[SSSD] Announcing SSSD 1.10.0 Beta 2

Jakub Hrozek jhrozek at redhat.com
Sun Jun 16 10:38:11 UTC 2013


On Sun, Jun 16, 2013 at 12:29:28PM +0200, steve wrote:
> On Sun, 2013-06-16 at 12:08 +0200, Jakub Hrozek wrote:
> > On Fri, Jun 14, 2013 at 11:15:49PM +0200, steve wrote:
> > > On Tue, 2013-06-11 at 23:26 +0200, Jakub Hrozek wrote:
> > > >                        === SSSD 1.10 Beta 2 ===
> > > > 
> > > > The SSSD team is proud to announce the second beta release of version 1.10
> > > > of the System Security Services Daemon.
> > > 
> > > We tested with an openSUSE 12.3 client using exactly the same config as
> > > we had with the beta1. All our tests passed including dyndns updates
> > > with bind9_dlz on a Samba 4.0 DC.
> > > 
> > > Notes:
> > > 1. memberof.la is still copied to the ldb directory. It needs to be
> > > deleted before sssd will run.
> > 
> > This is a libtool issue that is usually solved on the package (RPM/DEB)
> > level. I don't think we're ever going to "fix" this in Makefiles.
> > 
> > > 
> > > 2. It is necessary to copy all the links and .so files
> > > from /usr/local/lib to /lib. Copying just libnss_sss* as per BUILD.txt
> > > is not sufficient.
> > 
> > This looks like bad configure invocation to me, really.  /usr/local is
> > what autotools default to.
> > 
> > Personally, I configure with these flags (mostly copied from Fedora's
> > RPM flags):
> > 
> > --prefix=/usr --exec-prefix=/usr --bindir=/usr/bin --sbindir=/usr/sbin
> > --sysconfdir=/etc --datadir=/usr/share --includedir=/usr/include
> > --libdir=/usr/lib64 --libexecdir=/usr/libexec --localstatedir=/var
> > --sharedstatedir=/var/lib --mandir=/usr/share/man
> > --with-test-dir=/dev/shm --infodir=/usr/share/info --enable-silent-rules
> > --enable-nsslibdir=/lib64 --enable-pammoddir=/lib64/security 
> > 
> > As you can see, most prefixes begin with /usr except for NSS and PAM
> > libraries that are packaged directly to /lib64 (as my system is a 64bit
> > one)
> > 
> > > 
> > > Otherwise, perfect, great job. Thank you.
> > > HTH,
> > > Steve
> > 
> > Thank you very much for testing, Steve! It's really appreciated, also
> > given that OpenSUSE a platform we don't test upstream.
> 
> Hi
> Ok, so for users following the Fedora instructions in BUILD.txt, which
> is correct?
> 
> Is it as stated in BUILD.txt:
> copy /usr/local/lib/libnss_sss* to /lib

You always want to copy the nss libraries to /lib (or /lib64) because
that is the only place glibc looks for the name service switch libraries.

> or is it
> copy /usr/local/lib/* to /lib
> (i.e. _all_ the .so files and links, not the folders)?
> 

If SSSD was installed to /usr/local it should be able to load all its
libraries from /usr/local. I bet if you executed "# /usr/local/sbin/sssd" it
would run just fine.

I suspect the confusion just comes from the fact that you have two copies of
SSSD installed on the system, one that lives in /usr and one that lives in
/usr/local and because /usr typically precedes /usr/local in $PATH, when you
(or initscript) start just "sssd", you'd run the copy that resides in /usr.

> We think it important that when testing betas, we all do the same build.

Yes, sure. Maybe if you ran "make rpms" it would produce more
predictable results? I'm just not sure if our upstream packaging would
match the expectations OpenSUSE has, because as Fedora is our devel
platform, the upstream spec file tends to follow Fedora guidelines.

> We can do the definitive install with flags that suits one's distro more
> when we have the release.
> 
> No problem testing. Just thinking out loud about end-user confusion.
> Steve



More information about the sssd-devel mailing list