Re: [vchkpw] vpopmail and OpenLDAP with kerberos ?
Hi Guys,Thanks for all the help - greatly appreciated.With all of your help I eventually got it right.Keep well. Many thanks and kind regards. David WilsonDcData+27 83 787 7424http://www.dcdata.co.za LinuxBox S.A - Africa's largest online Linux communityhttp://www.linuxbox.co.zaPowered by Linux, driven by passion !
RE: [vchkpw] vpopmail and OpenLDAP with kerberos ?
I may have found the problem, some older libldap and lib libraries lying around in /usr/local/lib & /usr/lib - I'll try and remove them and recompile vpopmail etc. a bit later - thanks for all the help, I'll let you know how it goes. Many thanks and kind regards. David WilsonDcData+27 83 787 7424http://www.dcdata.co.za LinuxBox S.A - Africa's largest online Linux communityhttp://www.linuxbox.co.zaPowered by Linux, driven by passion !
Re: [vchkpw] vpopmail and OpenLDAP with kerberos ?
Hi Michael, Thanks for getting back to me. I have tried that and still get the same results. :( "./configure --help" is what I used to get the "--prefix=/usr/local/openldap --without-kerberos --without-tls --disable-kpa sswd --without-cyrus-sasl" options for openldap. But still, openldap still compiles with kerberos/SSL etc. Many thanks and kind regards. David Wilson DcData +27 83 787 7424 http://www.dcdata.co.za LinuxBox S.A - Africa's largest online Linux community http://www.linuxbox.co.za Powered by Linux, driven by passion ! - Original Message - From: "Michael Bellears" <[EMAIL PROTECTED]> To: "'David Wilson'" <[EMAIL PROTECTED]> Sent: 30 September 2002 08:10 Subject: RE: [vchkpw] vpopmail and OpenLDAP with kerberos ? > I suggest you move/delete your existing vpopmail binaries and re-compile. > > ./configure --help within the openldap source tree *should* give you all > config options. > > HTH, > MB > > > -Original Message- > > From: David Wilson [mailto:[EMAIL PROTECTED]] > > Sent: Monday, 30 September 2002 4:15 PM > > To: [EMAIL PROTECTED] > > Cc: [EMAIL PROTECTED] > > Subject: Re: [vchkpw] vpopmail and OpenLDAP with kerberos ? > > > > > > Hi Boris, > > > > Thanks for the assistance. > > > > I've tried compiling OpenLDAP with "./co > > figure --prefix=/usr/local/openldap --wi > > hout-kerberos --without-tls --disable-kpasswd --without-cyrus-sasl" > > > > and still the vpopmail binaries seemed to be linked to all > > the SSL/Kerberos > > libs that openldap uses. > > > > Any ideas ? > > > > Do you know if my "./configure" I've mentioned above are > > correct to disable > > SSL/Kerberos in openldap ? > > > > Thanks for the help so far, it is greatly appreciated. > > > > Many thanks and kind regards. > > > > David Wilson > > DcData > > +27 83 787 7424 > > http://www.dcdata.co.za > > > > LinuxBox S.A - Africa's largest online Linux community > > http://www.linuxbox.co.za > > Powered by Linux, driven by passion ! > > > > - Original Message - > > From: "Boris Manojlovic" <[EMAIL PROTECTED]> > > To: <[EMAIL PROTECTED]> > > Cc: <[EMAIL PROTECTED]> > > Sent: 28 September 2002 01:54 > > Subject: Re: [vchkpw] vpopmail and OpenLDAP with kerberos ? > > > > > > > Ok last thing you can do > > > is that: simply download latest openldap > > > compile it WITHOUT openssl (not recommended but in youre case...) > > > kerberos or whatever and than compile vpopmail > > > > > > and offcourse remove old openldap :)) > > > But first check who needs ldap in your environment > > > (Maybe boss :>>>) > > > > > > > > > (Are you on this list anyway because I send this mail on > > both addresses) > > > > > > > > >
Re: [vchkpw] vpopmail and OpenLDAP with kerberos ?
Hi Boris, Thanks for the assistance. I've tried compiling OpenLDAP with "./co figure --prefix=/usr/local/openldap --wi hout-kerberos --without-tls --disable-kpasswd --without-cyrus-sasl" and still the vpopmail binaries seemed to be linked to all the SSL/Kerberos libs that openldap uses. Any ideas ? Do you know if my "./configure" I've mentioned above are correct to disable SSL/Kerberos in openldap ? Thanks for the help so far, it is greatly appreciated. Many thanks and kind regards. David Wilson DcData +27 83 787 7424 http://www.dcdata.co.za LinuxBox S.A - Africa's largest online Linux community http://www.linuxbox.co.za Powered by Linux, driven by passion ! - Original Message - From: "Boris Manojlovic" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: 28 September 2002 01:54 Subject: Re: [vchkpw] vpopmail and OpenLDAP with kerberos ? > Ok last thing you can do > is that: simply download latest openldap > compile it WITHOUT openssl (not recommended but in youre case...) > kerberos or whatever and than compile vpopmail > > and offcourse remove old openldap :)) > But first check who needs ldap in your environment > (Maybe boss :>>>) > > > (Are you on this list anyway because I send this mail on both addresses) > >
Re: [vchkpw] vpopmail and OpenLDAP with kerberos ?
Great, thanks I'll give it a try. > But first check who needs ldap in your environment > (Maybe boss :>>>) Hehe. I've also tried just the standard qmail-ldap, without vpopmail and have the some problem with qmail-lspawn missing libkrb4.so.2 I'll try another OpenLDAP version and let you know how it goes, thanks for all your help so far. Many thanks and kind regards. David Wilson DcData +27 83 787 7424 http://www.dcdata.co.za LinuxBox S.A - Africa's largest online Linux community http://www.linuxbox.co.za Powered by Linux, driven by passion ! - Original Message - From: "Boris Manojlovic" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: 28 September 2002 01:54 Subject: Re: [vchkpw] vpopmail and OpenLDAP with kerberos ? > Ok last thing you can do > is that: simply download latest openldap > compile it WITHOUT openssl (not recommended but in youre case...) > kerberos or whatever and than compile vpopmail > > and offcourse remove old openldap :)) > But first check who needs ldap in your environment > (Maybe boss :>>>) > > > (Are you on this list anyway because I send this mail on both addresses) > >
Re: [vchkpw] vpopmail and OpenLDAP with kerberos ?
Ok last thing you can do is that: simply download latest openldap compile it WITHOUT openssl (not recommended but in youre case...) kerberos or whatever and than compile vpopmail and offcourse remove old openldap :)) But first check who needs ldap in your environment (Maybe boss :>>>) (Are you on this list anyway because I send this mail on both addresses)
Re: [vchkpw] vpopmail and OpenLDAP with kerberos ?
Hi Boris,
Thanks for getting back to me.
find / -name "libkrb4.so.2" finds no file - It seems that we aren't allowed
to have Kerberos in South Africa :(
This also seems to apply to libdes425.so.3
Thanks for the assistance anyways.
I've also tried recompiling my openldap with --disable-kerberos ..still no
luck.
Many thanks and kind regards.
David Wilson
DcData
+27 83 787 7424
http://www.dcdata.co.za
LinuxBox S.A - Africa's largest online Linux community
http://www.linuxbox.co.za
Powered by Linux, driven by passion !
- Original Message -
From: "Boris Manojlovic" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: 28 September 2002 01:21
Subject: Re: [vchkpw] vpopmail and OpenLDAP with kerberos ?
> HI to All
>
>
> Ok. to clarify ths thing a bit
>
>
> when you compile it with ldap support it automatically get linked against
> libldap and liblber
> but libldap and libldap could be (and are) compiled with another libs
> in youre case against libkrb
> and from youre mails as I could see these libs are not in your search path
>
> Try to search for these files on your disk
> libkrb4.so.2
> libdes425.so.3
> libkrb5.so.3
> libk5crypto.so.3
> libcom_err.so.3
> libssl.so.1
> libcrypto.so.1
> libdb-3.2.so
> (find / -name "libkrb4.so.2" ) ;)
> You have them on your computer because in case you don't have them then
you
> would not be able to compile vpopmail with ldap support in first place
> (simple dependecy)
> in any way, when you find them (you will trust me)
> add that directory to /etc/ld.so.conf and run /sbin/ldconfig
> and woila it will gonna work :)
>
> Look in example bellow ;)
> ---snip---
>
> lindza:~ # cat > e.c
> main(){}
> ^D
> lindza:~ # gcc -o e_normal e.c
> lindza:~ # ldd e_normal
> libc.so.6 => /lib/libc.so.6 (0x23321000)
> /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x232fa000)
> lindza:~ # gcc -o e_linked e.c -lldap -llber
> lindza:~ # ldd ./e_linked
> libldap.so.2 => /usr/lib/libldap.so.2 (0x27e29000)
> liblber.so.2 => /usr/lib/liblber.so.2 (0x27e52000)
> libc.so.6 => /lib/libc.so.6 (0x27e5c000)
> libnsl.so.1 => /lib/libnsl.so.1 (0x27f84000)
> libresolv.so.2 => /lib/libresolv.so.2 (0x27f9b000)
> libdl.so.2 => /lib/libdl.so.2 (0x27fac000)
> libsasl.so.7 => /usr/lib/libsasl.so.7 (0x27fb)
> libssl.so.0.9.6 => /usr/lib/libssl.so.0.9.6 (0x27fc3000)
> libcrypto.so.0.9.6 => /usr/lib/libcrypto.so.0.9.6 (0x27ff1000)
> /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x27e02000)
> libdb-4.0.so => /usr/lib/libdb-4.0.so (0x280c1000)
> libcrypt.so.1 => /lib/libcrypt.so.1 (0x2815a000)
> libpam.so.0 => /lib/libpam.so.0 (0x2818d000)
> libgssapi.so.1 => /usr/lib/libgssapi.so.1 (0x28196000)
> libkrb5.so.17 => /usr/lib/libkrb5.so.17 (0x281a2000)
> libasn1.so.5 => /usr/lib/libasn1.so.5 (0x281db000)
> libroken.so.9 => /usr/lib/libroken.so.9 (0x281fc000)
> libcom_err.so.1 => /usr/lib/libcom_err.so.1 (0x2820f000)
> libgdbm.so.2 => /usr/lib/libgdbm.so.2 (0x28212000)
> lindza:~ #
>
> ---snip
>
> Bye
>
>
> > Hi Michael,
> >
> > Thanks for getting back to me.
> > Everything compiles fine, no errors at all however the "--enable-ldap=y"
> > still seems to make the compiled binaries look for kerberos - Can't
> > figure out why :(
> >
> > I'm in South Africa, apparently Kerberos is not allowed to be exported
> > out of North America ?
> >
> > I really don't need Kerberos, somehow I have to be able to specify that
> > I don't have it ?
> >
> > Thanks for the help so far.
> >
> > Many thanks and kind regards.
> >
> > David Wilson
> > DcData
> > +27 83 787 7424
> > http://www.dcdata.co.za
> >
> > LinuxBox S.A - Africa's largest online Linux community
> > http://www.linuxbox.co.za
> > Powered by Linux, driven by passion !
> >
> > - Original Message -
> > From: "Michael Bellears" <[EMAIL PROTECTED]>
> > To: "'David Wilson'" <[EMAIL PROTECTED]>
> > Sent: 28 September 2002 01:40
> > Subject: RE: [vchkpw] vpopmail and OpenLDAP with kerberos ?
> >
> >
> >> Are you certain it compiles successfully with the 'enable-ldap=y' (I'm
> >> assuming the space is not supposed to be there)
> >>
>
Re: [vchkpw] vpopmail and OpenLDAP with kerberos ?
HI to All
Ok. to clarify ths thing a bit
when you compile it with ldap support it automatically get linked against
libldap and liblber
but libldap and libldap could be (and are) compiled with another libs
in youre case against libkrb
and from youre mails as I could see these libs are not in your search path
Try to search for these files on your disk
libkrb4.so.2
libdes425.so.3
libkrb5.so.3
libk5crypto.so.3
libcom_err.so.3
libssl.so.1
libcrypto.so.1
libdb-3.2.so
(find / -name "libkrb4.so.2" ) ;)
You have them on your computer because in case you don't have them then you
would not be able to compile vpopmail with ldap support in first place
(simple dependecy)
in any way, when you find them (you will trust me)
add that directory to /etc/ld.so.conf and run /sbin/ldconfig
and woila it will gonna work :)
Look in example bellow ;)
---snip---
lindza:~ # cat > e.c
main(){}
^D
lindza:~ # gcc -o e_normal e.c
lindza:~ # ldd e_normal
libc.so.6 => /lib/libc.so.6 (0x23321000)
/lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x232fa000)
lindza:~ # gcc -o e_linked e.c -lldap -llber
lindza:~ # ldd ./e_linked
libldap.so.2 => /usr/lib/libldap.so.2 (0x27e29000)
liblber.so.2 => /usr/lib/liblber.so.2 (0x27e52000)
libc.so.6 => /lib/libc.so.6 (0x27e5c000)
libnsl.so.1 => /lib/libnsl.so.1 (0x27f84000)
libresolv.so.2 => /lib/libresolv.so.2 (0x27f9b000)
libdl.so.2 => /lib/libdl.so.2 (0x27fac000)
libsasl.so.7 => /usr/lib/libsasl.so.7 (0x27fb)
libssl.so.0.9.6 => /usr/lib/libssl.so.0.9.6 (0x27fc3000)
libcrypto.so.0.9.6 => /usr/lib/libcrypto.so.0.9.6 (0x27ff1000)
/lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x27e02000)
libdb-4.0.so => /usr/lib/libdb-4.0.so (0x280c1000)
libcrypt.so.1 => /lib/libcrypt.so.1 (0x2815a000)
libpam.so.0 => /lib/libpam.so.0 (0x2818d000)
libgssapi.so.1 => /usr/lib/libgssapi.so.1 (0x28196000)
libkrb5.so.17 => /usr/lib/libkrb5.so.17 (0x281a2000)
libasn1.so.5 => /usr/lib/libasn1.so.5 (0x281db000)
libroken.so.9 => /usr/lib/libroken.so.9 (0x281fc000)
libcom_err.so.1 => /usr/lib/libcom_err.so.1 (0x2820f000)
libgdbm.so.2 => /usr/lib/libgdbm.so.2 (0x28212000)
lindza:~ #
---snip
Bye
> Hi Michael,
>
> Thanks for getting back to me.
> Everything compiles fine, no errors at all however the "--enable-ldap=y"
> still seems to make the compiled binaries look for kerberos - Can't
> figure out why :(
>
> I'm in South Africa, apparently Kerberos is not allowed to be exported
> out of North America ?
>
> I really don't need Kerberos, somehow I have to be able to specify that
> I don't have it ?
>
> Thanks for the help so far.
>
> Many thanks and kind regards.
>
> David Wilson
> DcData
> +27 83 787 7424
> http://www.dcdata.co.za
>
> LinuxBox S.A - Africa's largest online Linux community
> http://www.linuxbox.co.za
> Powered by Linux, driven by passion !
>
> - Original Message -
> From: "Michael Bellears" <[EMAIL PROTECTED]>
> To: "'David Wilson'" <[EMAIL PROTECTED]>
> Sent: 28 September 2002 01:40
> Subject: RE: [vchkpw] vpopmail and OpenLDAP with kerberos ?
>
>
>> Are you certain it compiles successfully with the 'enable-ldap=y' (I'm
>> assuming the space is not supposed to be there)
>>
>> Configure appears to have not located your Kerberos libs
>>
>> MB
>>
>> > -Original Message-
>> > From: David Wilson [mailto:[EMAIL PROTECTED]]
>> > Sent: Friday, September 27, 2002 5:58 PM
>> > To: [EMAIL PROTECTED]
>> > Subject: [vchkpw] vpopmail and OpenLDAP with kerberos ?
>> >
>> > Hi guys,
>> >
>> > How are you ?
>> >
>> > An interesting problem on a Slackware Linux 8.0 box:
>> >
>> > Vpopmail compiles and works 100% configured with "
>> > ./configure --enable-default-domain=mydomain.co.za
>> --enable-logging=y"
>> >
>> > When I compile vpopmail with
>> >
> "./configure --enable-default-domain=mydomain.co.za --enable-logging=y
> --
>> > ena
>> > ble-ldap=y"
>> > everything compiles and installs 100% with "make" & "make
>> install-strip"
>> >
>> > However when I try add a domain with "vadddomain" - after compiling
>> in LDAP
>> > support I get the following error:
>> > ./vadddomain: error while loading shared libraries: cannot open
>> shared object file: cannot load shared obj
Re: [vchkpw] vpopmail and OpenLDAP with kerberos ?
Hi Michael,
Thanks for getting back to me.
Everything compiles fine, no errors at all however the "--enable-ldap=y"
still seems to make the compiled binaries look for kerberos - Can't figure
out why :(
I'm in South Africa, apparently Kerberos is not allowed to be exported out
of North America ?
I really don't need Kerberos, somehow I have to be able to specify that I
don't have it ?
Thanks for the help so far.
Many thanks and kind regards.
David Wilson
DcData
+27 83 787 7424
http://www.dcdata.co.za
LinuxBox S.A - Africa's largest online Linux community
http://www.linuxbox.co.za
Powered by Linux, driven by passion !
- Original Message -
From: "Michael Bellears" <[EMAIL PROTECTED]>
To: "'David Wilson'" <[EMAIL PROTECTED]>
Sent: 28 September 2002 01:40
Subject: RE: [vchkpw] vpopmail and OpenLDAP with kerberos ?
> Are you certain it compiles successfully with the 'enable-ldap=y' (I'm
> assuming the space is not supposed to be there)
>
> Configure appears to have not located your Kerberos libs
>
> MB
>
> > -Original Message-
> > From: David Wilson [mailto:[EMAIL PROTECTED]]
> > Sent: Friday, September 27, 2002 5:58 PM
> > To: [EMAIL PROTECTED]
> > Subject: [vchkpw] vpopmail and OpenLDAP with kerberos ?
> >
> > Hi guys,
> >
> > How are you ?
> >
> > An interesting problem on a Slackware Linux 8.0 box:
> >
> > Vpopmail compiles and works 100% configured with "
> > ./configure --enable-default-domain=mydomain.co.za --enable-logging=y"
> >
> > When I compile vpopmail with
> >
"./configure --enable-default-domain=mydomain.co.za --enable-logging=y --
> > ena
> > ble-ldap=y"
> > everything compiles and installs 100% with "make" & "make install-strip"
> >
> > However when I try add a domain with "vadddomain" - after compiling in
> > LDAP
> > support I get the following error:
> > ./vadddomain: error while loading shared libraries: cannot open shared
> > object file: cannot load shared object file: No such file or directory
> >
> > Running an "strace" on it I get the following suspicious error:
> > open("/lib/i586/libkrb4.so.2", O_RDONLY) = -1 ENOENT (No such file or
> > directory)
> > stat("/lib/i586", 0xbfffec24) = -1 ENOENT (No such file or
> > directory)
> > open("/lib/libkrb4.so.2", O_RDONLY) = -1 ENOENT (No such file or
> > directory)
> > stat("/lib", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
> > open("/usr/lib/i586/libkrb4.so.2", O_RDONLY) = -1 ENOENT (No such file
or
> > directory)
> > stat("/usr/lib/i586", 0xbfffec24) = -1 ENOENT (No such file or
> > directory)
> > open("/usr/lib/libkrb4.so.2", O_RDONLY) = -1 ENOENT (No such file or
> > directory)
> >
> > Does this mean that Kerberos has to be installed to enable LDAP support
?
> >
> > Any assistance would be greatly appreciated, thanks.
> >
> > Many thanks and kind regards.
> >
> > David Wilson
> > DcData
> > +27 83 787 7424
> > http://www.dcdata.co.za
> >
> > LinuxBox S.A - Africa's largest online Linux community
> > http://www.linuxbox.co.za
> > Powered by Linux, driven by passion !
>
Re: [vchkpw] vpopmail and OpenLDAP with kerberos ? (ldd) output
Hi guys,
I still don't seem to be getting this right, please help when you have a
chance, thanks.
Interesting that vadddomain compiled with
"./configure --enable-default-domain=mydomain.co.za --enable-logging=y"
Has the following "ldd" output:
libnsl.so.1 => /lib/libnsl.so.1 (0x4002)
libcrypt.so.1 => /lib/libcrypt.so.1 (0x40035000)
libc.so.6 => /lib/libc.so.6 (0x40063000)
/lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x4000)
But with the additional "--enable-ldap=y" has the following:
libldap.so.2 => /usr/lib/libldap.so.2 (0x4002)
liblber.so.2 => /usr/lib/liblber.so.2 (0x4004b000)
libresolv.so.2 => /lib/libresolv.so.2 (0x40055000)
libnsl.so.1 => /lib/libnsl.so.1 (0x40066000)
libcrypt.so.1 => /lib/libcrypt.so.1 (0x4007b000)
libc.so.6 => /lib/libc.so.6 (0x400a9000)
libsasl.so.7 => /usr/lib/libsasl.so.7 (0x401ba000)
/lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x4000)
libkrb4.so.2 => not found
libdes425.so.3 => not found
libkrb5.so.3 => not found
libk5crypto.so.3 => not found
libcom_err.so.3 => not found
libssl.so.1 => not found
libcrypto.so.1 => not found
libdb-3.2.so => not found
libdl.so.2 => /lib/libdl.so.2 (0x401c7000)
libpam.so.0 => /lib/libpam.so.0 (0x401cb000)
Please help me disable all the kerberos etc etc.
Many thanks and kind regards.
David Wilson
DcData
+27 83 787 7424
http://www.dcdata.co.za
LinuxBox S.A - Africa's largest online Linux community
http://www.linuxbox.co.za
Powered by Linux, driven by passion !
- Original Message -
From: "David Wilson" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: 27 September 2002 09:57
Subject: [vchkpw] vpopmail and OpenLDAP with kerberos ?
> Hi guys,
>
> How are you ?
>
> An interesting problem on a Slackware Linux 8.0 box:
>
> Vpopmail compiles and works 100% configured with "
> ./configure --enable-default-domain=mydomain.co.za --enable-logging=y"
>
> When I compile vpopmail with
>
"./configure --enable-default-domain=mydomain.co.za --enable-logging=y --ena
> ble-ldap=y"
> everything compiles and installs 100% with "make" & "make install-strip"
>
> However when I try add a domain with "vadddomain" - after compiling in
LDAP
> support I get the following error:
> ./vadddomain: error while loading shared libraries: cannot open shared
> object file: cannot load shared object file: No such file or directory
>
> Running an "strace" on it I get the following suspicious error:
> open("/lib/i586/libkrb4.so.2", O_RDONLY) = -1 ENOENT (No such file or
> directory)
> stat("/lib/i586", 0xbfffec24) = -1 ENOENT (No such file or
> directory)
> open("/lib/libkrb4.so.2", O_RDONLY) = -1 ENOENT (No such file or
> directory)
> stat("/lib", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
> open("/usr/lib/i586/libkrb4.so.2", O_RDONLY) = -1 ENOENT (No such file or
> directory)
> stat("/usr/lib/i586", 0xbfffec24) = -1 ENOENT (No such file or
> directory)
> open("/usr/lib/libkrb4.so.2", O_RDONLY) = -1 ENOENT (No such file or
> directory)
>
> Does this mean that Kerberos has to be installed to enable LDAP support ?
>
> Any assistance would be greatly appreciated, thanks.
>
> Many thanks and kind regards.
>
> David Wilson
> DcData
> +27 83 787 7424
> http://www.dcdata.co.za
>
> LinuxBox S.A - Africa's largest online Linux community
> http://www.linuxbox.co.za
> Powered by Linux, driven by passion !
>
