Package: libradius1-dev
Version: 0.3.2-9
Severity: important

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

note i'm rating this important for now, though it's been suggested to
raise the severity higher.  i'll defer to debian-release for a
definitive answer (i'll ping them after the bug is recorded).

basically, the problem is that libradius1-dev ships with a libtool
helper file /usr/lib/libradiusclient.la, which was not built correctly
and thus passes the wrong settings to any libtool-aware software that
is compiled in the future.  for example, taking the upstream release
of nagios-plugins (1.4.3) and attempting to compile it gets you:

<snip>
/bin/sh ../libtool --tag=CC --mode=link gcc -Wall -g -O2  -L. -o check_radius  
check_radius.o netutils.o utils.o ../lib/libnagiosplug.a ../lib/libcoreutils.a  
-lnsl -lresolv -lradiusclient -lssl -lcrypto
gcc -Wall -g -O2 -o check_radius check_radius.o netutils.o utils.o  
-L/home/sean/nagiosplug/plugins ../lib/libnagiosplug.a ../lib/libcoreutils.a 
-lresolv /usr/lib/gcc/i486-linux-gnu/4.0.2/../../..//.libs/libradiusclient.so 
-lcrypt -lnsl -lssl -lcrypto -Wl,--rpath 
-Wl,/usr/lib/gcc/i486-linux-gnu/4.0.2/../../..//.libs 
gcc: /usr/lib/gcc/i486-linux-gnu/4.0.2/../../..//.libs/libradiusclient.so: No 
such file or directory 
make[1]: *** [check_radius] Error 1
make[1]: Leaving directory `/home/sean/nagiosplug/plugins'
make: *** [all-recursive] Error 1

now i'm not a libtool expert, but it seems to me that the problem is in
the mentioned .la file, specifically:

        # Is this an already installed library?
        installed=no

changing the setting to yes fixes all problems that i've noticed.
furthermore, this seems to be the only package i have on my system
that defines this setting to no:

numanuma[~]16:01:17$ grep installed= /usr/lib/*.la | cut -d: -f2 | sort | uniq 
-c
      1 installed=no
     81 installed=yes

which reinforces my suspicion that this is broken.

it seems that the most recent versions of libtool (>> sarge) are able
to work around this problem automagically, but that's of little help
to sarge users or users of external software that ship with an older
version of libtool.


        sean


- -- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages libradius1-dev depends on:
ii  libc6-dev                     2.3.6-9    GNU C Library: Development Librari
ii  libradius1                    0.3.2-9    /bin/login replacement with RADIUS

libradius1-dev recommends no packages.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)

iD8DBQFEebDFynjLPm522B0RAlgXAJwNHanyR5e4wDfz+UnoDSKgAiqIuACfegem
vJGF4zIJJCJfwYUzI5ycu2M=
=nDgd
-----END PGP SIGNATURE-----

Reply via email to