On Mon, 2018-06-11 at 17:06 +0200, Lukas Slebodnik wrote:
On (11/06/18 13:35), Joakim Tjernlund wrote:
> On Mon, 2018-06-11 at 14:09 +0200, Sumit Bose wrote:
> >
> >
> > On Mon, Jun 11, 2018 at 10:50:09AM +0000, Joakim Tjernlund wrote:
> > > On Mon, 2018-06-11 at 10:33 +0000, Joakim Tjernlund wrote:
> > > > CAUTION: This email originated from outside of the organization. Do
not click links or open attachments unless you recognize the sender and know the content
is safe.
> > > >
> > > >
> > > > On Mon, 2018-06-11 at 11:35 +0200, Michael Ströder wrote:
> > > > >
> > > > >
> > > > >
> > > > > On 06/08/2018 09:57 PM, Jakub Hrozek wrote:
> > > > > > SSSD 1.16.2
> > > > > > ===========
> > > > > >
> > > > > > The SSSD team is proud to announce the release of version
1.16.2 of the
> > > > > > System Security Services Daemon.
> > > > >
> > > > > I've added new build dependency p11-kit-devel but build
fails and I
> > >
> > > I too noticed the new dependency on p11-kit, was that intentional ?
> >
> > p11-kit-devel is now needed if you use --with-crypto=libcrypto to build
> > support for Smartcard authentication. So far this was only available for
> > NSS.
>
> And Smartcard support is mandatory? Using NSS I don't need p11-kit(or did I
misunderstand) ?
> Try building with -Wl,--no-allow-shlib-undefined and you will see the build problem
below.
>
I doubt that linker flags --no-allow-shlib-undefined (or even -z defs)
ever worked with sssd(tested with 1.16.{1,2}. There are some cyclic dependencies
between internal libraries and some symbols in dynamic modules are defined in
binaries which load such dynamic modules.
hmm, I wonder my build did need --allow-shlib-undefined then? I think Gentoo have
stricter
defaults but I cannot remember how to check that ATM. Seems openSUSE Tumbleweed has the
same.
I think you can construct linking that works with cyclic deps and -z
defs/--no-allow-shlib-undefined
Jocke
e.g.
CCLD libsss_krb5.la
./.libs/libsss_krb5_common.so: undefined reference to `_dp_opt_set_string'
./.libs/libsss_krb5_common.so: undefined reference to `be_fo_add_service'
./.libs/libsss_krb5_common.so: undefined reference to `dp_get_options'
./.libs/libsss_krb5_common.so: undefined reference to `be_fo_add_srv_server'
./.libs/libsss_krb5_common.so: undefined reference to `be_resolve_server_recv'
./.libs/libsss_krb5_common.so: undefined reference to `_dp_opt_get_int'
./.libs/libsss_krb5_common.so: undefined reference to `be_resolve_server_send'
./.libs/libsss_krb5_common.so: undefined reference to
`be_fo_run_callbacks_at_next_request'
./.libs/libsss_krb5_common.so: undefined reference to `_dp_opt_get_cstring'
./.libs/libsss_krb5_common.so: undefined reference to `fo_get_server_hostent'
./.libs/libsss_krb5_common.so: undefined reference to `be_fo_service_add_callback'
./.libs/libsss_krb5_common.so: undefined reference to
`resolv_get_string_address_index'
./.libs/libsss_krb5_common.so: undefined reference to `_be_fo_set_port_status'
./.libs/libsss_krb5_common.so: undefined reference to `fo_get_server_port'
./.libs/libsss_krb5_common.so: undefined reference to `fo_get_server_str_name'
./.libs/libsss_krb5_common.so: undefined reference to `be_add_offline_cb'
./.libs/libsss_krb5_common.so: undefined reference to `be_fo_is_srv_identifier'
./.libs/libsss_krb5_common.so: undefined reference to `be_is_offline'
./.libs/libsss_krb5_common.so: undefined reference to `be_mark_dom_offline'
./.libs/libsss_krb5_common.so: undefined reference to `be_add_online_cb'
./.libs/libsss_krb5_common.so: undefined reference to `be_fo_add_server'
collect2: error: ld returned 1 exit status
Just do not use these linker flags with sssd.