[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: OpenLDAP 2.2.13, 2.2.15 communication failure (ITS#3279)



This is a multipart message in MIME format.
--=_alternative 0016A3A486256EEE_=
Content-Type: text/plain; charset="US-ASCII"

$ ./ldapsearch -d 1 -h bluepages.ibm.com -v -b "ou=bluepages,o=ibm.com" -s 
sub mail=mehalL@us.ibm.com
ldap_initialize( ldap://bluepages.ibm.com )
ldap_create
ldap_url_parse_ext(ldap://bluepages.ibm.com)
ldap_bind_s
ldap_simple_bind_s
ldap_sasl_bind_s
ldap_sasl_bind
ldap_send_initial_request
ldap_new_connection
ldap_int_open_connection
ldap_connect_to_host: TCP bluepages.ibm.com:389
ldap_connect_to_host: getaddrinfo failed: Invalid flags in hints
ldap_perror
ldap_bind: Can't contact LDAP server (-1)
$

Mark Hall    <><
CCSA/CCSE
Certified AIX System Administrator
(314) 558-4197    Tie Line 364-1670

Mailstop S306 2182
Network Security Services
IBM Global Services - Network Services Delivery - North Central
325 J.S. McDonnell Boulevard
Hazelwood, MO 63042
http://sniweb.stlouis.ibm.com/

"What a drag! ... I'm beside myself!" - C3P0 - Star Wars Episode II

This message contains an average of 73% post-consumer electrons.




Howard Chu <hyc@symas.com> 
08/11/2004 08:39 PM

To
Mark Hall/St Louis/IBM@IBMUS
cc
openldap-its@OpenLDAP.org
Subject
Re: OpenLDAP 2.2.13, 2.2.15 communication failure (ITS#3279)






The AIX linker has always been rather quirky, compared to traditional 
Unix linkers. None of the info you've provided actually shows why the 
static binary is failing though. Run ldapsearch with "-d 1" to get a 
debug trace and post that here.

mehall@us.ibm.com wrote:

> Full_Name: Mark Hall
> Version: 2.2.13, 2.2.15
> OS: AIX 5.1.0.0
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (68.75.147.81)

> $ ./ldapsearch -v -h bluepages.ibm.com -b "ou=bluepages,o=ibm.com" -s 
sub
> mail=mehall@us.ibm.com
> ldap_initialize( ldap://bluepages.ibm.com )
> ldap_bind: Can't contact LDAP server (-1)

> [I've tried it with and without. without the 
--enable-static/--disable-shared
> combination, and here's what fails]
> $ ./ldapsearch -h bluepages.ibm.com
> exec(): 0509-036 Cannot load program ./ldapsearch because of the 
following
> errors:
>         0509-022 Cannot load module
> ../../libraries/libldap/.libs/libldap.a(libldap-2.2.so.7).
>         0509-150   Dependent module /usr/lib/liblber.a(liblber-2.2.so.7) 
could
> not be loaded.
>         0509-152   Member liblber-2.2.so.7 is not found in archive 
> 
> This is of course a known problem, hence while I'm compiling it 
statically. 

Yes. It requires a significant amount of libtool hacking to make a 
dynamic build work on AIX. We've done this for Symas' Connexitor 
packaged binaries. Unfortunately the libtool project is not interested 
in our patches for libtool 1.4.3, and we're not in a position to migrate 
OpenLDAP to the current (libtool 1.5.8) libtool version.

> I have to have this functioning in order to make my Apache server 
authenticate
> to the LDAP directory.  I've tried 2.2.13, 2.2.15, 2.0.21, and I can't 
seem to
> get any of these to work properly.

> I have been able to get 2.1.30 to compile and install correctly with the 
same
> configure options, and no other changes to the box.

Since the problems with dynamic building on AIX are not actually related 
to the OpenLDAP core code, I'm ignoring this portion of this bug report. 
It really is just a matter of specifying the right linker flags, and 
that just requires thoroughly reading the AIX linker manual. If you 
don't have competent AIX programmers available to help you here, Symas 
is always available for hire.
-- 
   -- Howard Chu
   Chief Architect, Symas Corp.       Director, Highland Sun
   http://www.symas.com               http://highlandsun.com/hyc
   Symas: Premier OpenSource Development and Support


--=_alternative 0016A3A486256EEE_=
Content-Type: text/html; charset="US-ASCII"


<br><font size=2 face="sans-serif">$ ./ldapsearch -d 1 -h bluepages.ibm.com
-v -b &quot;ou=bluepages,o=ibm.com&quot; -s sub mail=mehalL@us.ibm.com</font>
<br><font size=2 face="sans-serif">ldap_initialize( ldap://bluepages.ibm.com
)</font>
<br><font size=2 face="sans-serif">ldap_create</font>
<br><font size=2 face="sans-serif">ldap_url_parse_ext(ldap://bluepages.ibm.com)</font>
<br><font size=2 face="sans-serif">ldap_bind_s</font>
<br><font size=2 face="sans-serif">ldap_simple_bind_s</font>
<br><font size=2 face="sans-serif">ldap_sasl_bind_s</font>
<br><font size=2 face="sans-serif">ldap_sasl_bind</font>
<br><font size=2 face="sans-serif">ldap_send_initial_request</font>
<br><font size=2 face="sans-serif">ldap_new_connection</font>
<br><font size=2 face="sans-serif">ldap_int_open_connection</font>
<br><font size=2 face="sans-serif">ldap_connect_to_host: TCP bluepages.ibm.com:389</font>
<br><font size=2 face="sans-serif">ldap_connect_to_host: getaddrinfo failed:
Invalid flags in hints</font>
<br><font size=2 face="sans-serif">ldap_perror</font>
<br><font size=2 face="sans-serif">ldap_bind: Can't contact LDAP server
(-1)</font>
<br><font size=2 face="sans-serif">$</font>
<br><font size=2 face="sans-serif"><br>
Mark Hall &nbsp; &nbsp;&lt;&gt;&lt;<br>
CCSA/CCSE<br>
Certified AIX System Administrator<br>
(314) 558-4197 &nbsp; &nbsp;Tie Line 364-1670<br>
<br>
Mailstop S306 2182<br>
Network Security Services<br>
IBM Global Services - Network Services Delivery - North Central<br>
325 J.S. McDonnell Boulevard<br>
Hazelwood, MO 63042<br>
http://sniweb.stlouis.ibm.com/<br>
<br>
&quot;What a drag! ... I'm beside myself!&quot; - C3P0 - Star Wars Episode
II<br>
<br>
This message contains an average of 73% post-consumer electrons.<br>
</font>
<br>
<br>
<br>
<table width=100%>
<tr valign=top>
<td width=40%><font size=1 face="sans-serif"><b>Howard Chu &lt;hyc@symas.com&gt;</b>
</font>
<p><font size=1 face="sans-serif">08/11/2004 08:39 PM</font>
<td width=59%>
<table width=100%>
<tr>
<td>
<div align=right><font size=1 face="sans-serif">To</font></div>
<td valign=top><font size=1 face="sans-serif">Mark Hall/St Louis/IBM@IBMUS</font>
<tr>
<td>
<div align=right><font size=1 face="sans-serif">cc</font></div>
<td valign=top><font size=1 face="sans-serif">openldap-its@OpenLDAP.org</font>
<tr>
<td>
<div align=right><font size=1 face="sans-serif">Subject</font></div>
<td valign=top><font size=1 face="sans-serif">Re: OpenLDAP 2.2.13, 2.2.15
communication failure (ITS#3279)</font></table>
<br>
<table>
<tr valign=top>
<td>
<td></table>
<br></table>
<br>
<br>
<br><font size=2><tt>The AIX linker has always been rather quirky, compared
to traditional <br>
Unix linkers. None of the info you've provided actually shows why the <br>
static binary is failing though. Run ldapsearch with &quot;-d 1&quot; to
get a <br>
debug trace and post that here.<br>
<br>
mehall@us.ibm.com wrote:<br>
<br>
&gt; Full_Name: Mark Hall<br>
&gt; Version: 2.2.13, 2.2.15<br>
&gt; OS: AIX 5.1.0.0<br>
&gt; URL: ftp://ftp.openldap.org/incoming/<br>
&gt; Submission from: (NULL) (68.75.147.81)<br>
<br>
&gt; $ ./ldapsearch -v -h bluepages.ibm.com -b &quot;ou=bluepages,o=ibm.com&quot;
-s sub<br>
&gt; mail=mehall@us.ibm.com<br>
&gt; ldap_initialize( ldap://bluepages.ibm.com )<br>
&gt; ldap_bind: Can't contact LDAP server (-1)<br>
<br>
&gt; [I've tried it with and without. without the --enable-static/--disable-shared<br>
&gt; combination, and here's what fails]<br>
&gt; $ ./ldapsearch -h bluepages.ibm.com<br>
&gt; exec(): 0509-036 Cannot load program ./ldapsearch because of the following<br>
&gt; errors:<br>
&gt; &nbsp; &nbsp; &nbsp; &nbsp; 0509-022 Cannot load module<br>
&gt; ../../libraries/libldap/.libs/libldap.a(libldap-2.2.so.7).<br>
&gt; &nbsp; &nbsp; &nbsp; &nbsp; 0509-150 &nbsp; Dependent module /usr/lib/liblber.a(liblber-2.2.so.7)
could<br>
&gt; not be loaded.<br>
&gt; &nbsp; &nbsp; &nbsp; &nbsp; 0509-152 &nbsp; Member liblber-2.2.so.7
is not found in archive <br>
&gt; <br>
&gt; This is of course a known problem, hence while I'm compiling it statically.
<br>
<br>
Yes. It requires a significant amount of libtool hacking to make a <br>
dynamic build work on AIX. We've done this for Symas' Connexitor <br>
packaged binaries. Unfortunately the libtool project is not interested
<br>
in our patches for libtool 1.4.3, and we're not in a position to migrate
<br>
OpenLDAP to the current (libtool 1.5.8) libtool version.<br>
<br>
&gt; I have to have this functioning in order to make my Apache server
authenticate<br>
&gt; to the LDAP directory. &nbsp;I've tried 2.2.13, 2.2.15, 2.0.21, and
I can't seem to<br>
&gt; get any of these to work properly.<br>
<br>
&gt; I have been able to get 2.1.30 to compile and install correctly with
the same<br>
&gt; configure options, and no other changes to the box.<br>
<br>
Since the problems with dynamic building on AIX are not actually related
<br>
to the OpenLDAP core code, I'm ignoring this portion of this bug report.
<br>
It really is just a matter of specifying the right linker flags, and <br>
that just requires thoroughly reading the AIX linker manual. If you <br>
don't have competent AIX programmers available to help you here, Symas
<br>
is always available for hire.<br>
-- <br>
 &nbsp; -- Howard Chu<br>
 &nbsp; Chief Architect, Symas Corp. &nbsp; &nbsp; &nbsp; Director, Highland
Sun<br>
 &nbsp; http://www.symas.com &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
&nbsp; http://highlandsun.com/hyc<br>
 &nbsp; Symas: Premier OpenSource Development and Support<br>
</tt></font>
<br>
--=_alternative 0016A3A486256EEE_=--