4.2.0 compile error on our centos-6 and centos-7 systems (gnutls related)

[Rowland Penny]

On 07/03/15 14:38, "Dr. Hansjörg Maurer" wrote:
> Hi
>
>
> I have been trying to build  AD enabled samba 4.2.0 on centos-6 and centos-7
> The build of 4.2.0rc5 with the same spec was fine on the same systems
>
> With 4.2.0 I get the following error
>
> default/source4/rpc_server/backupkey/dcesrv_backupkey_24.o: In function
> `create_heimdal_rsa_key':
> /root/rpmbuild/BUILD/samba-4.2.0/bin/../source4/rpc_server/backupkey/dcesrv_backupkey.c:808:
> undefined reference to `gnutls_global_init'
> /root/rpmbuild/BUILD/samba-4.2.0/bin/../source4/rpc_server/backupkey/dcesrv_backupkey.c:811:
> undefined reference to `gcry_control'
> /root/rpmbuild/BUILD/samba-4.2.0/bin/../source4/rpc_server/backupkey/dcesrv_backupkey.c:813:
> undefined reference to `gnutls_x509_privkey_init'
> /root/rpmbuild/BUILD/samba-4.2.0/bin/../source4/rpc_server/backupkey/dcesrv_backupkey.c:826:
> undefined reference to `gnutls_x509_privkey_generate'
> /root/rpmbuild/BUILD/samba-4.2.0/bin/../source4/rpc_server/backupkey/dcesrv_backupkey.c:906:
> undefined reference to `gnutls_x509_privkey_deinit'
> /root/rpmbuild/BUILD/samba-4.2.0/bin/../source4/rpc_server/backupkey/dcesrv_backupkey.c:907:
> undefined reference to `gnutls_global_deinit'
> /root/rpmbuild/BUILD/samba-4.2.0/bin/../source4/rpc_server/backupkey/dcesrv_backupkey.c:833:
> undefined reference to `gnutls_x509_privkey_export'
> /root/rpmbuild/BUILD/samba-4.2.0/bin/../source4/rpc_server/backupkey/dcesrv_backupkey.c:860:
> undefined reference to `gnutls_x509_privkey_export'
> /root/rpmbuild/BUILD/samba-4.2.0/bin/../source4/rpc_server/backupkey/dcesrv_backupkey.c:906:
> undefined reference to `gnutls_x509_privkey_deinit'
> /root/rpmbuild/BUILD/samba-4.2.0/bin/../source4/rpc_server/backupkey/dcesrv_backupkey.c:907:
> undefined reference to `gnutls_global_deinit'
> collect2: error: ld returned 1 exit status
> Waf: Leaving directory `/root/rpmbuild/BUILD/samba-4.2.0/bin'
> Build failed:  -> task failed (err #1):
>          {task: cc_link
> dcesrv_wkssvc_16.o,samba_server_gensec_8.o,forward_3.o,reply_3.o,dcesrv_auth_3.o,loadparm_3.o,dcesrv_backupkey_24.o,rpc_winreg_20.o,ntptr_simple_ldb_1.o,dcerpc_netlogon_21.o,dcesrv_samr_18.o,samr_password_18.o,dcesrv_eventlog6_29.o,dcerpc_dnsserver_30.o,dnsutils_30.o,dnsdata_30.o,dnsdb_30.o,dcesrv_drsuapi_27.o,updaterefs_27.o,getncchanges_27.o,addentry_27.o,writespn_27.o,drsutil_27.o,dcesrv_srvsvc_14.o,srvsvc_ntvfs_14.o,dcerpc_server_5.o,dcesrv_mgmt_5.o,handles_5.o,rpc_echo_11.o,dcesrv_spoolss_26.o,dcesrv_browser_28.o,dcesrv_remote_13.o,dcesrv_lsa_22.o,lsa_init_22.o,lsa_lookup_22.o,dcesrv_unixinfo_17.o,ntptr_base_2.o,ntptr_interface_2.o,rpc_epmapper_12.o,ndr_backupkey_c_151.o
> -> libdcerpc-server.so}
> make: *** [all] Error 1
>
>
> I have added --enable-gnutls  to the cobfigure with no sucess
> The configure options for centos-7 are
>
> ./configure --build=x86_64-redhat-linux-gnu
> --host=x86_64-redhat-linux-gnu --program-prefix=
> --disable-dependency-tracking --prefix=/usr --exec-prefix=/usr
> --bindir=/usr/bin --sbindir=/usr/sbin --sysconfdir=/etc
> --datadir=/usr/share --includedir=/usr/include --libdir=/usr/lib64
> --libexecdir=/usr/libexec --localstatedir=/var --sharedstatedir=/var/lib
> --mandir=/usr/share/man --infodir=/usr/share/info --enable-fhs
> --prefix=/usr --with-dnsupdate --with-ads --with-acl-support
> --with-automount --with-pam_smbpass --with-quotas
> --with-sendfile-support --with-syslog --with-utmp --with-winbind
> --with-aio-support --enable-cups --enable-gnutls --with-piddir=/run
> --with-sockets-dir=/run/samba --mandir=/usr/share/man
> --libdir=/usr/lib64 --with-privatedir=/etc/samba
> --with-modulesdir=/usr/lib64/samba
> --with-pammodulesdir=/usr/lib64/security
> --with-shared-modules=idmap_ad,idmap_rid,idmap_adex,idmap_hash,idmap_tdb2 --with-lockdir=/var/lib/samba
> --with-cachedir=/var/lib/samba --disable-gnutls --disable-rpath-install
> --with-shared-modules=idmap_ad,idmap_rid,idmap_adex,idmap_hash,idmap_tdb2,pdb_tdbsam,pdb_ldap,pdb_ads,pdb_smbpasswd,pdb_wbc_sam,pdb_samba4,auth_unix,auth_wbc,auth_server,auth_netlogond,auth_script,auth_samba4
> '--bundled-libraries=heimdal,!zlib,!popt,talloc,pytalloc,pytalloc-util,tevent,pytevent,tdb,pytdb,ldb,pyldb'
> --with-pam --without-fam --disable-glusterfs --with-cluster-support
> --with-profiling-data --with-systemd
>
>
>
> The following gnu-tls versions are installed
> 2.8.5-14.el6_5 (Centos-6)
> gnutls-devel-3.1.18-10.el7_0 (Centos-7)
>
> any idea?
>
> Best regards
>
> Hansjörg
>
>
> ----------------------------
> Unser System ist mit einem Mailverschluesselungs-Gateway ausgestattet. Wenn Sie moechten, dass an Sie gerichtete E-Mails verschluesselt werden, senden Sie einfach eine S/MIME-signierte E-Mail oder Ihren PGP Public Key an hansjoerg.maurer at itsd.de.
>
> Our system is equipped with an email encryption gateway. If you want email sent to you to be encrypted please send a S/MIME signed email or your PGP public key to hansjoerg.maurer at itsd.de.
>

Hi, I can build 4.2.0 on Centos 7 without error. I followed the wiki and 
installed to /usr/local/samba, there was just one error, the list of 
required packages for 'Red Hat Enterprise Linux / CentOS / Scientific 
Linux' was missing openldap-devel (I have updated the wiki), after 
adding this package, configure, make & make install ran ok.

So the problem could be in your list of configure options, there are 
duplicates and default options, but my money is on you having set 
'--enable-gnutls' (which is a default option anyway) and lower down 
'--disable-gnutls'

Rowland