habe mit "--with-ldap=/usr" schon probiert, hat aber leider nichts gebracht... Dan-Valentin PS --enable-gssapi ist von der SuSE Entwickler eingetragen (ich habe nur "--with-ldap" eingefügt) warum das funktionieren sollte, ist mir nicht so klar; aber ich gehe davon aus dass SuSE Team sich dabei was gedacht haben.... On Wed, 2004-11-03 at 15:57, Dieter Kluenter wrote:

Dan-Valentin Soare writes:

...

hallo Leute

Auf eine SuSE 9.1 Pro Maschine mvchte ich Cyrus-IMAP mit LDAP Authentifizierung verwenden und benvtige daf|r den Cyrus-SASL mit LDAP.

Da dies nicht standardmd_ig einkompiliert ist, habe ich's versucht neu zu kompilieren und installieren, also:

...

- Inhalt SuSE DVD und Updates in /install kopiert

F> - cyrus-sasl-2.1.18-33.5.src.rpm installiert

...

- cyrus-sasl.spec in /usr/src/packages/SPECS gedndert auf:

.... ./configure --libdir=%{_libdir} \ --with-plugindir=%{_libdir}/sasl2 \ --prefix=/usr \ --sysconfdir=/etc \ --mandir=%{_mandir} \ --with-saslauthd=/var/run/sasl2/ \ --enable-pam \ --enable-sample \ --enable-login \ --enable-gssapi \ --enable-krb4=no \ --with-ldap make sasldir=%{_libdir}/sasl2

Auszug aus ./configure --help | less

--with-ldap=DIR use LDAP (in DIR) for saslauthd no --with-mysql=PATH use MySQL from PATH --with-pgsql=PATH use PostgreSQL from PATH

Du mu_t also das Verzeichnis angeben, in dem sich include und libs befinden. Bei SuSE wird das /usr sein.

-Dieter PS --enable-gssapi wir so auch nicht funktionieren, du solltest dir wirklich erst einmal alle configure Flags ansehen. -D.

-- Dieter Kl|nter | Systemberatung http://www.dkluenter.de GPG Key ID:01443B53

Danke für die Hilfe und Unterstützung - aber laut .build.log wird openldap-devel installiert (habe openldap2-devel in spec Datei eingetragen und installiert ist auch): ............................ processing specfile /usr/src/packages/SOURCES/cyrus-sasl.spec... init_buildsystem aaa_base acl attr bash bind-utils bison bzip2 coreutils cpio cpp cracklib cvs db devs diffutils e2fspro gs file filesystem fillup findutils flex gawk gdbm-devel glibc glibc-devel glibc-locale gpm grep groff gzip info insserv kbd less libacl libattr libgcc libselinux libstdc++ libxcrypt m4 make man mktemp module-init-tools ncurses ncurses-deve l net-tools netcfg openldap2 openldap2-devel openldap2-client openssl pam pam-modules patch permissions popt procinfo pr ocps psmisc pwdutils rcs readline sed strace syslogd sysvinit tar tcpd texinfo timezone unzip util-linux vim zlib zlib-d evel autoconf automake binutils db-devel e2fsprogs-devel gcc gdbm gettext heimdal heimdal-devel heimdal-lib libtool open ssl-devel opie pam-devel perl rpm ... ...................... installing openldap2-client-2.2.6-34 installing heimdal-lib-0.6.1rc3-51 installing glibc-devel-2.3.3-98 installing heimdal-0.6.1rc3-51 installing openssl-devel-0.9.7d-15 installing groff-1.17.2-876 Updating etc/sysconfig/suseconfig... installing libtool-1.5.2-56 installing tcpd-7.6-710 installing db-devel-4.2.52-85 installing less-382-34 installing autoconf-2.59-75 installing automake-1.8.3-23 installing bison-1.875-51 installing cpio-2.5-308 installing cvs-1.11.14-20 installing flex-2.5.4a-293 installing gcc-3.3.3-41 installing gdbm-devel-1.8.3-225 installing gettext-0.14.1-30 installing glibc-locale-2.3.3-98 installing gpm-1.20.1-299 Updating etc/sysconfig/mouse... installing heimdal-devel-0.6.1rc3-51 installing kbd-1.12-26 Updating etc/sysconfig/console... Updating etc/sysconfig/keyboard... installing make-3.80-184 installing man-2.4.1-209 Updating etc/sysconfig/cron... installing module-init-tools-3.0_pre10-35 installing ncurses-devel-5.4-59 installing net-tools-1.60-543 installing netcfg-9.1-0 warning: /etc/HOSTNAME created as /etc/HOSTNAME.rpmnew installing openldap2-2.2.6-34 warning: group ldap does not exist - using root warning: group ldap does not exist - using root warning: user ldap does not exist - using root warning: group ldap does not exist - using root warning: user ldap does not exist - using root warning: group ldap does not exist - using root Updating etc/sysconfig/openldap... installing openldap2-devel-2.2.6-34 installing opie-2.4-544 installing pam-devel-0.77-221 ................... - dann rpm -qa|grep openldap gibt : openldap2-devel-2.2.6-34 openldap2-2.2.6-34 openldap2-client-2.2.6-34 anbei die komplette cyrus-sasl.spec datei: # # spec file for package cyrus-sasl (Version 2.1.18) # # Copyright (c) 2004 SUSE LINUX AG, Nuernberg, Germany. # This file and all modifications and additions to the pristine # package are under the same license as the package itself. # # Please submit bugfixes or comments via http://www.suse.de/feedback/ # # norootforbuild # neededforbuild db db-devel kerberos-devel-packages openssl openssl-devel opie pam-devel openldap2 openldap2-devel openldap2-client BuildRequires: aaa_base acl attr bash bind-utils bison bzip2 coreutils cpio cpp cracklib cvs db devs diffutils e2fsprogs file filesystem fillup findutils flex gawk gdbm-devel glibc glibc-devel glibc-locale gpm grep groff gzip info insserv kbd less libacl libattr libgcc libselinux libstdc++ libxcrypt m4 make man mktemp module-init-tools ncurses ncurses-devel net-tools netcfg openldap2 openldap2-devel openldap2-client openssl pam pam-modules patch permissions popt procinfo procps psmisc pwdutils rcs readline sed strace syslogd sysvinit tar tcpd texinfo timezone unzip util-linux vim zlib zlib-devel autoconf automake binutils db-devel e2fsprogs-devel gcc gdbm gettext heimdal heimdal-devel heimdal-lib libtool openssl-devel opie pam-devel perl rpm Name: cyrus-sasl Obsoletes: cyrus-sasl2 Provides: cyrus-sasl2 License: BSD, Other License(s), see package Group: Productivity/Networking/Other URL: http://asg.web.cmu.edu/sasl/ Autoreqprov: on Summary: Implementation of Cyrus SASL API Version: 2.1.18 Release: 33.5.10 Source: cyrus-sasl-%{version}.tar.bz2 Source1: SuSE.tar.gz Patch: cyrus-sasl-%{version}.dif Patch1: shared_link_on_ppc.patch Prereq: %insserv_prereq %fillup_prereq BuildRoot: %{_tmppath}/%{name}-%{version}-build %package gssapi Obsoletes: cyrus-sasl2-gssapi Provides: cyrus-sasl2-gssapi Summary: Cyrus SASL API implementation Autoreqprov: on Group: Development/Libraries/C and C++ Prefix: %{_prefix} Requires: cyrus-sasl %package crammd5 Summary: Cyrus SASL API implementation Autoreqprov: on Group: Development/Libraries/C and C++ Prefix: %{_prefix} Requires: cyrus-sasl %package digestmd5 Summary: Cyrus SASL API implementation Autoreqprov: on Group: Development/Libraries/C and C++ Prefix: %{_prefix} Requires: cyrus-sasl %package otp Summary: Cyrus SASL API implementation Autoreqprov: on Group: Development/Libraries/C and C++ Prefix: %{_prefix} Requires: cyrus-sasl %package plain Summary: Cyrus SASL API implementation Autoreqprov: on Group: Development/Libraries/C and C++ Prefix: %{_prefix} Requires: cyrus-sasl %package devel Obsoletes: cyrus-sasl2-devel Provides: cyrus-sasl2-devel Summary: Cyrus SASL API implmentation, Libraries and Header files Autoreqprov: on Group: Development/Libraries/C and C++ Prefix: %{_prefix} Requires: cyrus-sasl = %{version} %description This is the Cyrus SASL API. It can be used on the client or server side to provide authentication. See RFC 2222 for more information. Authors: -------- <tech-transfer> tech-transfer@andrew.cmu.edu %description gssapi This is the Cyrus SASL API implmentation. It can be used on the client or server side to provide authentication. See RFC 2222 for more information. Authors: -------- <tech-transfer> tech-transfer@andrew.cmu.edu %description devel This is the Cyrus SASL API implmentation. It can be used on the client or server side to provide authentication. See RFC 2222 for more information. Authors: -------- <tech-transfer> tech-transfer@andrew.cmu.edu %description digestmd5 This is the Cyrus SASL API implmentation. It can be used on the client or server side to provide authentication. See RFC 2222 for more information. Authors: -------- <tech-transfer> tech-transfer@andrew.cmu.edu %description crammd5 This is the Cyrus SASL API implmentation. It can be used on the client or server side to provide authentication. See RFC 2222 for more information. Authors: -------- <tech-transfer> tech-transfer@andrew.cmu.edu %description otp This is the Cyrus SASL API implmentation. It can be used on the client or server side to provide authentication. See RFC 2222 for more information. Authors: -------- <tech-transfer> tech-transfer@andrew.cmu.edu %description plain This is the Cyrus SASL API implmentation. It can be used on the client or server side to provide authentication. See RFC 2222 for more information. Authors: -------- <tech-transfer> tech-transfer@andrew.cmu.edu %prep %setup -n cyrus-sasl-%{version} -a 1 %patch %patch1 %build %{suse_update_config -f config} %{suse_update_config -f saslauthd/config} # has old libtool macros (and nothing else) # rm -f acinclude.m4 # libtoolize --force # cyrus-sasl2 does not work, when using newer libtool aclocal -I cmulocal -I config automake autoheader autoconf cd saslauthd autoconf cd - export CFLAGS="-fno-strict-aliasing $RPM_OPT_FLAGS" export CPPFLAGS="-I/usr/include/heimdal -I/usr/include" ./configure --libdir=%{_libdir} \ --with-plugindir=%{_libdir}/sasl2 \ --prefix=/usr \ --sysconfdir=/etc \ --mandir=%{_mandir} \ --with-saslauthd=/var/run/sasl2/ \ --enable-pam \ --enable-sample \ --enable-login \ --enable-gssapi \ --enable-krb4=no \ --with-ldap make sasldir=%{_libdir}/sasl2 %install rm -rf $RPM_BUILD_ROOT make DESTDIR=$RPM_BUILD_ROOT sasldir=%{_libdir}/sasl2 install install -m 755 -d $RPM_BUILD_ROOT/var/run/sasl2 install -D -m 755 SuSE/rc.saslauthd $RPM_BUILD_ROOT/etc/init.d/saslauthd mkdir -p $RPM_BUILD_ROOT/sbin ln -sf ../etc/init.d/saslauthd $RPM_BUILD_ROOT/sbin/rcsaslauthd install -D -m 644 SuSE/sysconfig.saslauthd $RPM_BUILD_ROOT/var/adm/fillup-templates/sysconfig.saslauthd cd utils gcc -Wall -W -O2 -fmessage-length=0 -o dbconverter dbconverter-2.o ../sasldb/.libs/libsasldb.al -lresolv ../lib/.libs/libsasl2.so -ldl -ldb #gcc -Wall -W -O2 -fmessage-length=0 -o dbconverter dbconverter-2.o ../sasldb/.libs/libsasldb.al -lresolv ../lib/.libs/libsasl2.so -ldl -ldb -Wl,--rpath -Wl,/usr/src/packages/BUILD/cyrus-sasl-2.1.12/lib/.libs install -m 755 dbconverter $RPM_BUILD_ROOT/usr/sbin/dbconverter %preun %stop_on_removal saslauthd %postun %restart_on_update saslauthd %insserv_cleanup %post test $1 -gt 1 && { mkdir -p var/adm/notify/messages cat << EOF > var/adm/notify/messages/cyrus-notify ATTENTION!!! ------------ The cyrus-sasl package has been split into several subpackages for each authentication method: cyrus-sasl-crammd5 cyrus-sasl-digestmd5 cyrus-sasl-gssapi cyrus-sasl-otp cyrus-sasl-plain So if you want to use one of these mechanisms independent whether you are using SASL as client or server, you have to install the according subpackage. Per default only the cyrus-sasl main package will be installed! ACHTUNG!!! ---------- Das cyrus-sasl Paket wurde in mehrere Unterpakete aufgeteilt, eines fuer jede Authentisierungsmethode: cyrus-sasl-crammd5 cyrus-sasl-digestmd5 cyrus-sasl-gssapi cyrus-sasl-otp cyrus-sasl-plain Wenn Sie einen dieser Mechanismen benutzen wollen, muessen Sie das entsprechende Paket installieren, unabhaengig davon, ob Sie SASL als Client oder Server benutzen. Per Default wird lediglich das cyrus-sasl Hauptpaket installiert! EOF } %run_ldconfig %{fillup_and_insserv -n saslauthd} %clean rm -rf $RPM_BUILD_ROOT %files %defattr(-,root,root) /var/adm/fillup-templates/sysconfig.saslauthd %config /etc/init.d/saslauthd /sbin/rcsaslauthd %dir %{_libdir}/sasl2 %{_libdir}/sasl2/libanonymous.so* %{_libdir}/sasl2/libanonymous.la %{_libdir}/sasl2/liblogin.so* %{_libdir}/sasl2/liblogin.la %{_libdir}/sasl2/libsasldb.so* %{_libdir}/sasl2/libsasldb.la %{_libdir}/libsasl2.so.* /usr/sbin/* %dir %attr(0755,root,root) /var/run/sasl2 %doc %{_mandir}/cat8 %doc %{_mandir}/man3/sasl.*.gz %doc %{_mandir}/man8/*.gz %doc AUTHORS COPYING ChangeLog INSTALL NEWS README doc %doc saslauthd/AUTHORS saslauthd/COPYING saslauthd/ChangeLog saslauthd/INSTALL saslauthd/LDAP_SASLAUTHD saslauthd/NEWS saslauthd/README %files gssapi %defattr(-,root,root) %{_libdir}/sasl2/libgssapiv2.so* %{_libdir}/sasl2/libgssapiv2.la %files crammd5 %defattr(-,root,root) %{_libdir}/sasl2/libcrammd5.so* %{_libdir}/sasl2/libcrammd5.la %files digestmd5 %defattr(-,root,root) %{_libdir}/sasl2/libdigestmd5.so* %{_libdir}/sasl2/libdigestmd5.la %files otp %defattr(-,root,root) %{_libdir}/sasl2/libotp.so* %{_libdir}/sasl2/libotp.la %files plain %defattr(-,root,root) %{_libdir}/sasl2/libplain.so* %{_libdir}/sasl2/libplain.la %files devel %defattr(-,root,root) /usr/include/sasl %doc %{_mandir}/man3/sasl_*.gz %{_libdir}/libsasl2.la %{_libdir}/libsasl2.so %changelog -n cyrus-sasl * Wed Oct 06 2004 - choeger@suse.de - Bugfix ID#46847 - VUL-0: SASL environment variable local root * Fri Mar 12 2004 - choeger@suse.de - update to version 2.1.18 (Bugfix Release) * Tue Jan 27 2004 - choeger@suse.de - Bugfix ID#34159 - cyrus-sasl: world-writeable rpath * Thu Jan 22 2004 - choeger@suse.de - Bugfix Bugzilla ID#34019, notice users about the fact, that cyrus-sasl has been splitted into subpackages * Fri Jan 16 2004 - kukuk@suse.de - Add pam-devel to neededforbuild * Tue Dec 02 2003 - choeger@suse.de - update to version 2.1.17 * Fri Oct 31 2003 - choeger@suse.de - Don't build as root * Fri Oct 17 2003 - kukuk@suse.de - Remove unused des from neededforbuild * Tue Sep 16 2003 - kukuk@suse.de - Add missing Provides [Bug #31005] * Mon Sep 01 2003 - choeger@suse.de - removed "-u root" from startproc as it always failes - removed link to doc/components.html from doc/index.html as components.html does not exist (Bugzilla ID#29253) * Thu Aug 14 2003 - choeger@suse.de - Bugfix Bugzilla ID#28932: missing activation metadata in sysconfig template * Wed Jul 30 2003 - choeger@suse.de - new macros for stop/restart of services on rpm update/removal * Tue Jul 15 2003 - choeger@suse.de - update to version 2.1.15 * Mon Jun 30 2003 - choeger@suse.de - update to version 2.1.14 * Wed Jun 18 2003 - ro@suse.de - use kerberos-devel-packages in neededforbuild * Fri Jun 13 2003 - kukuk@suse.de - Add missing directory to filelist * Fri May 09 2003 - choeger@suse.de - use -ldb instead of -ldb-x.y to manually link the dbconverter * Tue May 06 2003 - choeger@suse.de - update to version 2.1.13 * Tue Apr 15 2003 - ro@suse.de - added krb4-lib,krb4-devel to neededforbuild * Mon Apr 07 2003 - choeger@suse.de - renamed to cyrus-sasl - splitted libraries for the following auth methods into seperate packages: - crammd5 - digestmd5 - otp - plain this is to prevent from annoying warnings about missing proper setup of mechanisms we don't use * Thu Mar 06 2003 - choeger@suse.de - ever used dbconverter-2? Well it is just a shell script which uses the damn compiled source tree... :-( manually building dbconverter to let users convert their /etc/sasldb from v1 to v2 using /usr/sbin/dbconverter * Thu Mar 06 2003 - choeger@suse.de - as cyrus-sasl is dropped now: provide cyrus-sasl-*, obsolete cyrus-sasl-* (Bugzilla ID# 24762) * Tue Feb 04 2003 - choeger@suse.de - update to cyrus-sasl-2.1.12, bug-fix release. This release addresses a few minor build and distribution related issues * Mon Feb 03 2003 - choeger@suse.de - update to cyrus-sasl-2.1.11, bug-fix release. It addresses a number of issues in the build system, a memory leak in the doors IPC method for saslauthd, and fixes the NTLM server side support to only require one of the LM or NT methods. * Thu Jan 23 2003 - choeger@suse.de - don't use new libtool macros as cyrus-sasl2 seems to not work when using them. - added patch to compile shared libraries on ppc * Wed Jan 15 2003 - kukuk@suse.de - Remove openldap2 from needed for build * Tue Jan 14 2003 - choeger@suse.de - do not build the static library anymore * Wed Dec 11 2002 - choeger@suse.de - added sysconfig metadata to sysconfig templates * Tue Dec 10 2002 - choeger@suse.de - update to version 2.1.10 This version corrects a number of DIGEST-MD5 interoperability issues, as well as corrects some potential buffer overflows. * Thu Oct 31 2002 - ro@suse.de - make it build again * Tue Oct 29 2002 - ro@suse.de - remove own libtool macros * Thu Oct 24 2002 - choeger@suse.de - update to latest version 2.1.9 * Thu Sep 12 2002 - choeger@suse.de - Bugfix Bugzilla ID#19383: cyrus-sasl-devel should conflict with cyrus-sasl2-devel, because they contain files with the same name * Mon Aug 19 2002 - rhafer@suse.de - enabled building of the static libsasl.a. It is needed for cyrus-imap to be usable with nss_ldap (which is linked against cyrus-sasl1) * Mon Aug 12 2002 - choeger@suse.de - update to version 2.1.7 * Thu Aug 08 2002 - choeger@suse.de - added .la files to the sasl2 plugin directory ([lt_]dlopen seems to need that) * Mon Aug 05 2002 - choeger@suse.de - added Prereq * Sat Jul 27 2002 - adrian@suse.de - add %%run_ldconfig * Wed Jul 17 2002 - choeger@suse.de - update to version 2.1.6 * Wed Jun 19 2002 - choeger@suse.de - also install dbconverter-2 to be able to migrate from cyrus-sasl(1) * Tue Jun 18 2002 - choeger@suse.de - /var/run/sasl2 must be 755 to let non root daemons connect to unix socket * Tue Jun 18 2002 - choeger@suse.de - added initscript and sysconfig file for saslauthd - added docs * Tue Jun 18 2002 - rhafer@suse.de - added opie to needforbuild - should build on ppc64 and s390x now * Mon Jun 17 2002 - rhafer@suse.de - additional autoconf related patches, that were missing at first check in * Mon Jun 17 2002 - rhafer@suse.de - Initial checkin of cyrus-sasl-2.1.5 Danke Dan-Valentin On Wed, 2004-11-03 at 20:45, Dieter Kluenter wrote:

Dan-Valentin Soare writes:

...

habe mit "--with-ldap=/usr" schon probiert, hat aber leider nichts gebracht...

Dann hast du nicht openldap-devel installiert

...

PS --enable-gssapi ist von der SuSE Entwickler eingetragen (ich habe nur "--with-ldap" eingef|gt) warum das funktionieren sollte, ist mir nicht so klar; aber ich gehe davon aus dass SuSE Team sich dabei was gedacht haben....

Die Ausgabe von ./configure --help verlangt die Kerberos Distribution, das ist bei SuSE Heimdal --enable-gssapi alleine nutzt da nichts.

-Dieter -- Dieter Kl|nter | Systemberatung http://www.dkluenter.de GPG Key ID:01443B53

Hallo, Dan-Valentin Soare writes:

Danke für die Hilfe und Unterstützung

[...] Ich installiere gerade cyrus-sasl-2.1.20 und sehe da etwas in configure.in, das möglicherweise deine Fehlerursache ist. In Zeile 569 ,----[ configure.in ] | # make the option show up so people don't whine that it is only in the | # saslauthd configure script --help | AC_ARG_WITH(ldap, [ --with-ldap=DIR use LDAP (in DIR) for saslauthd [[no]] ],,with_ldap=no) `---- wird für saslauthd die ldap Einbindung unterbunden. Das liegt aber möglicherweise bei mir daran, daß daß ich ldapdb nutze und nicht saslauthd. Prüfe mal bei dir den Eintrag. Der Eintrag 'with_ldap=no' müßte entfernt werden. -Dieter -- Dieter Klünter | Systemberatung http://www.dkluenter.de GPG Key ID:01443B53