[Samba] gnutls 3.7.2 in https://copr.fedorainfracloud.org/coprs/sergiomb/SambaAD/ ?

[Sérgio Basto]

On Sun, 2022-01-23 at 20:41 +0100, Jürgen Echter wrote:
> Hi,
> 
> i got the update today and now samba (after compiling) isn't working
> as i expect it to work.
> 
> In fact dovecot/pfsense cannot authenticate users anymore.
> 
> What i see in the logs:
> 
> 2022/01/23 20:31:10.008619, 3] ../../lib/ldb-
> samba/ldb_wrap.c:332(ldb_wrap_connect) ldb_wrap open of secrets.ldb
> [2022/01/23 20:31:10.011317, 0]
> ../../source4/lib/tls/tls_tstream.c:1300(_tstream_tls_accept_send)
> _tstream_tls_accept_send: TLS
> ../../source4/lib/tls/tls_tstream.c:1300 - The request is invalid..
> Failed to set default priorities [2022/01/23 20:31:10.011428, 3]
> ../../source4/samba/service_stream.c:67(stream_terminate_connection)
> stream_terminate_connection: Terminating connection -
> 'ldapsrv_accept_tls_loop: tstream_tls_accept_recv() - 22:Invalid
> argument' [2022/01/23 20:31:21.797979, 3] ../../lib/ldb-
> samba/ldb_wrap.c:332(ldb_wrap_connect) ldb_wrap open of secrets.ldb
> 
> I compiled samba before the update like this and it worked:
> 
> export PKG_CONFIG_PATH=/usr/lib64/compat-
> gnutls34/pkgconfig:/usr/lib64/compat-nettle32/pkgconfig

Hi, 

export PKG_CONFIG_PATH is not need anymore , after decide that we can't
install various devel packages of the same software 

so you just need Builrequires pkgconfig(gnutls) and pkgconfig(nettle)
 >= 3.7 to install the correct devel packages 

BuildRequires: pkgconfig(gnutls) >= 3.7.2
BuildRequires: pkgconfig(nettle) >= 3.7.3
BuildRequires: pkgconfig(hogweed) >= 3.4.1


pkg-config will work correctly 

/usr/bin/pkg-config "gnutls >= 3.6.8" --cflags --libs gnutls



> ./configure
> make
> 
> I haven't found any compat-nettle in /usr/lib64
> 
> compat-gnutls34 is present, samba also compiled and installed fine
> but i cannot authenticate anymore.
> 
> i'm using centos 7 and samba-4.15.4
> 
> Thanks for hints
> 
> Juergen
> 
> Am Donnerstag, Januar 20, 2022 15:53 CET, schrieb Sérgio Basto via
> samba <samba at lists.samba.org>:
>  
> > Hi,
> > 
> > copr sergiomb/SambaAD update finished
> > 
> > mock -r epel-7-x86_64 -a
> > https://download.copr.fedorainfracloud.org/results/sergiomb/SambaAD
> > /epel-7-x86_64/
> > install "pkgconfig(gnutls) >= 3.5"
> > 
> > installs compat-gnutls37-devel.x86_64
> > 
> > any feedback is welcome
> > 
> > Best regards,
> > 
> > On Mon, 2022-01-17 at 14:50 +0000, Sérgio Basto wrote:
> > > Hi, added contacts from previous thread (back to 2020 )
> > >
> > > as requested I will update sergiomb/SambaAD with compat-gnutls
> > 3.7.2
> > > and his dependencies.
> > >
> > > Hopefully was just follow c9-beta [1] .
> > >
> > > Centos 9 is just a continuation of Centos 8 , but now Centos will
> > be
> > > ahead of RHEL, i.e., first will came out centos 9 stream and just
> > after
> > > RHEL 9 , that is why the release number was bumped. AFAIU
> > >  
> > > [1]
> > > https://git.centos.org/rpms/nettle/tree/c9-beta
> > > https://git.centos.org/rpms/gnutls/tree/c9-beta
> > >
> > > On Mon, 2022-01-17 at 14:36 +0100, Volker Lendecke wrote:
> > > > Hi Sérgio,
> > > >
> > > > that looks very good, thanks!
> > > >
> > > > Can you move that to just SambaAD?
> > > >
> > > > Thanks!
> > > >
> > > > Volker
> > > >
> > > > Am Mon, Jan 17, 2022 at 01:13:58AM +0000 schrieb Sérgio Basto:
> > > > > Please test it in SambaAD-testing copr
> > > > >
> > > > > https://copr.fedorainfracloud.org/coprs/sergiomb/SambaAD-
> > testing/
> > > > >  
> > > > > if it is good I will move to SambaAD
> > > > >
> > > > >
> > > > >
> > > > > On Sat, 2022-01-15 at 15:02 +0000, Sérgio Basto wrote:
> > > > > > Checking ...
> > > > > >
> > > > > > On Fri, 2022-01-14 at 11:39 +0100, Volker Lendecke wrote:
> > > > > > > Hi Sergio,
> > > > > > >
> > > > > > > due to
> > > > > > > https://gitlab.com/samba-team/samba/-
> > /merge_requests/2327 and
> > > > > > > the fix in
> > > > > > > https://gitlab.com/gnutls/gnutls/-/merge_requests/1396
> > > > > > > we're considering to require gnutls 3.7.2 to build Samba
> > on
> > > > > > > RHEL7. As
> > > > > > > we're using your copr repo in our gitlab CI
> > infrastructure, it
> > > > > > > would
> > > > > > > be great if we could get 3.7.2 in copr. Would that be
> > possible?
> > > > > > >
> > > > > > > Thanks,
> > > > > > >
> > > > > > > Volker
> > > > > >
> > > > >
> > > > > --
> > > > > Sérgio M. B.
> > > > >
> > >
> > 
> > --
> > Sérgio M. B.
> > 
> > 
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions: https://lists.samba.org/mailman/options/samba
>   

-- 
Sérgio M. B.