python-ldap-dev — discussion among developers

Re: python-ldap hanging for 15 minutes under certain conditions

[Michael W. <esi...@gm...>]

Hi

On 4 February 2011 17:35, Rich Megginson <ric...@gm...> wrote:
> On 02/03/2011 11:59 PM, Michael Wood wrote:
>>
>> On 4 February 2011 08:32, James Andrewartha<ja...@da...>  wrote:
[...]
>>> Debian uses GnuTLS because OpenSSL has the non-GPL compatible
>>> advertising clause, and libldap is linked into many GPL applications. So
>>
>> Ah, good point.
>>
>>> the solutions are fix the OpenSSL licensing or make GnuTLS not suck; I
>>
>> Or switch to something else.
>
> OpenLDAP 2.4.23 supports Mozilla NSS (triple licensed GPLv2+/LGPLv2+/MPL)
> for crypto
> Fedora 14 and later use this instead of OpenSSL

Interesting.  But co-incidentally, there's a thread currently on the
libcurl mailing list about comparisons between different SSL/TLS libs
that are supported by libcurl.  Howard Chu posted about GnuTLS and
later about NSS.  In the NSS message he said:

"I understand that RedHat is now building their OpenLDAP packages with our
MozNSS support. I don't believe this combination is ready for primetime by any
measure. They still don't even have release quality code for handling PEM
files, and their current experimental code crashes/misbehaves in common (for
OpenSSL) deployment scenarios.

https://bugzilla.mozilla.org/show_bug.cgi?id=402712
https://bugzilla.redhat.com/show_bug.cgi?id=642433"

Here's the link to the message in libcurl's mailing list archive:
http://curl.haxx.se/mail/lib-2011-02/0043.html

-- 
Michael Wood <esi...@gm...>

Re: python-ldap hanging for 15 minutes under certain conditions

[Rich M. <ric...@gm...>]

On 02/04/2011 09:15 AM, Michael Ströder wrote:
> Rich Megginson wrote:
>> OpenLDAP 2.4.23 supports Mozilla NSS (triple licensed
>> GPLv2+/LGPLv2+/MPL) for crypto
>> Fedora 14 and later use this instead of OpenSSL
> I see some benefits using Mozilla NSS especially with LDAP clients. But I
> wonder whether we could use it from python-ldap via OpenLDAP just like Mozilla
> clients use it.
Yes.  I've been using it for a while like that.  For more information: 
http://www.openldap.org/faq/index.cgi?file=1514
> I'm thinking of support for PKCS#11 tokens and adding trusted
> certs.
See the above FAQ - there is some information there about use of tokens 
other than the default builtin softtoken.
> Ciao, Michael.

Re: python-ldap hanging for 15 minutes under certain conditions

[Michael S. <mi...@st...>]

Rich Megginson wrote:
> OpenLDAP 2.4.23 supports Mozilla NSS (triple licensed 
> GPLv2+/LGPLv2+/MPL) for crypto
> Fedora 14 and later use this instead of OpenSSL

I see some benefits using Mozilla NSS especially with LDAP clients. But I
wonder whether we could use it from python-ldap via OpenLDAP just like Mozilla
clients use it. I'm thinking of support for PKCS#11 tokens and adding trusted
certs.

Ciao, Michael.

Re: python-ldap hanging for 15 minutes under certain conditions

[Michael S. <mi...@st...>]

Michael Wood wrote:
> I do hold out some hope that issues like this in GnuTLS (or in
> the software using GnuTLS?) can get fixed, though.

The issues with GnuTLS are known since years now........

I suspect that everybody setting up a serious (Open-)LDAP deployment just
builds with OpenSSL and therefore nobody is using GnuTLS seriously. So nobody
sees a benefit for investing in getting GnuTLS improved.

Ciao, Michael.

Re: python-ldap hanging for 15 minutes under certain conditions

[Rich M. <ric...@gm...>]

On 02/03/2011 11:59 PM, Michael Wood wrote:
> On 4 February 2011 08:32, James Andrewartha<ja...@da...>  wrote:
>> On 04/02/11 03:31, Michael Ströder wrote:
>>> Michael Wood wrote:
>>>> On 3 February 2011 18:16, Rich Megginson<ric...@gm...>  wrote:
>>>>> On 02/03/2011 04:34 AM, Michael Wood wrote:
>>>>>> e.g. Ubuntu Lucid Lynx with libldap2-dev version 2.4.21-0ubuntu5.3 and
>>>>>> python-ldap 2.3.10-1ubuntu1.
>>>> [..]
>>>> But I thought it was worth a try to recompile OpenLDAP and link with
>>>> OpenSSL instead of GnuTLS.
>>>>
>>>> After doing that, the problem went away!
>>> That was my first idea when I read that you're using Ubuntu (based on Debian).
>>> There have been so many issues with OpenLDAP linked with GnuTLS during the
>>> last years. I really wonder why the Debian folks force everybody to use this.
>>> IMO that's a major issue with Debian.
>> Debian uses GnuTLS because OpenSSL has the non-GPL compatible
>> advertising clause, and libldap is linked into many GPL applications. So
> Ah, good point.
>
>> the solutions are fix the OpenSSL licensing or make GnuTLS not suck; I
> Or switch to something else.
OpenLDAP 2.4.23 supports Mozilla NSS (triple licensed 
GPLv2+/LGPLv2+/MPL) for crypto
Fedora 14 and later use this instead of OpenSSL
>> have no hope of either occurring.
> I understand your lack of hope wrt. the licensing situation and I
> suppose switching to another SSL/TLS library is unlikely at this
> point.  I do hold out some hope that issues like this in GnuTLS (or in
> the software using GnuTLS?) can get fixed, though.
>

Re: python-ldap hanging for 15 minutes under certain conditions

[Michael W. <esi...@gm...>]

On 4 February 2011 08:32, James Andrewartha <ja...@da...> wrote:
> On 04/02/11 03:31, Michael Ströder wrote:
>> Michael Wood wrote:
>>> On 3 February 2011 18:16, Rich Megginson <ric...@gm...> wrote:
>>>> On 02/03/2011 04:34 AM, Michael Wood wrote:
>>>>> e.g. Ubuntu Lucid Lynx with libldap2-dev version 2.4.21-0ubuntu5.3 and
>>>>> python-ldap 2.3.10-1ubuntu1.
>>> [..]
>>> But I thought it was worth a try to recompile OpenLDAP and link with
>>> OpenSSL instead of GnuTLS.
>>>
>>> After doing that, the problem went away!
>>
>> That was my first idea when I read that you're using Ubuntu (based on Debian).
>> There have been so many issues with OpenLDAP linked with GnuTLS during the
>> last years. I really wonder why the Debian folks force everybody to use this.
>> IMO that's a major issue with Debian.
>
> Debian uses GnuTLS because OpenSSL has the non-GPL compatible
> advertising clause, and libldap is linked into many GPL applications. So

Ah, good point.

> the solutions are fix the OpenSSL licensing or make GnuTLS not suck; I

Or switch to something else.

> have no hope of either occurring.

I understand your lack of hope wrt. the licensing situation and I
suppose switching to another SSL/TLS library is unlikely at this
point.  I do hold out some hope that issues like this in GnuTLS (or in
the software using GnuTLS?) can get fixed, though.

-- 
Michael Wood <esi...@gm...>

Re: python-ldap hanging for 15 minutes under certain conditions

[James A. <ja...@da...>]

On 04/02/11 03:31, Michael Ströder wrote:
> Michael Wood wrote:
>> On 3 February 2011 18:16, Rich Megginson <ric...@gm...> wrote:
>>> On 02/03/2011 04:34 AM, Michael Wood wrote:
>>>> e.g. Ubuntu Lucid Lynx with libldap2-dev version 2.4.21-0ubuntu5.3 and
>>>> python-ldap 2.3.10-1ubuntu1.
>> [..]
>> But I thought it was worth a try to recompile OpenLDAP and link with
>> OpenSSL instead of GnuTLS.
>>
>> After doing that, the problem went away!
> 
> That was my first idea when I read that you're using Ubuntu (based on Debian).
> There have been so many issues with OpenLDAP linked with GnuTLS during the
> last years. I really wonder why the Debian folks force everybody to use this.
> IMO that's a major issue with Debian.

Debian uses GnuTLS because OpenSSL has the non-GPL compatible
advertising clause, and libldap is linked into many GPL applications. So
the solutions are fix the OpenSSL licensing or make GnuTLS not suck; I
have no hope of either occurring.

James Andrewartha

Re: python-ldap hanging for 15 minutes under certain conditions

[Michael W. <esi...@gm...>]

Hi

2011/2/3 Michael Ströder <mi...@st...>:
> Michael Wood wrote:
>> On 3 February 2011 18:16, Rich Megginson <ric...@gm...> wrote:
>>> On 02/03/2011 04:34 AM, Michael Wood wrote:
>>>> e.g. Ubuntu Lucid Lynx with libldap2-dev version 2.4.21-0ubuntu5.3 and
>>>> python-ldap 2.3.10-1ubuntu1.
>> [..]
>> But I thought it was worth a try to recompile OpenLDAP and link with
>> OpenSSL instead of GnuTLS.
>>
>> After doing that, the problem went away!
>
> That was my first idea when I read that you're using Ubuntu (based on Debian).
> There have been so many issues with OpenLDAP linked with GnuTLS during the
> last years. I really wonder why the Debian folks force everybody to use this.
> IMO that's a major issue with Debian.

OK, well, next time I'll know.

I suppose it's one way to get GnuTLS to improve :)

The strange thing is that ldapsearch on the command line did not have
the same problem.

Thanks.

-- 
Michael Wood <esi...@gm...>

Re: python-ldap hanging for 15 minutes under certain conditions

[Michael S. <mi...@st...>]

Michael Wood wrote:
> On 3 February 2011 18:16, Rich Megginson <ric...@gm...> wrote:
>> On 02/03/2011 04:34 AM, Michael Wood wrote:
>>> e.g. Ubuntu Lucid Lynx with libldap2-dev version 2.4.21-0ubuntu5.3 and
>>> python-ldap 2.3.10-1ubuntu1.
> [..]
> But I thought it was worth a try to recompile OpenLDAP and link with
> OpenSSL instead of GnuTLS.
> 
> After doing that, the problem went away!

That was my first idea when I read that you're using Ubuntu (based on Debian).
There have been so many issues with OpenLDAP linked with GnuTLS during the
last years. I really wonder why the Debian folks force everybody to use this.
IMO that's a major issue with Debian.

Ciao, Michael.

Re: python-ldap hanging for 15 minutes under certain conditions

[Michael W. <esi...@gm...>]

Hi

On 3 February 2011 18:16, Rich Megginson <ric...@gm...> wrote:
> On 02/03/2011 04:34 AM, Michael Wood wrote:
>> Hi
>>
>> I'm trying to do a search against Samba 4's LDAP server and it works,
>> but the bind and search are both successful, everything hangs when I
>> try to unbind from the LDAP server.  If anyone could enlighten me I
>> would be grateful.
>>
>> I've run into the same issue on various different Linux machines with
>> a range of OpenLDAP and python-ldap versions, but it seems to work
>> fine on a Mac running Leopard.
>>
>> e.g. Ubuntu Lucid Lynx with libldap2-dev version 2.4.21-0ubuntu5.3 and
>> python-ldap 2.3.10-1ubuntu1.
>>
>> I've also tried upgrading python-ldap to 2.3.12, but that does not
>> seep to have helped.
> Try enabling ldap debug logging - before the first call to
> ldap.initialize, add this:
> ldap.set_option(ldap.OPT_DEBUG_LEVEL, 1)

Thanks for the suggestion.  I'll give it a try tomorrow.

In the mean time, someone pointed me at this:

http://www.openldap.org/its/index.cgi/Software%20Bugs?id=6673&selectid=6673&usearchives=1

It did not seem to match my situation because it talks about broken
TCP connections: "When a network connection to the LDAP server fails
(is severed with iptables in my set-up)"

But I thought it was worth a try to recompile OpenLDAP and link with
OpenSSL instead of GnuTLS.

After doing that, the problem went away!

So this seems not to have anything to do with python-ldap.

-- 
Michael Wood <esi...@gm...>

Re: python-ldap hanging for 15 minutes under certain conditions

[Rich M. <ric...@gm...>]

On 02/03/2011 04:34 AM, Michael Wood wrote:
> Hi
>
> I'm trying to do a search against Samba 4's LDAP server and it works,
> but the bind and search are both successful, everything hangs when I
> try to unbind from the LDAP server.  If anyone could enlighten me I
> would be grateful.
>
> I've run into the same issue on various different Linux machines with
> a range of OpenLDAP and python-ldap versions, but it seems to work
> fine on a Mac running Leopard.
>
> e.g. Ubuntu Lucid Lynx with libldap2-dev version 2.4.21-0ubuntu5.3 and
> python-ldap 2.3.10-1ubuntu1.
>
> I've also tried upgrading python-ldap to 2.3.12, but that does not
> seep to have helped.
Try enabling ldap debug logging - before the first call to 
ldap.initialize, add this:
ldap.set_option(ldap.OPT_DEBUG_LEVEL, 1)

> def test(username, password):
>      base = "DC=example,DC=com"
>      userbase = "CN=Users," + base
>      userdn = "CN=%s,%s" % (username, userbase)
>      ldap_server = "ldap://example.com"
>      conn = ldap.initialize(ldap_server)
>      conn.set_option(ldap.OPT_REFERRALS, 0) # Doesn't appear to make a difference
>      conn.start_tls_s()
>      try:
>          conn.simple_bind_s(userdn, password)
>          logging.debug("Bind succeeded for '%s'", username)
>      except ldap.LDAPError, e:
>          logging.warn("Authentication failed for '%s'", username)
>          return False
>      res = conn.search_s("CN=Some Group,CN=Users,DC=bluebird,DC=co,DC=za",
>                          ldap.SCOPE_BASE, filterstr="(member=%s)" % userdn,
>                          attrlist=["member"])
>      if len(res) != 1:
>          logging.debug("User '%s' is not in the Some Group group", username)
>          conn.unbind()
>          return False
>      logging.debug("User '%s' appears to be in the Some Group group", username)
>      conn.unbind() #<- hangs here for 15 minutes.
>      logging.debug("Unbound.")
>      return True
>

python-ldap hanging for 15 minutes under certain conditions

[Michael W. <esi...@gm...>]

Hi

I'm trying to do a search against Samba 4's LDAP server and it works,
but the bind and search are both successful, everything hangs when I
try to unbind from the LDAP server.  If anyone could enlighten me I
would be grateful.

I've run into the same issue on various different Linux machines with
a range of OpenLDAP and python-ldap versions, but it seems to work
fine on a Mac running Leopard.

e.g. Ubuntu Lucid Lynx with libldap2-dev version 2.4.21-0ubuntu5.3 and
python-ldap 2.3.10-1ubuntu1.

I've also tried upgrading python-ldap to 2.3.12, but that does not
seep to have helped.

def test(username, password):
    base = "DC=example,DC=com"
    userbase = "CN=Users," + base
    userdn = "CN=%s,%s" % (username, userbase)
    ldap_server = "ldap://example.com"
    conn = ldap.initialize(ldap_server)
    conn.set_option(ldap.OPT_REFERRALS, 0) # Doesn't appear to make a difference
    conn.start_tls_s()
    try:
        conn.simple_bind_s(userdn, password)
        logging.debug("Bind succeeded for '%s'", username)
    except ldap.LDAPError, e:
        logging.warn("Authentication failed for '%s'", username)
        return False
    res = conn.search_s("CN=Some Group,CN=Users,DC=bluebird,DC=co,DC=za",
                        ldap.SCOPE_BASE, filterstr="(member=%s)" % userdn,
                        attrlist=["member"])
    if len(res) != 1:
        logging.debug("User '%s' is not in the Some Group group", username)
        conn.unbind()
        return False
    logging.debug("User '%s' appears to be in the Some Group group", username)
    conn.unbind() # <- hangs here for 15 minutes.
    logging.debug("Unbound.")
    return True

-- 
Michael Wood <esi...@gm...>

Re: How to find groups(CN) which contains specific words?

[Michael S. <mi...@st...>]

Zhang Huangbin wrote:
> On Nov 15, 2010, at 1:16 PM, Jahidul Hasan wrote:
>> I need to find those groups name which contains the word "ABC", is it
>> possible ?
>>
>> base_dn = 'CN=ABC,OU=Common,DC=test,DC=com'
>> ldapConn.search_s(base_dn, ldap.SCOPE_SUBTREE)
>>
>> Can I use %ABC% ?

Not in base_dn.

> LDAP search filter can be wild-card, use '*ABC*' instead.
> 
> Reference: http://www.zytrax.com/books/ldap/apa/search.html

The code snippet of the original poster above does not contain a search filter
at all. So additionally he should read:

http://www.python-ldap.org/doc/html/ldap.html#ldap.LDAPObject.search

ldapConn.search_s(base_dn, ldap.SCOPE_SUBTREE,filterstr='cn=*abc*')

Ciao, Michael.

Re: How to find groups(CN) which contains specific words?

[Zhang H. <zhb...@gm...>]

On Nov 15, 2010, at 1:16 PM, Jahidul Hasan wrote:

> I need to find those groups name which contains the word "ABC", is it
> possible ?
> 
> base_dn = 'CN=ABC,OU=Common,DC=test,DC=com'
> ldapConn.search_s(base_dn, ldap.SCOPE_SUBTREE)
> 
> Can I use %ABC% ?

LDAP search filter can be wild-card, use '*ABC*' instead.

Reference: http://www.zytrax.com/books/ldap/apa/search.html

-- 
Zhang Huangbin

- Open Source Mail Server Solution for Red Hat(R) Enterprise Linux,
  CentOS, Debian, Ubuntu, OpenSuSE, FreeBSD: http://www.iredmail.org/

Re: How to find groups(CN) which contains specific words?

[Michele M. <mic...@ma...>]

Hello Jahid

try with "(cn=*abc*)". This works fine with ldapsearch.

Kind regards,
Michele


On Nov 15, 2010, at 6:16 , Jahidul Hasan wrote:

> Hi
> 
> I need to find those groups name which contains the word "ABC", is it
> possible ?
> 
> base_dn = 'CN=ABC,OU=Common,DC=test,DC=com'
> ldapConn.search_s(base_dn, ldap.SCOPE_SUBTREE)
> 
> Can I use %ABC% ?
> 
> Regards
> Jahid
> 
> 
> ------------------------------------------------------------------------------
> Lotusphere 2011
> Register now for Lotusphere 2011 and learn how
> to connect the dots, take your collaborative environment
> to the next level, and enter the era of Social Business.
> http://p.sf.net/sfu/lotusphere-d2d
> _______________________________________________
> Python-LDAP-dev mailing list
> Pyt...@li...
> https://lists.sourceforge.net/lists/listinfo/python-ldap-dev
> 

-- 
ETH Zürich
Michele Marcionelli
IT Support Gruppe D-MATH
HG G 32.1
Rämistrasse 101
CH–8092 Zürich

mic...@ma...
http://www.math.ethz.ch/~michele

+41 44 632 6193 Telefon
+41 44 632 1354 Fax

LDAP attribute syntaxes to python data types conversion

[Vitaliy P. <vit...@gm...>]

Hi,

LDAP natively supports a lot of different types of syntaxes for it's attributes
in schemas, like syntaxes for strings, booleans, dates, integers, numbers,
etc... But python-ldap queries always return utf-8 encoded strings for any type
of ldap attribute syntax.

So this way in my application to properly handle, for example, boolean ldap
attribute syntax I'm usually doing:

    if ldap_value == 'TRUE':
        value = True
    elif ldap_value == 'FALSE'
        value = False

I'm pretty new to LDAP development so don't know a lot about it's history and
design decisions made during it's development. So I'm just wondering why
python-ldap doesn't benefit from those LDAP attribute syntax definitions and
performs conversion to python data types when possible but always returns
strings.

Was this discussed previously? I can't google any relevant information on this
topic. Any hints, links, suggestions, insights will be highly appreciated!

Regards,
Vitaliy Podoba

How to find groups(CN) which contains specific words?

[Jahidul H. <jah...@bj...>]

Hi

I need to find those groups name which contains the word "ABC", is it
possible ?

base_dn = 'CN=ABC,OU=Common,DC=test,DC=com'
ldapConn.search_s(base_dn, ldap.SCOPE_SUBTREE)

Can I use %ABC% ?

Regards
Jahid

Can't install python-ldap from pypi.python.org

[Zhang H. <zhb...@gm...>]

Hi, developers.

I can't install python-ldap from pypi.python.org, will you consider fixing it?

First of all, there's a compile issue with py-ldap-2.3.12 on RHEL/CentOS 5.x:
http://marc.info/?t=128152313400002&r=1&w=2

Old versions are not available:

#---<---
# easy_install python-ldap==2.3.11
Searching for python-ldap==2.3.11
Reading http://cheeseshop.python.org/pypi/python-ldap/
Reading http://www.python-ldap.org/
Reading http://cheeseshop.python.org/pypi/python-ldap/2.3.12
No local packages or download links found for python-ldap==2.3.11
error: Could not find suitable distribution for Requirement.parse('python-ldap==2.3.11')


# easy_install python-ldap==2.3.10
Searching for python-ldap==2.3.10
Reading http://cheeseshop.python.org/pypi/python-ldap/
Reading http://www.python-ldap.org/
Reading http://cheeseshop.python.org/pypi/python-ldap/2.3.12
No local packages or download links found for python-ldap==2.3.10
error: Could not find suitable distribution for Requirement.parse('python-ldap==2.3.10')


# easy_install python-ldap==2.3.9
Searching for python-ldap==2.3.9
Reading http://cheeseshop.python.org/pypi/python-ldap/
Reading http://www.python-ldap.org/
Reading http://cheeseshop.python.org/pypi/python-ldap/2.3.12
No local packages or download links found for python-ldap==2.3.9
error: Could not find suitable distribution for Requirement.parse('python-ldap==2.3.9')
#---<---

Re: AIX 6.1 install trouble.

[Chris D. <pak...@gm...>]

Tom,

I'm now going to assume that you don't actually know anything about linkers
or shared libraries, nor about reading error messages to gain more detail
debugging.

The -Wl,-bnoquiet came from actually reading your error output and seeing
ld: 0711-345 Use the -bloadmap or -bnoquiet option to obtain more
information.
collect2: ld returned 8 exit status

Since you rolled your own libldap_r, I have zero idea which libraries it was
linked against.

Look through that gcc output and look for your ldap library.
You'll see a line like
(ld): lib /usr/local/lib/libldap_r.a

Now see what is in that .a file
ar t that_dot_a_file

Now extract the shared object from that .a file
ar x that_dot_a_file that_object_file

Now see what libraries that shared object was linked against.
ldd that_object_file

And you're going to see something vaguely like
         /usr/lib/libs.a(shr.o)
         /usr/lib/libpthread.a(shr_xpg5.o)
         /opt/freeware/lib/liblber.a(liblber-2.4.so.2)
         /opt/freeware/lib/libssl.a(libssl.so.0.9.8)
         /opt/freeware/lib/libcrypto.a(libcrypto.so.0.9.8)
         /unix
         /usr/lib/libcrypt.a(shr.o)
         /usr/lib/libc.a(shr.o)
         /usr/lib/libpthreads.a(shr_comm.o)
         /usr/lib/libc.a(shr_64.o)
         /usr/lib/libpthreads.a(shr_xpg5_64.o)
         /usr/lib/libcrypt.a(shr_64.o)

Of interest, libcrypto.a.  You don't have 'crypto' in your libs stanza in
setup.cfg (It's in the default one), so it would fail with the libldap_r.a
that I have on my system.

If you built cyrus-sasl and put it into /usr/local/lib, it'll later complain
due to a lack of sasl2 in the libs as well.


On Thu, Sep 30, 2010 at 3:38 PM, Tom Baxter <tk...@gm...> wrote:

>  Thank you both for the quick reply. I changed my setup.cfg to
> include openssl see below. I also verified that the IBM openssl
> package was installed. Attached is the output from the single gcc
> call.
>
> lslpp -L | grep ssl
>  openssl.base            0.9.8.1100    C     F    Open Secure Socket Layer
>  openssl.man.en_US       0.9.8.1100    C     F    Open Secure Socket Layer
>
> --------------------------------
>
> [_ldap]
> extra_objects =
> extra_compile_args =
> libs = ldap_r lber ssl
> library_dirs = /usr/local/lib /usr/lib
> include_dirs = /usr/local/include /usr/include/openssl
>
> [egg_info]
> tag_build =
> tag_date = 0
> tag_svn_revision = 0
>
> [install]
> compile = 1
> optimize = 1
>
> [bdist_rpm]
> doc_files = CHANGES README INSTALL TODO Demo/
> provides = python-ldap
> release = 0
> packager = Michael Stroeder <mi...@st...>
> requires = python libldap.so.2
>
> ---------------------------
>
> On Thu, Sep 30, 2010 at 2:23 PM, Chris Dukes <pak...@gm...> wrote:
> > Manually rerun that last 'gcc' with a -Wl,-bnoquiet added to see the
> source
> > of the objects depending on SSL symbols.
> > I suspect that your ldap library is linked against OpenSSL.  I recommend
> > installing either IBM's LPP of OpenSSL, or the RPM from www.perzl.org
> >
> > Here is the spec file I used to build python-ldap 2.3.10 back in March on
> > AIX 5.3.
> > http://zeniv.linux.org.uk/~pakrat/python-ldap-2.3.10-1.fc13aix53.spec<http://zeniv.linux.org.uk/%7Epakrat/python-ldap-2.3.10-1.fc13aix53.spec>
> > This was added to the contents of the source RPM for python-ldap taken
> from
> > Fedora 13.
> > This was done with Visual Age 'C' and 'C++' 10.1.0.0
> > I provided build requirements, including python, from
> > http://www.perzl.org/aix/
> > Unfortunately, I did not build the OpenLDAP RPM I used and cannot provide
> > you the binary RPM.
> > You can try using the openldap spec file from
> > ftp://public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/SPECS/
> > in combination with the source and patches from current Fedora as a
> starting
> > point for building OpenLDAP.
> >
> >
> > On Thu, Sep 30, 2010 at 1:19 PM, Tom Baxter <tk...@gm...> wrote:
> >>
> >>   Hello, I am having trouble install python-ldap on an AIX 6.1 host. I
> >> have compiled the openldap libraries and am trying to install without
> any
> >> extras like SSL/crypt. Below is my setup.cfg, attached is the out put
> from
> >> "python setup.py build".
> >>   Any guidance would be greatly appreciated.
> >>
> >>   Thanks, Tom Baxter
> >>
> >> ---------------
> >> [_ldap]
> >> extra_objects =
> >> extra_compile_args =
> >> libs = ldap_r lber
> >> library_dirs = /usr/local/lib
> >> include_dirs = /usr/local/include
> >>
> >> [egg_info]
> >> tag_build =
> >> tag_date = 0
> >> tag_svn_revision = 0
> >>
> >> [install]
> >> compile = 1
> >> optimize = 1
> >>
> >> [bdist_rpm]
> >> doc_files = CHANGES README INSTALL TODO Demo/
> >> provides = python-ldap
> >> release = 0
> >> packager = Michael Stroeder <mi...@st...>
> >> requires = python libldap.so.2
> >>
> >>
> >>
> >>
> ------------------------------------------------------------------------------
> >> Start uncovering the many advantages of virtual appliances
> >> and start using them to simplify application deployment and
> >> accelerate your shift to cloud computing.
> >> http://p.sf.net/sfu/novell-sfdev2dev
> >> _______________________________________________
> >> Python-LDAP-dev mailing list
> >> Pyt...@li...
> >> https://lists.sourceforge.net/lists/listinfo/python-ldap-dev
> >>
> >
> >
>

Re: AIX 6.1 install trouble.

[Michael S. <mi...@st...>]

Tom Baxter wrote:
>   Thank you both for the quick reply. I changed my setup.cfg to
> include openssl see below. I also verified that the IBM openssl
> package was installed. Attached is the output from the single gcc
> call.

As said I don't have any experience building on AIX. But from my understanding
you should link to the very same OpenSSL lib with which OpenLDAP client libs
were linked to.

> libs = ldap_r lber ssl

Maybe 'crypto' is missing here. See setup.cfg shipped in the source
distribution and here:

http://www.python-ldap.org/doc/html/installing.html#libs-used

Ciao, Michael.

Re: AIX 6.1 install trouble.

[Tom B. <tk...@gm...>]

  Thank you both for the quick reply. I changed my setup.cfg to
include openssl see below. I also verified that the IBM openssl
package was installed. Attached is the output from the single gcc
call.

lslpp -L | grep ssl
  openssl.base            0.9.8.1100    C     F    Open Secure Socket Layer
  openssl.man.en_US       0.9.8.1100    C     F    Open Secure Socket Layer

--------------------------------

[_ldap]
extra_objects =
extra_compile_args =
libs = ldap_r lber ssl
library_dirs = /usr/local/lib /usr/lib
include_dirs = /usr/local/include /usr/include/openssl

[egg_info]
tag_build =
tag_date = 0
tag_svn_revision = 0

[install]
compile = 1
optimize = 1

[bdist_rpm]
doc_files = CHANGES README INSTALL TODO Demo/
provides = python-ldap
release = 0
packager = Michael Stroeder <mi...@st...>
requires = python libldap.so.2

---------------------------

On Thu, Sep 30, 2010 at 2:23 PM, Chris Dukes <pak...@gm...> wrote:
> Manually rerun that last 'gcc' with a -Wl,-bnoquiet added to see the source
> of the objects depending on SSL symbols.
> I suspect that your ldap library is linked against OpenSSL.  I recommend
> installing either IBM's LPP of OpenSSL, or the RPM from www.perzl.org
>
> Here is the spec file I used to build python-ldap 2.3.10 back in March on
> AIX 5.3.
> http://zeniv.linux.org.uk/~pakrat/python-ldap-2.3.10-1.fc13aix53.spec
> This was added to the contents of the source RPM for python-ldap taken from
> Fedora 13.
> This was done with Visual Age 'C' and 'C++' 10.1.0.0
> I provided build requirements, including python, from
> http://www.perzl.org/aix/
> Unfortunately, I did not build the OpenLDAP RPM I used and cannot provide
> you the binary RPM.
> You can try using the openldap spec file from
> ftp://public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/SPECS/
> in combination with the source and patches from current Fedora as a starting
> point for building OpenLDAP.
>
>
> On Thu, Sep 30, 2010 at 1:19 PM, Tom Baxter <tk...@gm...> wrote:
>>
>>   Hello, I am having trouble install python-ldap on an AIX 6.1 host. I
>> have compiled the openldap libraries and am trying to install without any
>> extras like SSL/crypt. Below is my setup.cfg, attached is the out put from
>> "python setup.py build".
>>   Any guidance would be greatly appreciated.
>>
>>   Thanks, Tom Baxter
>>
>> ---------------
>> [_ldap]
>> extra_objects =
>> extra_compile_args =
>> libs = ldap_r lber
>> library_dirs = /usr/local/lib
>> include_dirs = /usr/local/include
>>
>> [egg_info]
>> tag_build =
>> tag_date = 0
>> tag_svn_revision = 0
>>
>> [install]
>> compile = 1
>> optimize = 1
>>
>> [bdist_rpm]
>> doc_files = CHANGES README INSTALL TODO Demo/
>> provides = python-ldap
>> release = 0
>> packager = Michael Stroeder <mi...@st...>
>> requires = python libldap.so.2
>>
>>
>>
>> ------------------------------------------------------------------------------
>> Start uncovering the many advantages of virtual appliances
>> and start using them to simplify application deployment and
>> accelerate your shift to cloud computing.
>> http://p.sf.net/sfu/novell-sfdev2dev
>> _______________________________________________
>> Python-LDAP-dev mailing list
>> Pyt...@li...
>> https://lists.sourceforge.net/lists/listinfo/python-ldap-dev
>>
>
>

Re: AIX 6.1 install trouble.

[Chris D. <pak...@gm...>]

Manually rerun that last 'gcc' with a -Wl,-bnoquiet added to see the source
of the objects depending on SSL symbols.
I suspect that your ldap library is linked against OpenSSL.  I recommend
installing either IBM's LPP of OpenSSL, or the RPM from www.perzl.org

Here is the spec file I used to build python-ldap 2.3.10 back in March on
AIX 5.3.
http://zeniv.linux.org.uk/~pakrat/python-ldap-2.3.10-1.fc13aix53.spec
This was added to the contents of the source RPM for python-ldap taken from
Fedora 13.
This was done with Visual Age 'C' and 'C++' 10.1.0.0
I provided build requirements, including python, from
http://www.perzl.org/aix/
Unfortunately, I did not build the OpenLDAP RPM I used and cannot provide
you the binary RPM.
You can try using the openldap spec file from
ftp://public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/SPECS/
in combination with the source and patches from current Fedora as a starting
point for building OpenLDAP.


On Thu, Sep 30, 2010 at 1:19 PM, Tom Baxter <tk...@gm...> wrote:

>   Hello, I am having trouble install python-ldap on an AIX 6.1 host. I have
> compiled the openldap libraries and am trying to install without any extras
> like SSL/crypt. Below is my setup.cfg, attached is the out put from "python
> setup.py build".
>   Any guidance would be greatly appreciated.
>
>   Thanks, Tom Baxter
>
> ---------------
> [_ldap]
> extra_objects =
> extra_compile_args =
> libs = ldap_r lber
> library_dirs = /usr/local/lib
> include_dirs = /usr/local/include
>
> [egg_info]
> tag_build =
> tag_date = 0
> tag_svn_revision = 0
>
> [install]
> compile = 1
> optimize = 1
>
> [bdist_rpm]
> doc_files = CHANGES README INSTALL TODO Demo/
> provides = python-ldap
> release = 0
> packager = Michael Stroeder <mi...@st...>
> requires = python libldap.so.2
>
>
>
> ------------------------------------------------------------------------------
> Start uncovering the many advantages of virtual appliances
> and start using them to simplify application deployment and
> accelerate your shift to cloud computing.
> http://p.sf.net/sfu/novell-sfdev2dev
> _______________________________________________
> Python-LDAP-dev mailing list
> Pyt...@li...
> https://lists.sourceforge.net/lists/listinfo/python-ldap-dev
>
>

Re: AIX 6.1 install trouble.

[Michael S. <mi...@st...>]

Tom Baxter wrote:
>   Hello, I am having trouble install python-ldap on an AIX 6.1 host. I
> have compiled the openldap libraries and am trying to install without
> any extras like SSL/crypt. Below is my setup.cfg, attached is the out
> put from "python setup.py build".
>   Any guidance would be greatly appreciated.

I'm not familiar with AIX. But it seems linking OpenSSL fails. Make sure the
OpenSSL include files and (shared) libs are also in here:

> library_dirs = /usr/local/lib
> include_dirs = /usr/local/include

Note that you can list several directories separated by a space char.

Ciao, Michael.

Re: Installing python-ldap 2.3.12 fails

[Michael S. <mi...@st...>]

Adam Tauno Williams wrote:
> When I install the most recent python-ldap on my CentOS5 box (which has
> Python2.6 from IUS) it fails.  Previously I was able to install
> python-ldap on a similarly provisioned host.

Hmm, known problem...(see below)

Ciao, Michael.

-------- Original Message --------
Subject: Re: python-ldap-2.3.12: Compile error on CentOS 5.5, i386
Date: Wed, 11 Aug 2010 20:42:56 +0200
From: Michael Ströder <mi...@st...>
To: Zhang Huangbin <zhb...@gm...>
CC: Python Developer List <pyt...@li...>

Zhang Huangbin wrote:
>
> On Aug 9, 2010, at 11:43 PM, Michael Ströder wrote:
>
>> Find a new release of python-ldap:
>>
>>  http://pypi.python.org/pypi/python-ldap/2.3.12
>
> Compile error on CentOS 5.5, i386:
> [..]
> Modules/constants.c: In function ‘LDAPinit_constants’:
> Modules/constants.c:184: error: ‘LDAP_OPT_X_TLS_CRLFILE’ undeclared (first
> use in this function)
> Modules/constants.c:184: error: (Each undeclared identifier is reported
> only once
> Modules/constants.c:184: error: for each function it appears in.)
> error: Setup script exited with error: command 'gcc' failed with exit
> status 1

Looks like an older OpenLDAP release. Please try the patch below.

Ciao, Michael.

Index: Modules/constants.c
===================================================================
RCS file: /cvsroot/python-ldap/python-ldap/Modules/constants.c,v
retrieving revision 1.47
diff -u -r1.47 constants.c
--- Modules/constants.c	7 May 2010 13:22:40 -0000	1.47
+++ Modules/constants.c	11 Aug 2010 05:14:47 -0000
@@ -181,7 +181,9 @@
 #ifdef LDAP_OPT_X_TLS_CRLCHECK
   /* only available if OpenSSL supports it => might cause backward
compability problems */
 	add_int(d,OPT_X_TLS_CRLCHECK);
+#ifdef LDAP_OPT_X_TLS_CRLFILE
 	add_int(d,OPT_X_TLS_CRLFILE);
+#endif
 	add_int(d,OPT_X_TLS_CRL_NONE);
 	add_int(d,OPT_X_TLS_CRL_PEER);
 	add_int(d,OPT_X_TLS_CRL_ALL);

Installing python-ldap 2.3.12 fails

[Adam T. W. <awi...@op...>]

When I install the most recent python-ldap on my CentOS5 box (which has
Python2.6 from IUS) it fails.  Previously I was able to install
python-ldap on a similarly provisioned host.

gcc-4.1.2-48.el5
openldap-devel-2.3.43-12.el5_5.2
openssl-devel-0.9.8e-12.el5_4.6
python26-devel-2.6.5-3.el5

Searching for python-ldap
Reading http://pypi.python.org/simple/python-ldap/
Reading http://www.python-ldap.org/
Reading http://python-ldap.sourceforge.net/
Reading
http://sourceforge.net/project/showfiles.php?group_id=2072&package_id=2011
Best match: python-ldap 2.3.12
Downloading
http://pypi.python.org/packages/source/p/python-ldap/python-ldap-2.3.12.tar.gz#md5=2dadc521b2c2590d9b033894ba5c6f31
Processing python-ldap-2.3.12.tar.gz
Running python-ldap-2.3.12/setup.py -q bdist_egg
--dist-dir /tmp/easy_install-l2DIor/python-ldap-2.3.12/egg-dist-tmp-NfH6yQ
extra_compile_args: 
extra_objects: 
include_dirs: /usr/local/openldap-2.3/include /usr/include/sasl
library_dirs: /usr/local/openldap-2.3/lib
libs: ldap_r lber sasl2 ssl crypto
file Lib/ldap.py (for module ldap) not found
file Lib/ldap/schema.py (for module ldap.schema) not found
warning: no files found matching 'Makefile'
warning: no files found matching 'Modules/LICENSE'
file Lib/ldap.py (for module ldap) not found
file Lib/ldap/schema.py (for module ldap.schema) not found
file Lib/ldap.py (for module ldap) not found
file Lib/ldap/schema.py (for module ldap.schema) not found
Modules/constants.c: In function ‘LDAPinit_constants’:
Modules/constants.c:184: error: ‘LDAP_OPT_X_TLS_CRLFILE’ undeclared
(first use in this function)
Modules/constants.c:184: error: (Each undeclared identifier is reported
only once
Modules/constants.c:184: error: for each function it appears in.)
error: Setup script exited with error: command 'gcc' failed with exit
status 1


-- 
Adam Tauno Williams <awi...@wh...> LPIC-1, Novell CLA
<http://www.whitemiceconsulting.com>
OpenGroupware, Cyrus IMAPd, Postfix, OpenLDAP, Samba