[Samba] AIX and libldap.a

Discussion:

Roy Vickers

2005-04-12 23:43:21 UTC

I'm trying to get Samba 3.0.4.0 to run on AIX 5.2 and I am fighting a
"Dependent module libldap.a could not be loaded" bug. I have IBM's version
of LDAP installed but it doesn't have a libldap.a file. Is there a version
of Samba that will run on AIX 5.2 that doesn't use LDAP? Or are there any
ideas out there as to how I get the libldap.a loaded or pointed to IBM's
LDAP?

Thanks.

Doug VanLeuven

2005-04-13 03:57:33 UTC

Permalink

Post by Roy Vickers
I'm trying to get Samba 3.0.4.0 to run on AIX 5.2 and I am fighting a
"Dependent module libldap.a could not be loaded" bug. I have IBM's version
of LDAP installed but it doesn't have a libldap.a file. Is there a version
of Samba that will run on AIX 5.2 that doesn't use LDAP? Or are there any
ideas out there as to how I get the libldap.a loaded or pointed to IBM's
LDAP?

On my AIX 5.2 with ldap.client.rte 4.1.0.0 /usr/lib/libldap.a is a
symbolic link to /usr/ldap/lib/libibmldapn.a. Anything like that on
your system?

I got tired of fighting the IBM software and installed openLDAP in it's
own tree and point there using CFLAGS, CPPFLAGS, and LIBS during
configure. When I was doing the development, IBM Kerberos didn't
support rc4-hmac either (they might not still), so I installed MIT
Kerberos 1.3.4 for the whole system. I sort of remember there being an
issue with the IBM Kerberos include files as well.

Afterwards, you can check that the paths to the libs are hard coded in
the executable header with
"dump -H <program>"

I'll take this opportunity to vote for samba4 using it's own ldap and
heimdal rolled into the distribution.

Regards, Doug

Fred Lacombe

2005-04-13 13:46:16 UTC

Permalink

I had to run Samba 3.0.4 on AIX 4.3 and HP-UX 11.00
On those machines I had to 'rebuild' the static libraries libldap/liblber.
This was due to several LDAP oimplementation present on the machine, the
constructor's and mien (OpenLDAP).

'Rebuild' here is more a trick, linking to the right lib and manually
creating the libldap.a from Openldap *.o files using ar.

Hope it helps...
--
Fred Lacombe Linagora S.A.
Open Source Project Manager 30, rue Saint Augustin
Tel. : +33 (0)1 58 18 68 28
Fax. : +33 (0)1 58 18 68 29

Post by Doug VanLeuven

On my AIX 5.2 with ldap.client.rte 4.1.0.0 /usr/lib/libldap.a is a
symbolic link to /usr/ldap/lib/libibmldapn.a. Anything like that on
your system?
I got tired of fighting the IBM software and installed openLDAP in it's
own tree and point there using CFLAGS, CPPFLAGS, and LIBS during
configure. When I was doing the development, IBM Kerberos didn't
support rc4-hmac either (they might not still), so I installed MIT
Kerberos 1.3.4 for the whole system. I sort of remember there being an
issue with the IBM Kerberos include files as well.
Afterwards, you can check that the paths to the libs are hard coded in
the executable header with
"dump -H <program>"
I'll take this opportunity to vote for samba4 using it's own ldap and
heimdal rolled into the distribution.
Regards, Doug
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba

Roy Vickers

2005-04-13 17:09:00 UTC

Permalink

In the configure file I find:
--with-ldap LDAP support (default yes)
What if I turn ldap off in that statement...
What would the repercussions be?
All I'm interested in doing is simple file sharing.
By the way, what's the opposite of --with? --without?
Thanks

-----Original Message-----
From: Doug VanLeuven [mailto:***@sonic.net]
Sent: Tuesday, April 12, 2005 5:57 PM
To: Roy Vickers
Cc: ***@lists.samba.org
Subject: Re: [Samba] AIX and libldap.a

Doug VanLeuven

2005-04-16 00:45:40 UTC

Permalink

Post by Roy Vickers
--with-ldap LDAP support (default yes)
What if I turn ldap off in that statement...
What would the repercussions be?
All I'm interested in doing is simple file sharing.
By the way, what's the opposite of --with? --without?
Thanks

As far as I know, no ldap or kerberos means no support for Active
Directory "net ads".
In other words, you won't be able to join as a member server of a 2000
or 2003 AD in native mode, but old fashioned NT40 "net rpc" commands
ought to work with a NT40 PDC or 2000 in mixed mode. Or just old peer
to peer workgroup. Maybe someone who's used samba3 "net rpc" or "net
rap" will correct me if I'm wrong.

I never used no, but from configure --help
Optional Packages:
--with-PACKAGE[=ARG] use PACKAGE [ARG=yes]
--without-PACKAGE do not use PACKAGE (same as --with-PACKAGE=no)
so my guess is
--with-ldap=no or --without-ldap

Regards, Doug

Jim McDonough

2005-04-16 05:06:09 UTC

Permalink

Post by Doug VanLeuven
As far as I know, no ldap or kerberos means no support for Active
Directory "net ads".

Yes, true.

Post by Doug VanLeuven
In other words, you won't be able to join as a member server of a 2000
or 2003 AD in native mode, but old fashioned NT40 "net rpc" commands
ought to work with a NT40 PDC or 2000 in mixed mode. Or just old peer
to peer workgroup. Maybe someone who's used samba3 "net rpc" or "net
rap" will correct me if I'm wrong.

Well, you're halfway here. You _can_ *absolutely* join as a member server
of a 2000 or 2003 AD in _native_ mode (yes, native mode!). You just won't
be doing things via krb/ldap, you'll be doing it using rpcs.

Remember, an NT server can join a native mode domain. It just can't be a
_DC_ of that domain. That's what native/mixed is about...domain
controllers, not server.

However, there is another setting that you specify when you promote the
first DC of an AD domain...whether or not you have any pre-win2k machines
(and yes, you can go back by adding "Everyone" to the group "Pre-Windows
2000 Compatible Access". That's the setting that determines whether you
can join/function in an AD domain.

Everything else you say in that paragraph is correct.

Sorry, it's just a common misconception that MS has done nothing to
dissuade people from thinking (after all, you'll buy more licenses if you
think you have to).

----------------------------
Jim McDonough
IBM Linux Technology Center
Samba Team
6 Minuteman Drive
Scarborough, ME 04074
USA

jmcd at us dot ibm dot com
jmcd at samba dot org

Phone: 1-877-228-1846
IBM tie-line: 349-5335