Re: using ldap secure causes core dump

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, 2008-11-24 at 14:00 -0500, Minson, John M Mr ARMY GUEST wrote:
> note thi sis apache 2.2.10
> 
> # ldd httpd
>         libldap.so.5 =>  /usr/lib/libldap.so.5
>         libdl.so.1 =>    /lib/libdl.so.1
>         libssl.so.0.9.8 =>       /usr/local/ssl/lib/libssl.so.0.9.8
>         libcrypto.so.0.9.8 =>    /usr/local/ssl/lib/libcrypto.so.0.9.8

Yep.

>         libm.so.2 =>     /lib/libm.so.2
>         libaprutil-1.so.0
> =>     /usr/local/httpd/lib/libaprutil-1.so.0
>         libexpat.so.1 =>         /usr/sfw/lib/libexpat.so.1
>         libapr-1.so.0 =>         /usr/local/httpd/lib/libapr-1.so.0
>         libuuid.so.1 =>  /lib/libuuid.so.1
>         libsendfile.so.1 =>      /lib/libsendfile.so.1
>         librt.so.1 =>    /lib/librt.so.1
>         libsocket.so.1 =>        /lib/libsocket.so.1
>         libnsl.so.1 =>   /lib/libnsl.so.1
>         libpthread.so.1 =>       /lib/libpthread.so.1
>         libc.so.1 =>     /lib/libc.so.1
>         libsasl.so.1 =>  /usr/lib/libsasl.so.1
>         libmd.so.1 =>    /lib/libmd.so.1
>         libnspr4.so =>   /usr/lib/mps/libnspr4.so
>         libplc4.so =>    /usr/lib/mps/libplc4.so
>         libnss3.so =>    /usr/lib/mps/libnss3.so
>         libssl3.so =>    /usr/lib/mps/libssl3.so
>         libgcc_s.so.1 =>         /usr/local/lib/libgcc_s.so.1
>         libgcc_s.so.1 =>         /usr/sfw/lib/libgcc_s.so.1
>         libaio.so.1 =>   /lib/libaio.so.1
>         libmp.so.2 =>    /lib/libmp.so.2
>         libscf.so.1 =>   /lib/libscf.so.1
>         libthread.so.1 =>        /lib/libthread.so.1
>         libsoftokn3.so =>        /usr/lib/mps/libsoftokn3.so
>         libplds4.so =>   /usr/lib/mps/libplds4.so
>         libdoor.so.1 =>  /lib/libdoor.so.1
>         libuutil.so.1 =>         /lib/libuutil.so.1
>         libgen.so.1 =>   /lib/libgen.so.1
>         libbsm.so.1 =>   /lib/libbsm.so.1
>         libsecdb.so.1 =>         /lib/libsecdb.so.1
>         libtsol.so.2 =>  /lib/libtsol.so.2
>         libcmd.so.1 =>   /lib/libcmd.so.1
>         /platform/SUNW,Sun-Fire-T200/lib/libc_psr.so.1
>         /platform/SUNW,Sun-Fire-T200/lib/libmd_psr.so.1
>         /usr/lib/mps/cpu/sparcv8plus/libnspr_flt4.so
> 
> ldd of mod_ssl and mod_authnz_ldap show nothing ? 

They probably have the SSL libraries staticly linked in.

> I think the issue is the 'libldap.so.5 =>  /usr/lib/libldap.so.5' .
> This is pointing to the standard Solaris 10 ldap which I suspect was
> built against the Solaris 10 ssl .
> 
> I cannot get the apache config/make to pick up my install of open ldap
> 2.4.11 installed in /usr/local 
> 
> If I set LD_LIBRARY_PATH=/usr/local/lib the apache config gives me
> 
> checking for ldap support...
> checking for ldap_init in -lldap50... no
> checking for ldap_init in -lldapssl41... no
> checking for ldap_init in -lldapssl40... no
> checking for ldap_init in -lldapssl30... no
> checking for ldap_init in -lldapssl20... no
> checking for ldap_init in -lldapsdk... no
> checking for ldap_init in -lldapsdk... no
> checking for ldap_init in -lldap... no
> checking for ldap_init in -lldap... no
> checking for ldap_init in -lldap... no
> checking for ldap_init in -lldap... no
> configure: error: could not find an LDAP library
> configure failed for srclib/apr-util

Yeah, that is unlikely to work. How about manually installing apr and
apr-util (you'll find them in httpd-2.2.10/srclib/apr and
httpd-2.2.10/srclib/apr-util). When you come to build apr-util, you can
pass the LDAP library path to the configure script with something like
'--with-ldap-include=/usr/local --with-ldap-lib=/usr/local
--with-ldap=/usr/local/lib/libldap.so'. 
Thats probably not exactly right, but play around with it and then it
should be fine. 
Once you have apr/apr-util built correctly, configure httpd to use those
installed versions with '--with-apr=/usr/local/bin/apr-1-config
--with-apr-util=/usr/local/bin/apu-1-config'.

BTW, your emails all seem to come through as HTML email attachments.

Cheers

Tom


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux