-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 06/16/2013 06:29 AM, steve wrote:
On Sun, 2013-06-16 at 12:08 +0200, Jakub Hrozek wrote:
> On Fri, Jun 14, 2013 at 11:15:49PM +0200, steve wrote:
>> On Tue, 2013-06-11 at 23:26 +0200, Jakub Hrozek wrote:
>>> === SSSD 1.10 Beta 2 ===
>>>
>>> The SSSD team is proud to announce the second beta release of
>>> version 1.10 of the System Security Services Daemon.
>>
>> We tested with an openSUSE 12.3 client using exactly the same
>> config as we had with the beta1. All our tests passed including
>> dyndns updates with bind9_dlz on a Samba 4.0 DC.
>>
>> Notes: 1. memberof.la is still copied to the ldb directory. It
>> needs to be deleted before sssd will run.
>
> This is a libtool issue that is usually solved on the package
> (RPM/DEB) level. I don't think we're ever going to "fix" this in
> Makefiles.
>
>>
>> 2. It is necessary to copy all the links and .so files from
>> /usr/local/lib to /lib. Copying just libnss_sss* as per
>> BUILD.txt is not sufficient.
>
> This looks like bad configure invocation to me, really.
> /usr/local is what autotools default to.
>
> Personally, I configure with these flags (mostly copied from
> Fedora's RPM flags):
>
> --prefix=/usr --exec-prefix=/usr --bindir=/usr/bin
> --sbindir=/usr/sbin --sysconfdir=/etc --datadir=/usr/share
> --includedir=/usr/include --libdir=/usr/lib64
> --libexecdir=/usr/libexec --localstatedir=/var
> --sharedstatedir=/var/lib --mandir=/usr/share/man
> --with-test-dir=/dev/shm --infodir=/usr/share/info
> --enable-silent-rules --enable-nsslibdir=/lib64
> --enable-pammoddir=/lib64/security
>
FYI, on recent versions of SSSD, if you look in
contrib/fedora/bashrc_sssd, you will see a file that you can source to
set up a bunch of aliases to configure SSSD properly (for Fedora).
This will ensure that you have all the appropriate paths. You may need
to tweak it for OpenSUSE, but you can easily use that file as a baseline.
If you find the right tweaks for SUSE, please feel free to submit back
a bashrc_sssd file that we can drop into the contrib/suse directory.
> As you can see, most prefixes begin with /usr except for NSS and
> PAM libraries that are packaged directly to /lib64 (as my system
> is a 64bit one)
>
>>
>> Otherwise, perfect, great job. Thank you. HTH, Steve
>
> Thank you very much for testing, Steve! It's really appreciated,
> also given that OpenSUSE a platform we don't test upstream.
Hi Ok, so for users following the Fedora instructions in BUILD.txt,
which is correct?
BUILD.txt is archaic and should be going away. IIRC, we have an
unpushed patch on this list to replace it with text that just points
to our wiki which will generally have more up-to-date information.
Is it as stated in BUILD.txt: copy /usr/local/lib/libnss_sss* to
/lib or is it copy /usr/local/lib/* to /lib (i.e. _all_ the .so
files and links, not the folders)?
We think it important that when testing betas, we all do the same
build. We can do the definitive install with flags that suits one's
distro more when we have the release.
No problem testing. Just thinking out loud about end-user
confusion.
Upstream considers the "definitive" build to be the one we use for
Fedora, since we're certain that it matches the Filesystem Hierarchy
Standard. SSSD will *never* work with just "./configure" with no flags
because we always need to be able to specify where the nsswitch and
PAM modules need to live because they're different on different
platforms, even different architectures of the same OS. In Fedora,
they need to be in /lib and /lib/security for i686 vs. /lib64
and/lib64/security on x86_64. There's no way to cleanly autodetect
this, so it must always be specified manually.
Furthermore, our SYSV script that gets auto-installed if you're
building on a non-systemd platform has the /sbin path hard-coded
(which should probably be changed to be set up at configure time, like
the systemd unit file is). I guess I'll file a bug on that.
https://fedorahosted.org/sssd/ticket/1986
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird -
http://www.enigmail.net/
iEYEARECAAYFAlG++RIACgkQeiVVYja6o6N/bACfQvzqC1DF1buTHNSAnu+Ji7Gj
39QAnRs2HJdoH7YSocIlrwSgxlCpnw0p
=PA4S
-----END PGP SIGNATURE-----