Hello,
Using: openldap 2.4.58 RHEL 8
I'm attempting to add a new module, smbkrb5pwd (because we use MIT Kerberos). Compiled and linked under the full openldap2.4.58 source tree per instructions (README and here https://github.com/opinsys/smbkrb5pwd)
ldapadd is failing, the log shows:
conn=19701 op=1 ADD dn="cn=module{0},cn=config" Jul 22 12:15:58 slapd[605702]: lt_dlopenext failed: (smbkrb5pwd.so) file not found Jul 22 12:15:58 slapd[605702]: conn=19701 op=1 RESULT tag=105 err=80 text=<olcModuleLoad> handler exit
Using this ldif:
dn: cn=module{0},cn=config objectClass: olcModuleList cn: module olcModulepath: /etc/openldap/smbkrb5pwd olcModuleload: {0}smbkrb5pwd.so
I've tried olcModuleload with the full path, or olcModulepath with just the module name and still get the lt_dlopenext
The directory and files are visible: ll /etc/openldap/smbkrb5pwd/smbkrb5pwd.* -rw-r--r--. 1 ldap ldap 145638 Jul 22 12:13 /etc/openldap/smbkrb5pwd/smbkrb5pwd.a -rw-r--r--. 1 ldap ldap 888 Jul 22 12:13 /etc/openldap/smbkrb5pwd/smbkrb5pwd.la -rw-r--r--. 1 ldap ldap 889 Jul 22 12:13 /etc/openldap/smbkrb5pwd/smbkrb5pwd.lai -rw-r--r--. 1 ldap ldap 146720 Jul 22 12:13 /etc/openldap/smbkrb5pwd/smbkrb5pwd.o lrwxrwxrwx. 1 root root 19 Jul 22 12:13 /etc/openldap/smbkrb5pwd/smbkrb5pwd.so -> smbkrb5pwd.so.0.0.1 lrwxrwxrwx. 1 root root 19 Jul 22 12:13 /etc/openldap/smbkrb5pwd/smbkrb5pwd.so.0 -> smbkrb5pwd.so.0.0.1 -rwxr-xr-x. 1 ldap ldap 97624 Jul 22 12:13 /etc/openldap/smbkrb5pwd/smbkrb5pwd.so.0.0.1
Thanks for any guidance as to what I've missed in the setup.
Peter
--On Thursday, July 22, 2021 5:26 PM +0000 "Heinemann, Peter G" phei@isc.upenn.edu wrote:
Hello,
Using: openldap 2.4.58 RHEL 8
I'm attempting to add a new module, smbkrb5pwd (because we use MIT Kerberos). Compiled and linked under the full openldap2.4.58 source tree per instructions (README and here https://github.com/opinsys/smbkrb5pwd)
I would suggest contacting the author of that module for support as it is not a part of the OpenLDAP software distribution, not even the contrib/ modules. I would note that the module in general seems to be abandonware.
Regards, Quanah
--
Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com
Noted, but if there's anyone else in the general community who has used this I'd be interested in their experience. ________________________________ From: Quanah Gibson-Mount quanah@symas.com Sent: Thursday, July 22, 2021 12:37 PM To: Heinemann, Peter G phei@isc.upenn.edu; openldap-technical@openldap.org openldap-technical@openldap.org Subject: Re: adding a new module smbkrb5pwd - error missingAttributeDescription
--On Thursday, July 22, 2021 5:26 PM +0000 "Heinemann, Peter G" phei@isc.upenn.edu wrote:
Hello,
Using: openldap 2.4.58 RHEL 8
I'm attempting to add a new module, smbkrb5pwd (because we use MIT Kerberos). Compiled and linked under the full openldap2.4.58 source tree per instructions (README and here https://urldefense.com/v3/__https://github.com/opinsys/smbkrb5pwd__;!!IBzWLU... )
I would suggest contacting the author of that module for support as it is not a part of the OpenLDAP software distribution, not even the contrib/ modules. I would note that the module in general seems to be abandonware.
Regards, Quanah
--
Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <https://urldefense.com/v3/__http://www.symas.com__;!!IBzWLUs!DFdMTnC1wXjzQVF... >
I have used it in the past, however, I am a bit concerned it’s essentially been abandoned, as this module for me was essential for my configuration… I have since moved to a hosted ldap provider, but im considering switching back to OpenLDAP, this issue will complicate things for me, as samba and LDAP are required in my usage.
On Jul 22, 2021, at 10:35 AM, Heinemann, Peter G phei@isc.upenn.edu wrote:
Noted, but if there's anyone else in the general community who has used this I'd be interested in their experience. From: Quanah Gibson-Mount <quanah@symas.com mailto:quanah@symas.com> Sent: Thursday, July 22, 2021 12:37 PM To: Heinemann, Peter G <phei@isc.upenn.edu mailto:phei@isc.upenn.edu>; openldap-technical@openldap.org mailto:openldap-technical@openldap.org <openldap-technical@openldap.org mailto:openldap-technical@openldap.org> Subject: Re: adding a new module smbkrb5pwd - error missingAttributeDescription
--On Thursday, July 22, 2021 5:26 PM +0000 "Heinemann, Peter G" <phei@isc.upenn.edu mailto:phei@isc.upenn.edu> wrote:
Hello,
Using: openldap 2.4.58 RHEL 8
I'm attempting to add a new module, smbkrb5pwd (because we use MIT Kerberos). Compiled and linked under the full openldap2.4.58 source tree per instructions (README and here https://urldefense.com/v3/__https://github.com/opinsys/smbkrb5pwd__;!!IBzWLU... https://urldefense.com/v3/__https://github.com/opinsys/smbkrb5pwd__;!!IBzWLUs!DFdMTnC1wXjzQVFREJxUM5fsZ8Z7BoqqsNNlbu4mjls53_Lh3x369nQR-1bx684n$ )
I would suggest contacting the author of that module for support as it is not a part of the OpenLDAP software distribution, not even the contrib/ modules. I would note that the module in general seems to be abandonware.
Regards, Quanah
--
Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: < applewebdata://9FE7A617-4E75-4977-8487-B8FFD7B98297https://urldefense.com/v3/__http://www.symas.com__;!!IBzWLUs!DFdMTnC1wXjzQVF... https://urldefense.com/v3/__http://www.symas.com__;!!IBzWLUs!DFdMTnC1wXjzQVFREJxUM5fsZ8Z7BoqqsNNlbu4mjls53_Lh3x369nQR-7kAeGI4$ >
Hi!
Sorry, if it sounds stupid, but could it be you forgot the obvious like "ldconfig" in Linux? Maybe also chack LD_IBRARY_PATH. So strace the slapd process.
Regards, Ulrich
"Heinemann, Peter G" phei@isc.upenn.edu schrieb am 22.07.2021 um 18:26
in Nachricht MN2PR10MB31048225D2DD5E8E9587712083E49@MN2PR10MB3104.namprd10.prod.outlook.com
Hello,
Using: openldap 2.4.58 RHEL 8
I'm attempting to add a new module, smbkrb5pwd (because we use MIT Kerberos). Compiled and linked under the full openldap2.4.58 source tree per instructions (README and here https://github.com/opinsys/smbkrb5pwd)
ldapadd is failing, the log shows:
conn=19701 op=1 ADD dn="cn=module{0},cn=config" Jul 22 12:15:58 slapd[605702]: lt_dlopenext failed: (smbkrb5pwd.so) file not found Jul 22 12:15:58 slapd[605702]: conn=19701 op=1 RESULT tag=105 err=80 text=<olcModuleLoad> handler exit
Using this ldif:
dn: cn=module{0},cn=config objectClass: olcModuleList cn: module olcModulepath: /etc/openldap/smbkrb5pwd olcModuleload: {0}smbkrb5pwd.so
I've tried olcModuleload with the full path, or olcModulepath with just the
module name and still get the lt_dlopenext
The directory and files are visible: ll /etc/openldap/smbkrb5pwd/smbkrb5pwd.* ‑rw‑r‑‑r‑‑. 1 ldap ldap 145638 Jul 22 12:13
/etc/openldap/smbkrb5pwd/smbkrb5pwd.a
‑rw‑r‑‑r‑‑. 1 ldap ldap 888 Jul 22 12:13
/etc/openldap/smbkrb5pwd/smbkrb5pwd.la
‑rw‑r‑‑r‑‑. 1 ldap ldap 889 Jul 22 12:13 /etc/openldap/smbkrb5pwd/smbkrb5pwd.lai ‑rw‑r‑‑r‑‑. 1 ldap ldap 146720 Jul 22 12:13
/etc/openldap/smbkrb5pwd/smbkrb5pwd.o
lrwxrwxrwx. 1 root root 19 Jul 22 12:13 /etc/openldap/smbkrb5pwd/smbkrb5pwd.so ‑> smbkrb5pwd.so.0.0.1 lrwxrwxrwx. 1 root root 19 Jul 22 12:13 /etc/openldap/smbkrb5pwd/smbkrb5pwd.so.0 ‑> smbkrb5pwd.so.0.0.1 ‑rwxr‑xr‑x. 1 ldap ldap 97624 Jul 22 12:13 /etc/openldap/smbkrb5pwd/smbkrb5pwd.so.0.0.1
Thanks for any guidance as to what I've missed in the setup.
Peter
openldap-technical@openldap.org
-
Dr. Ogg -
Heinemann, Peter G -
Quanah Gibson-Mount -
Ulrich Windl