Menu
▾
▴
Re: [Cosign-discuss] Installing Cosign on Mac OSX 10.11 Server with SIP disabled
|
From: Steve M. <ma...@um...> - 2016-09-03 23:36:10
|
I know 10.11 has a slightly different version of ssl than 10.10, but it’s in the same location:
10.10.5 (current build):
tts10:cosign-3.2.0 root# which openssl
/usr/bin/openssl
tts10:cosign-3.2.0 root# openssl version
OpenSSL 0.9.8zg 14 July 2015
10.11.6 (current build):
tts11:include root# which openssl
/usr/bin/openssl
tts11:include root# openssl version
OpenSSL 0.9.8zh 14 Jan 2016
I hate to just dump log files, but this is what config.log gives me when I try this (as I don’t know what to look for where in all honesty — it’s been almost 2 years since I’ve done anything with cosign…):
spy:cosign-3.2.0 root# cat config.log
This file contains any messages produced by compilers while
running configure, to aid debugging if configure makes a mistake.
It was created by cosign configure 3.2.0, which was
generated by GNU Autoconf 2.61. Invocation command line was
$ ./configure --enable-apache2=/usr/sbin/apxs --enable-krb --with-gss
## --------- ##
## Platform. ##
## --------- ##
hostname = (REDACTED)
uname -m = x86_64
uname -r = 15.6.0
uname -s = Darwin
uname -v = Darwin Kernel Version 15.6.0: Mon Aug 29 20:21:34 PDT 2016; root:xnu-3248.60.11~1/RELEASE_X86_64
/usr/bin/uname -p = i386
/bin/uname -X = unknown
/bin/arch = unknown
/usr/bin/arch -k = unknown
/usr/convex/getsysinfo = unknown
/usr/bin/hostinfo = Mach kernel version:
Darwin Kernel Version 15.6.0: Mon Aug 29 20:21:34 PDT 2016; root:xnu-3248.60.11~1/RELEASE_X86_64
Kernel configured for up to 4 processors.
4 processors are physically available.
4 processors are logically available.
Processor type: i486 (Intel 80486)
Processors active: 0 1 2 3
Primary memory available: 8.00 gigabytes
Default processor set: 246 tasks, 853 threads, 4 processors
Load average: 1.19, Mach factor: 2.79
/bin/machine = unknown
/usr/bin/oslevel = unknown
/bin/universe = unknown
PATH: /usr/local/bin
PATH: /usr/bin
PATH: /bin
PATH: /usr/sbin
PATH: /sbin
PATH: /Applications/Server.app/Contents/ServerRoot/usr/bin
PATH: /Applications/Server.app/Contents/ServerRoot/usr/sbin
## ----------- ##
## Core tests. ##
## ----------- ##
configure:1802: checking for gawk
configure:1832: result: no
configure:1802: checking for mawk
configure:1832: result: no
configure:1802: checking for nawk
configure:1832: result: no
configure:1802: checking for awk
configure:1818: found /usr/bin/awk
configure:1829: result: awk
configure:1888: checking for gcc
configure:1904: found /usr/bin/gcc
configure:1915: result: gcc
configure:2153: checking for C compiler version
configure:2160: gcc --version >&5
Configured with: --prefix=/Applications/Xcode.app/Contents/Developer/usr --with-gxx-include-dir=/usr/include/c++/4.2.1
Apple LLVM version 7.3.0 (clang-703.0.31)
Target: x86_64-apple-darwin15.6.0
Thread model: posix
InstalledDir: /Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin
configure:2163: $? = 0
configure:2170: gcc -v >&5
Configured with: --prefix=/Applications/Xcode.app/Contents/Developer/usr --with-gxx-include-dir=/usr/include/c++/4.2.1
Apple LLVM version 7.3.0 (clang-703.0.31)
Target: x86_64-apple-darwin15.6.0
Thread model: posix
InstalledDir: /Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin
configure:2173: $? = 0
configure:2180: gcc -V >&5
clang: error: argument to '-V' is missing (expected 1 value)
clang: error: no input files
configure:2183: $? = 1
configure:2206: checking for C compiler default output file name
configure:2233: gcc conftest.c >&5
configure:2236: $? = 0
configure:2274: result: a.out
configure:2291: checking whether the C compiler works
configure:2301: ./a.out
configure:2304: $? = 0
configure:2321: result: yes
configure:2328: checking whether we are cross compiling
configure:2330: result: no
configure:2333: checking for suffix of executables
configure:2340: gcc -o conftest conftest.c >&5
configure:2343: $? = 0
configure:2367: result:
configure:2373: checking for suffix of object files
configure:2399: gcc -c conftest.c >&5
configure:2402: $? = 0
configure:2425: result: o
configure:2429: checking whether we are using the GNU C compiler
configure:2458: gcc -c conftest.c >&5
configure:2464: $? = 0
configure:2481: result: yes
configure:2486: checking whether gcc accepts -g
configure:2516: gcc -c -g conftest.c >&5
configure:2522: $? = 0
configure:2621: result: yes
configure:2638: checking for gcc option to accept ISO C89
configure:2712: gcc -c -g -O2 conftest.c >&5
configure:2718: $? = 0
configure:2741: result: none needed
configure:2803: checking for a BSD-compatible install
configure:2859: result: /usr/bin/install -c
configure:2877: checking build system type
configure:2895: result: i686-apple-darwin15.6.0
configure:2917: checking host system type
configure:2932: result: i686-apple-darwin15.6.0
configure:2958: checking for inet_ntoa in -lnsl
configure:2993: gcc -o conftest -g -O2 conftest.c -lnsl >&5
ld: library not found for -lnsl
clang: error: linker command failed with exit code 1 (use -v to see invocation)
configure:2999: $? = 1
configure: failed program was:
| /* confdefs.h. */
| #define PACKAGE_NAME "cosign"
| #define PACKAGE_TARNAME "cosign"
| #define PACKAGE_VERSION "3.2.0"
| #define PACKAGE_STRING "cosign 3.2.0"
| #define PACKAGE_BUGREPORT "co...@um..."
| /* end confdefs.h. */
|
| /* Override any GCC internal prototype to avoid an error.
| Use char because int might match the return type of a GCC
| builtin and then its argument prototype would still apply. */
| #ifdef __cplusplus
| extern "C"
| #endif
| char inet_ntoa ();
| int
| main ()
| {
| return inet_ntoa ();
| ;
| return 0;
| }
configure:3017: result: no
configure:3029: checking for socket in -lsocket
configure:3064: gcc -o conftest -g -O2 conftest.c -lsocket >&5
ld: library not found for -lsocket
clang: error: linker command failed with exit code 1 (use -v to see invocation)
configure:3070: $? = 1
configure: failed program was:
| /* confdefs.h. */
| #define PACKAGE_NAME "cosign"
| #define PACKAGE_TARNAME "cosign"
| #define PACKAGE_VERSION "3.2.0"
| #define PACKAGE_STRING "cosign 3.2.0"
| #define PACKAGE_BUGREPORT "co...@um..."
| /* end confdefs.h. */
|
| /* Override any GCC internal prototype to avoid an error.
| Use char because int might match the return type of a GCC
| builtin and then its argument prototype would still apply. */
| #ifdef __cplusplus
| extern "C"
| #endif
| char socket ();
| int
| main ()
| {
| return socket ();
| ;
| return 0;
| }
configure:3088: result: no
configure:3138: result: apache 1.3 not enabled
configure:3146: checking for apache 2
configure:3194: result: apache 2 filter will be built
configure:3247: result: lighttpd not enabled
configure:3255: checking for krb
configure:3308: result: Kerberos found at /usr
configure:3367: result: mysql not enabled
configure:3376: checking for gss
configure:3393: result: /usr
configure:3563: checking for ssl
configure:3592: error: cannot find ssl libraries
## ---------------- ##
## Cache variables. ##
## ---------------- ##
ac_cv_build=i686-apple-darwin15.6.0
ac_cv_c_compiler_gnu=yes
ac_cv_env_CC_set=
ac_cv_env_CC_value=
ac_cv_env_CFLAGS_set=
ac_cv_env_CFLAGS_value=
ac_cv_env_CPPFLAGS_set=
ac_cv_env_CPPFLAGS_value=
ac_cv_env_CPP_set=
ac_cv_env_CPP_value=
ac_cv_env_LDFLAGS_set=
ac_cv_env_LDFLAGS_value=
ac_cv_env_LIBS_set=
ac_cv_env_LIBS_value=
ac_cv_env_build_alias_set=
ac_cv_env_build_alias_value=
ac_cv_env_host_alias_set=
ac_cv_env_host_alias_value=
ac_cv_env_target_alias_set=
ac_cv_env_target_alias_value=
ac_cv_host=i686-apple-darwin15.6.0
ac_cv_lib_nsl_inet_ntoa=no
ac_cv_lib_socket_socket=no
ac_cv_objext=o
ac_cv_path_apxs2=/usr/sbin/apxs
ac_cv_path_install='/usr/bin/install -c'
ac_cv_path_krb=/usr
ac_cv_prog_AWK=awk
ac_cv_prog_ac_ct_CC=gcc
ac_cv_prog_cc_c89=
ac_cv_prog_cc_g=yes
## ----------------- ##
## Output variables. ##
## ----------------- ##
ADDLDFLAGS=''
ADDLIBS=''
APACHECTL2='/usr/sbin/apachectl'
APACHECTL=''
APXS2='/usr/sbin/apxs'
APXS=''
AWK='awk'
CC='gcc'
CFLAGS='-g -O2'
CPP=''
CPPFLAGS=''
DEFS=''
ECHO_C='ECHO_N=''
ECHO_T=''
EGREP=''
EXEEXT=''
FILTERS=' filters/apache2'
FILTER_COMPILER_OPTS=''
FILTER_LINKER_OPTS=''
GREP=''
GSSINC='-I/usr/include'
GSSLDFLAGS='-L/usr/lib'
GSSLIBS='-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err'
INSTALL_DATA='${INSTALL} -m 644'
INSTALL_PROGRAM='${INSTALL}'
INSTALL_SCRIPT='${INSTALL}'
KINC='-I/usr/include'
KLDFLAGS='-L/usr/lib'
KLIBS='-lkrb5 -lk5crypto -lcom_err'
KRBCGI='cosign.cgi'
LDFLAGS=''
LIBOBJS=''
LIBS=''
LIGHTTPD_COSIGN_SRCDIR=''
LTLIBOBJS=''
MYSQLINC=''
MYSQLLDFLAGS=''
MYSQLLIBS=''
OBJEXT='o'
OPTOPTS=''
PACKAGE_BUGREPORT='co...@um...'
PACKAGE_NAME='cosign'
PACKAGE_STRING='cosign 3.2.0'
PACKAGE_TARNAME='cosign'
PACKAGE_VERSION='3.2.0'
PATH_SEPARATOR=':'
SHELL='/bin/sh'
UNIVERSAL_OPTOPTS=''
ac_ct_CC='gcc'
bindir='${exec_prefix}/bin'
build='i686-apple-darwin15.6.0'
build_alias=''
build_cpu='i686'
build_os='darwin15.6.0'
build_vendor='apple'
cosigncadir='/var/cosign/certs/CA'
cosigncert='/var/cosign/certs/cert.pem'
cosignconf='/usr/local/etc/cosign.conf'
cosigndb='/var/cosign/daemon'
cosignhost='cosign.example.edu'
cosignkey='/var/cosign/certs/key.pem'
cosignlogoutregex='http://.+\.example\.edu'
cosignlogouturl='http://cosign.example.edu'
cosignloopurl='http://cosign.example.edu/looping.html'
datadir='${datarootdir}'
datarootdir='${prefix}/share'
docdir='${datarootdir}/doc/${PACKAGE_TARNAME}'
dvidir='${docdir}'
exec_prefix='NONE'
filterdb='/var/cosign/filter'
frienddbhost='localhost'
frienddblogin='friend'
frienddbpasswd=''
host='i686-apple-darwin15.6.0'
host_alias=''
host_cpu='i686'
host_os='darwin15.6.0'
host_vendor='apple'
htmldir='${docdir}'
includedir='${prefix}/include'
infodir='${datarootdir}/info'
keytabpath=''
libdir='${exec_prefix}/lib'
libexecdir='${exec_prefix}/libexec'
localedir='${datarootdir}/locale'
localstatedir='${prefix}/var'
mandir='${datarootdir}/man'
oldincludedir='/usr/include'
pdfdir='${docdir}'
prefix='NONE'
program_transform_name='s,x,x,'
proxydb='/var/cosign/proxy'
psdir='${docdir}'
sbindir='${exec_prefix}/sbin'
sharedstatedir='${prefix}/com'
subdirs=''
sysconfdir='${prefix}/etc'
target_alias=''
ticketcache='/ticket'
## ----------- ##
## confdefs.h. ##
## ----------- ##
#define PACKAGE_NAME "cosign"
#define PACKAGE_TARNAME "cosign"
#define PACKAGE_VERSION "3.2.0"
#define PACKAGE_STRING "cosign 3.2.0"
#define PACKAGE_BUGREPORT "co...@um..."
#define HAVE_AP_REGEX_H 1
#define HAVE_MOD_AUTHZ_HOST 1
#define APACHE2 1
#define KRB 1
#define GSS 1
configure: exit 1
spy:cosign-3.2.0 root#
> On Sep 3, 2016, at 7:17 PM, Liam Hoekenga <li...@um...> wrote:
>
> I think I've had to point it at a MacPorts install of OpenSSL. If you look at config.log, I think the version that comes w OS X may be missing the .h files
>
> Liam
>
> On Friday, September 2, 2016, Steve Maser <ma...@um...> wrote:
> Hey all…
>
> Simple question: what needs to be modified to run “configure” on Mac OSX 10.11?
>
> when I try it with System Integrity Protection *disabled* (using xCode 7.2.1 with the command line tools) and cosign 3.2.0, I get this:
>
> ./configure --enable-apache2=/usr/sbin/apxs --enable-krb --with-gss
> checking for gawk... no
> checking for mawk... no
> checking for nawk... no
> checking for awk... awk
> checking for gcc... gcc
> checking for C compiler default output file name... a.out
> checking whether the C compiler works... yes
> checking whether we are cross compiling... no
> checking for suffix of executables...
> checking for suffix of object files... o
> checking whether we are using the GNU C compiler... yes
> checking whether gcc accepts -g... yes
> checking for gcc option to accept ISO C89... none needed
> checking for a BSD-compatible install... /usr/bin/install -c
> checking build system type... i686-apple-darwin15.6.0
> checking host system type... i686-apple-darwin15.6.0
> checking for inet_ntoa in -lnsl... no
> checking for socket in -lsocket... no
> apache 1.3 not enabled
> checking for apache 2... using apxs2 as '/usr/sbin/apxs'
> apache 2 filter will be built
> lighttpd not enabled
> checking for krb... Kerberos found at /usr
> mysql not enabled
> checking for gss... /usr
> checking for ssl... configure: error: cannot find ssl libraries
>
>
> (trying it with SIP enabled, barely got anywhere…)
>
>
> I tried to search through the archives, but didn’t find anything explicit about this error with the ssl libraries.
>
> Anybody have any suggestions? And if they fixed this part, is there anything additional that needs modifying to make it work on 10.11?
>
> Thanks!
>
> - Steve
>
>
> ------------------------------------------------------------------------------
> _______________________________________________
> Cosign-discuss mailing list
> Cos...@li...
> https://lists.sourceforge.net/lists/listinfo/cosign-discuss
|
