On Mon, Jun 11, 2018 at 05:56:44PM +0200, Sumit Bose wrote:
> On Mon, Jun 11, 2018 at 01:35:53PM +0000, Joakim Tjernlund wrote:
> > On Mon, 2018-06-11 at 14:09 +0200, Sumit Bose wrote:
> > >
> > >
> > > On Mon, Jun 11, 2018 at 10:50:09AM +0000, Joakim Tjernlund wrote:
> > > > On Mon, 2018-06-11 at 10:33 +0000, Joakim Tjernlund wrote:
> > > > > CAUTION: This email originated from outside of the organization. Do
> > > > > not click links or open attachments unless you recognize the sender
> > > > > and know the content is safe.
> > > > >
> > > > >
> > > > > On Mon, 2018-06-11 at 11:35 +0200, Michael Ströder wrote:
> > > > > >
> > > > > >
> > > > > >
> > > > > > On 06/08/2018 09:57 PM, Jakub Hrozek wrote:
> > > > > > > SSSD 1.16.2
> > > > > > > ===========
> > > > > > >
> > > > > > > The SSSD team is proud to announce the release of version 1.16.2
> > > > > > > of the
> > > > > > > System Security Services Daemon.
> > > > > >
> > > > > > I've added new build dependency p11-kit-devel but build fails and I
> > > >
> > > > I too noticed the new dependency on p11-kit, was that intentional ?
> > >
> > > p11-kit-devel is now needed if you use --with-crypto=libcrypto to build
> > > support for Smartcard authentication. So far this was only available for
> > > NSS.
> >
> > And Smartcard support is mandatory? Using NSS I don't need p11-kit(or did I
> > misunderstand) ?
>
> Currently there is no option to disable the build of the Smartcard
> helper tool p11_child. NSS has the functionality provided by p11-kit
> (managing multiple PKCS#11 modules) integrated, hence p11-kit-devel is
> not need for the NSS build.
>
> > Try building with -Wl,--no-allow-shlib-undefined and you will see the build
> > problem below.
>
> The linking issue is not related to p11-kit but is related to some other
> refactoring. I'm currently trying to reproduce the issue to see how to
> fix it.
Hi,
please try to add the following patch and then to build SSSD again:
diff --git a/Makefile.am b/Makefile.am
index 9539b3c..8e76a03 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -975,6 +975,7 @@ libsss_cert_la_LIBADD = \
$(TALLOC_LIBS) \
$(TEVENT_LIBS) \
libsss_crypt.la \
+ libsss_child.la \
libsss_debug.la \
libsss_certmap.la \
$(NULL)
Michael, I cloned your package on build.opensuse.org. After applying the
patch above and adding 'BuildRequires: softhsm' to the spec file the
build ran until the tests (softhsm was needed to make some of the
Smartcard related tests work). The current test failures are most
probably caused by libldb, see
https://lists.samba.org/archive/samba-technical/2018-May/128211.html for
details. If the tests are skipped or pass you might have to add some new
files as well, at least p11_child.
HTH
bye,
Sumit
>
> bye,
> Sumit
>
> >
> > Jocke
> > >
> > > bye,
> > > Sumit
> > >
> > > >
> > > > > > can't figure out myself what's missing:
> > > > > >
> > > > > > 203s]
> > > > > > /home/abuild/rpmbuild/BUILD/sssd-1.16.2/.libs/libsss_cert.so:
> > > > > > undefined reference to `child_handler_destroy'
> > > > > > [ 203s]
> > > > > > /home/abuild/rpmbuild/BUILD/sssd-1.16.2/.libs/libsss_cert.so:
> > > > > > undefined reference to `child_handler_setup'
> > > > > > [ 203s]
> > > > > > /home/abuild/rpmbuild/BUILD/sssd-1.16.2/.libs/libsss_cert.so:
> > > > > > undefined reference to `child_io_destructor'
> > > > > > [ 203s]
> > > > > > /home/abuild/rpmbuild/BUILD/sssd-1.16.2/.libs/libsss_cert.so:
> > > > > > undefined reference to `exec_child_ex'
> > > > > > [ 203s] collect2: error: ld returned 1 exit status
> > > > > > [ 203s] make[2]: *** [Makefile:15605: sss_ssh_authorizedkeys]
> > > > > > Error 1
> > > > > > [ 203s] make[2]: Leaving directory
> > > > > > '/home/abuild/rpmbuild/BUILD/sssd-1.16.2'
> > > > > > [ 203s] make[1]: *** [Makefile:34974: all-recursive] Error 1
> > > > > > [ 203s] make[1]: Leaving directory
> > > > > > '/home/abuild/rpmbuild/BUILD/sssd-1.16.2'
> > > > > > [ 203s] make: *** [Makefile:11449: all] Error 2
> > > > > >
> > > > > > See full build log:
> > > > > >
> > > > > > https://build.opensuse.org/package/live_build_log/home:stroeder:branches:network:ldap/sssd/openSUSE_Tumbleweed/x86_64
> > > > > >
> > > > > > Ciao, Michael.
> > > > >
> > > > > Right, that looks exactly like my build error(I posted a little while
> > > > > ago). Adding
> > > > > LD flag -Wl,--allow-shlib-undefined makes it build again but I have
> > > > > no idea
> > > > > if sssd will run then.
> > > > >
> > > > > Jocke
> > > > > _______________________________________________
> > > > > sssd-users mailing list -- sssd-users@lists.fedorahosted.org
> > > > > To unsubscribe send an email to
> > > > > sssd-users-le...@lists.fedorahosted.org
> > > > > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> > > > > List Guidelines:
> > > > > https://fedoraproject.org/wiki/Mailing_list_guidelines
> > > > > List Archives:
> > > > > https://lists.fedoraproject.org/archives/list/sssd-users@lists.fedorahosted.org/message/T6RW2WTN3NAR6PZEVZ3AZXEG3MKG7N7G/
> > > >
> > > > _______________________________________________
> > > > sssd-users mailing list -- sssd-users@lists.fedorahosted.org
> > > > To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org
> > > > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> > > > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > > > List Archives:
> > > > https://lists.fedoraproject.org/archives/list/sssd-users@lists.fedorahosted.org/message/2FT4UX6ADUO52QAUZQDS2FW24BAXIN2Q/
> > >
> > > _______________________________________________
> > > sssd-users mailing list -- sssd-users@lists.fedorahosted.org
> > > To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org
> > > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> > > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > > List Archives:
> > > https://lists.fedoraproject.org/archives/list/sssd-users@lists.fedorahosted.org/message/4WFH47FQYXSZEVOIG74NDXBV5F6OMKBU/
> > _______________________________________________
> > sssd-users mailing list -- sssd-users@lists.fedorahosted.org
> > To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org
> > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives:
> > https://lists.fedoraproject.org/archives/list/sssd-users@lists.fedorahosted.org/message/RXJS4ZP3QYDWH3V2RTOWWTV6L4J5AYD2/
> _______________________________________________
> sssd-users mailing list -- sssd-users@lists.fedorahosted.org
> To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/sssd-users@lists.fedorahosted.org/message/VK3FI4VCSU4I6NVD64X6RJ5PCYOQL3M3/
_______________________________________________
sssd-users mailing list -- sssd-users@lists.fedorahosted.org
To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/sssd-users@lists.fedorahosted.org/message/RMXALXBKVTTPSGKZC53FN63TVUKXDYQS/
