Re: nss-pam-ldapd en Red Hat 4.5

[Moisés Barba Pérez <mbarperoi [at] gmail.com>]

Hi,

Thank you very much for your answer, it works for 0.7.13 when I changed PAM_AUTHTOK_RECOVERY_ERR with
PAM_AUTHTOK_RECOVER_ERR. The version of PAM in mi RHEL 4.5 is pam-0.77-66.21 so you are so right.

BTW, sorry for the logs in Spanish, i did not realize. I will be more carefull from now on.

Moses.

2011/6/7 Arthur de Jong <arthur [at] arthurdejong.org>

On Tue, 2011-06-07 at 10:00 +0200, Moisés Barba Pérez wrote:
> I would like to install nss-pam-ldapd in Red Hat 4.5. The
> nss-ldapd-0.4.1.tar.gz versión work fine but I think this is a version
> too old.

I would recommend trying 0.7.13. It is the latest stable release, is
well-tested and should compile fine on most Linux systems.

> When I try to install more recent version I get the following errors:
>
> [root@redhat45 nss-ldapd-0.6]# ./configure --disable-sasl
> --disable-kerberos -> FINE
> [root@redhat45 nss-ldapd-0.6]# make
> ...
> gcc -DHAVE_CONFIG_H -I. -I..  -I..  -pthread -g -O2 -MT cfg.o -MD -MP
> -MF .deps/cfg.Tpo -c -o cfg.o cfg.c
> cfg.c: In function `parse_krb5_ccname_statement':
> cfg.c:405: error: `OM_uint32' no se declaró aquí (primer uso en esta
> función)
> cfg.c:405: error: (Cada identificador no declarado solamente se
> reporta una vez

If you still have issues with 0.7.13, can you compile with LANG set to C
(I'm having some difficulty reading the error messages):
 env LC_ALL=C make
Also, the output of configure might be helpful.

Anyway, it seems that the "OM_uint32" and "GSS_S_COMPLETE" messages are
due to incorrect handling of Kerberos headers and
"PAM_AUTHTOK_RECOVERY_ERR" messages are about missing PAM definitions.
Redhat 4.5 seems a bit old, which version of PAM does it have?

You can try replacing PAM_AUTHTOK_RECOVERY_ERR with
PAM_AUTHTOK_RECOVER_ERR in compat/pam_get_authtok.c to see if that helps
(it seems that versions before 0.99.3.0 used the other name).

If you don't want to use the PAM module and only plan to use the NSS
module (versions before 0.7 only had the NSS module by default) you
could pass --disable-pam to configure.

--
-- arthur - arthur [at] arthurdejong.org - http://arthurdejong.org --

-- 
To unsubscribe send an email to
nss-pam-ldapd-users-unsubscribe@lists.arthurdejong.org or see
http://lists.arthurdejong.org/nss-pam-ldapd-users