CukIxG3wCeMLJMyqp0jqC1PS/kUk84i1hY
y4QAnR3TN2EiX1ttpA02itMD124mtkD5
=n92O
-----END PGP SIGNATURE-----

--------------enig4D14DC53F8C923C05D68866C--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4B0F244A.60404>