https://bugs.openldap.org/show_bug.cgi?id=9807

          Issue ID: 9807
           Summary: Cannot enable {ARGON2} passwd scheme support
           Product: OpenLDAP
           Version: unspecified
          Hardware: x86_64
                OS: Linux
            Status: UNCONFIRMED
          Keywords: needs_review
          Severity: normal
          Priority: ---
         Component: build
          Assignee: [email protected]
          Reporter: [email protected]
  Target Milestone: ---

Created attachment 881
  --> https://bugs.openldap.org/attachment.cgi?id=881&action=edit
Trace of every executed command.

I want to build OpenLDAP with argon2 support. Unfortunately, it doesn't work
and I don't understand why. It seems to be a build issue.

Here is how to reproduce the issue :

I'm using a fresh install of Debian 11.

The following packages were installed for this :
 - libargon2-dev
 - libltdl-dev
 - git
 - build-essential

I am using the master branch of the git repository :
https://git.openldap.org/openldap/openldap/-/commit/e8813b12b6188d5ba5f174ff8726c438c8ca4bfd

I'm using root, and the repo is under /root/openldap.

My objective is to :
  - Run slapd with {ARGON2} support
  - Set {ARGON2} as password-hash
  - Use slappasswd to create a password for LDAP admin in slapd.conf

I ran the following commands :
  - apt install libltdl-dev libargon2-dev git build-essential -y
  - ./configure --with-argon2=libargon2 --enable-modules --enable-argon2=yes
  - make depend
  - make
  - make check
  - make install

I then created a systemd service for slapd, reloaded daemons with systemctl
then started the service.

I got the following error :

@(#) $OpenLDAP: slapd 2.X (Mar 12 2022 15:31:06) $
        root@ldap:/root/openldap/servers/slapd
/usr/local/etc/openldap/slapd.conf: line 65: <password-hash> scheme not
available ({ARGON2})
/usr/local/etc/openldap/slapd.conf: line 65: <password-hash> no valid hashes
found
slapd stopped.
connections_destroy: nothing to destroy.

I don't understand how to build openldap with argon2. I did not find anything.

You will find a global trace file for every command used with the program.

-- 
You are receiving this mail because:
You are on the CC list for the issue.

Reply via email to