On Mon, Jun 11, 2018 at 05:56:44PM +0200, Sumit Bose wrote:
On Mon, Jun 11, 2018 at 01:35:53PM +0000, Joakim Tjernlund wrote:
> On Mon, 2018-06-11 at 14:09 +0200, Sumit Bose wrote:
> >
> >
> > On Mon, Jun 11, 2018 at 10:50:09AM +0000, Joakim Tjernlund wrote:
> > > On Mon, 2018-06-11 at 10:33 +0000, Joakim Tjernlund wrote:
> > > > CAUTION: This email originated from outside of the organization. Do
not click links or open attachments unless you recognize the sender and know the content
is safe.
> > > >
> > > >
> > > > On Mon, 2018-06-11 at 11:35 +0200, Michael Ströder wrote:
> > > > >
> > > > >
> > > > >
> > > > > On 06/08/2018 09:57 PM, Jakub Hrozek wrote:
> > > > > > SSSD 1.16.2
> > > > > > ===========
> > > > > >
> > > > > > The SSSD team is proud to announce the release of version
1.16.2 of the
> > > > > > System Security Services Daemon.
> > > > >
> > > > > I've added new build dependency p11-kit-devel but build
fails and I
> > >
> > > I too noticed the new dependency on p11-kit, was that intentional ?
> >
> > p11-kit-devel is now needed if you use --with-crypto=libcrypto to build
> > support for Smartcard authentication. So far this was only available for
> > NSS.
>
> And Smartcard support is mandatory? Using NSS I don't need p11-kit(or did I
misunderstand) ?
Currently there is no option to disable the build of the Smartcard
helper tool p11_child. NSS has the functionality provided by p11-kit
(managing multiple PKCS#11 modules) integrated, hence p11-kit-devel is
not need for the NSS build.
> Try building with -Wl,--no-allow-shlib-undefined and you will see the build problem
below.
The linking issue is not related to p11-kit but is related to some other
refactoring. I'm currently trying to reproduce the issue to see how to
fix it.
Hi,
please try to add the following patch and then to build SSSD again:
diff --git a/Makefile.am b/Makefile.am
index 9539b3c..8e76a03 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -975,6 +975,7 @@ libsss_cert_la_LIBADD = \
$(TALLOC_LIBS) \
$(TEVENT_LIBS) \
libsss_crypt.la \
+ libsss_child.la \
libsss_debug.la \
libsss_certmap.la \
$(NULL)
Michael, I cloned your package on
build.opensuse.org. After applying the
patch above and adding 'BuildRequires: softhsm' to the spec file the
build ran until the tests (softhsm was needed to make some of the
Smartcard related tests work). The current test failures are most
probably caused by libldb, see
https://lists.samba.org/archive/samba-technical/2018-May/128211.html for
details. If the tests are skipped or pass you might have to add some new
files as well, at least p11_child.
HTH
bye,
Sumit
>
> bye,
> Sumit
>
> >
> > Jocke
> > >
> > > bye,
> > > Sumit
> > >
> > > >
> > > > > > can't figure out myself what's missing:
> > > > > >
> > > > > > 203s]
/home/abuild/rpmbuild/BUILD/sssd-1.16.2/.libs/libsss_cert.so:
> > > > > > undefined reference to `child_handler_destroy'
> > > > > > [ 203s]
/home/abuild/rpmbuild/BUILD/sssd-1.16.2/.libs/libsss_cert.so:
> > > > > > undefined reference to `child_handler_setup'
> > > > > > [ 203s]
/home/abuild/rpmbuild/BUILD/sssd-1.16.2/.libs/libsss_cert.so:
> > > > > > undefined reference to `child_io_destructor'
> > > > > > [ 203s]
/home/abuild/rpmbuild/BUILD/sssd-1.16.2/.libs/libsss_cert.so:
> > > > > > undefined reference to `exec_child_ex'
> > > > > > [ 203s] collect2: error: ld returned 1 exit status
> > > > > > [ 203s] make[2]: *** [Makefile:15605:
sss_ssh_authorizedkeys] Error 1
> > > > > > [ 203s] make[2]: Leaving directory
> > > > > > '/home/abuild/rpmbuild/BUILD/sssd-1.16.2'
> > > > > > [ 203s] make[1]: *** [Makefile:34974: all-recursive] Error
1
> > > > > > [ 203s] make[1]: Leaving directory
> > > > > > '/home/abuild/rpmbuild/BUILD/sssd-1.16.2'
> > > > > > [ 203s] make: *** [Makefile:11449: all] Error 2
> > > > > >
> > > > > > See full build log:
> > > > > >
> > > > > >
https://build.opensuse.org/package/live_build_log/home:stroeder:branches:...
> > > > > >
> > > > > > Ciao, Michael.
> > > > >
> > > > > Right, that looks exactly like my build error(I posted a little
while ago). Adding
> > > > > LD flag -Wl,--allow-shlib-undefined makes it build again but I
have no idea
> > > > > if sssd will run then.
> > > > >
> > > > > Jocke
> > > > > _______________________________________________
> > > > > sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
> > > > > To unsubscribe send an email to
sssd-users-leave(a)lists.fedorahosted.org
> > > > > Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
> > > > > List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> > > > > List Archives:
https://lists.fedoraproject.org/archives/list/sssd-users@lists.fedorahost...
> > > >
> > > > _______________________________________________
> > > > sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
> > > > To unsubscribe send an email to
sssd-users-leave(a)lists.fedorahosted.org
> > > > Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
> > > > List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> > > > List Archives:
https://lists.fedoraproject.org/archives/list/sssd-users@lists.fedorahost...
> > >
> > > _______________________________________________
> > > sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
> > > To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org
> > > Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
> > > List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> > > List Archives:
https://lists.fedoraproject.org/archives/list/sssd-users@lists.fedorahost...
> > _______________________________________________
> > sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
> > To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org
> > Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
> > List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives:
https://lists.fedoraproject.org/archives/list/sssd-users@lists.fedorahost...
> _______________________________________________
> sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
> To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org
> Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
> List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
https://lists.fedoraproject.org/archives/list/sssd-users@lists.fedorahost...