[Samba] samba 4.12 build with gnuTLS on hp-ux (and OmniOS)

[Peter Eriksson]

Just a quick follow-up:

I’ve updated my patches at:

  http://www.grebo.net/~peter/omnios/samba <http://www.grebo.net/~peter/omnios/samba>

(one each for Samba 4.10, 4.11 & 4.12r (4.12.0rc1 actually). 

They are actually quite simple (mostly small variations). I had to add two more things to get 4.12.0rc1 to compile on OmniOS:

1)

diff -u -r samba-4.12.0rc1/wscript samba-4.12.0rc1-liu/wscript
--- samba-4.12.0rc1/wscript     tis jan. 21 15:10:42 2020
+++ samba-4.12.0rc1-liu/wscript tors jan. 23 21:45:15 2020
@@ -321,7 +321,8 @@
     # allows us to find problems on our development hosts faster.
     # It also results in faster load time.
 
-    conf.add_as_needed()
+    conf.env.asneeded_ldflags = conf.ADD_LDFLAGS('-Wl,--as-needed', testflags=True)
+#    conf.add_as_needed()
 
     if not conf.CHECK_NEED_LC("-lc not needed"):
         conf.ADD_LDFLAGS('-lc', testflags=False)

(Went back to the 4.10/4.11 way - or it would add “—as-needed” and then fail...)

2)
And rename the “s_addr” occurrence in lib/tsocket/tsocket.h and tsocket_bsd.c to “xs_addr” since apparently
“s_addr” is a #define in OmniOS and that will break…

In that directory is also a CONFIGURE script that lists OmniOS requirements needed to build a working Samba (64bit):
(And calls the “configure” script with needed options). Basically:

# Prereqs / OmniOS packages needed:                                             
#                                                                               
# - gnu-make (to build some packages)                                           
# - gnu-tar (to unpack some packages)                                           
# - gcc (to compile - duh!)                                                     
# - pkg-config                                                                  
# - kerberos-5                                                                  
# - bison                                                                       
#                                                                               
# Assumes that the following packages are compiled (as 64 bit binaries)         
# and installed into /usr/local (in that order):                                
#                                                                               
# - gmp (tested with 6.2.0)                                                     
# - nettle (tested with 3.4.1)                                                  
# - gnutls (tested with 3.6.11.1)                                               
# - libtasn1 (tested with 4.15.0)                                               
# - jansson (tested with 2.12)                                                  
# - libarchive (tested with 3.4.1)                                              
# - p11-kit (tested with 0.23.19)                                               
# - openldap (tested with 2.4.48)                                               
#                                                                               
# And that the corresponding patch file is applied to the Samba source.     


I’ve sent an email to OmniOS people about the tdb_mutex problem, hopefully it will be fixed
(I think it is fixed in Illumos).

- Peter


> On 23 Jan 2020, at 20:27, Andrew Bartlett via samba <samba at lists.samba.org> wrote:
> 
> On Thu, 2020-01-23 at 10:53 +0000, Kumar, Arjit (SSTO) via samba wrote:
>> Hi Team,
>> 
>> We are planning to build samba 4.12 (without AD DC) on hp-ux.
> 
> G'Day Arjit,
> 
> I wanted to say a big thanks to you and your team for the forward-
> thinking to follow our release announcements.  It is great to hear from
> our vendors with concerns at the start of our release candidate process
> (rather than, as so often happens, a year or so after the release). 
> 
>> Currently gnuTLS is not officially available on hp-ux.
>> Is there any possible workaround available which enable us to openssl instead of gnuTLS ?
> 
> Sadly no, the GnuTLS API is not at all like the OpenSSL one and so
> while both cryptographic APIs they can't be substituted for each other.
> We require GnuTLS specifically.
> 
>> Latest gnuTLS requires minimum dependencies of nettle and gmp and have optional dependencies of libz, p11-kit, libidn and libtasn1.
>> For building gnuTLS specifically for samba, What are minimum dependencies required for gnuTLS?
> 
> Peter's reply looks good in this regard, so I would go with those
> instructions. 
> 
> Thanks for reaching out!
> 
> Andrew Bartlett
> 
> -- 
> Andrew Bartlett                       http://samba.org/~abartlet/
> Authentication Developer, Samba Team  http://samba.org
> Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba
> 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba