I (IBM) have some patches in this area that didn't make it to APR or HTTPD :(
Unortunately Tivoli SSL initialization doesn't fit into how APU initializes SSL and we are currently using hacks in both APU and HTTPD. On Tue, Feb 18, 2014 at 2:46 PM, Michael Felt <[email protected]> wrote: > After running the idslink -l 32 (will look at 64 bit later, one thing at a > time) and adding symbolic links in /usr/include to the version currently > installed ./configure does complete, and says that ldap support is enabled - > HOWEVER - i expect it is not going to support ldaps because configure is > only checking for ldap_sslinit() and not for ldap_ssl_init() which is what > is in the idsldap library: > > root@x093:[/opt/IBM/ldap/V6.1/lib]nm /opt/IBM/ldap/V6.1/lib/libibmldap.a | > grep ldap_ | grep init > .ldap_create_password_policy_bind_init_request T 261032 > .ldap_init T 884 > .ldap_init_all_global_mutex T 53576 > .ldap_init_all_mutex_once T 53200 > .ldap_init_iconv T 41260 > .ldap_krb_init_tkt T 271232 > .ldap_lc_init T 48 > .ldap_msg_table_init T 4888 > .ldap_msginit T 21052 > .ldap_ssl_client_init T 249848 > .ldap_ssl_environment_init T 249824 > .ldap_ssl_init T 249872 > .ldap_ssl_pkcs11_client_init T 249728 > .ldap_ssl_pkcs11_environment_init T 249752 > /project/aus61ldap/build/aus61ldapsb/src/libraries/libldap/ldap_init.c f > - > ldap_create_password_policy_bind_init_request D 58384 12 > ldap_init D 53752 12 > ldap_init_all_global_mutex D 57556 12 > ldap_init_all_mutex_once D 53620 12 > ldap_init_all_mutex_once d 60292 4 > ldap_init_iconv D 58552 12 > ldap_krb_init_tkt D 60148 12 > ldap_lc_init D 53608 12 > ldap_msg_table_init D 53812 12 > ldap_msginit D 54316 12 > ldap_ssl_client_init D 57268 12 > ldap_ssl_environment_init D 57256 12 > ldap_ssl_init D 57280 12 > ldap_ssl_pkcs11_client_init D 57208 12 > ldap_ssl_pkcs11_environment_init D 57220 12 > > Just thought I would list any routine in the library that has "init" in the > name. > > 1) Am I correct is assumming that ldap connectivity over ssl is not going to > be recognized? > > See include/apr_ldap.h created... attachment > > Thank you for your consideration. > -- Eric Covener [email protected]
