[sudo-users] Compile Sudo 1.6.8p12 with Mozilla sdk 5.1.7

[Macleod, Paul]

Hi Guys,

I'm having some trouble building sudo 1.6.8p12 and having it pick up the
Mozilla sdk 5.1.7, so there is support for the "ldap_start_tls_s"
function.


The website notes for ldap mention:
	If your ldap libraries and headers are in a non standard place,
you will need
	to specify them at configure time.
	
	  $ ./configure --with-ldap=/usr/local/ldapsdk --with-pam


Therefore I've specified where the sdk lives as follows:

	./configure --with-ldap=/export/home/macleodp/ldapcsdk-5.1.7
--with-pam


The results from the configure script don't mention finding the function
though.

	checking pam/pam_appl.h usability... no
	checking pam/pam_appl.h presence... no
	checking for pam/pam_appl.h... no
	checking for LDAP libraries...  -lldap
	checking whether lber.h is needed... no
	checking for ldap_initialize... no
	checking for ldap_start_tls_s... no

The config.log shows the following:
	configure:30044: checking for ldap_start_tls_s
	configure:30094: gcc -o conftest -O2  -D__EXTENSIONS__
-I/export/home/macleodp/ldapcsdk-5.1.7/include  
	-L/export/home/macleodp/ldapcsdk-5.1.7/lib
-R/export/home/macleodp/ldapcsdk-5.1.7/lib conftest.c
	-lsocket -lnsl -lldap >&5
	Undefined                       first referenced
	 symbol                             in file
	ldap_start_tls_s                    /var/tmp//ccgQ5cZo.o
	ld: fatal: Symbol referencing errors. No output written to
conftest


The libraries from the SDK are as follows:
	# ls -al /export/home/macleodp/ldapcsdk-5.1.7/lib
	total 1920
	drwxr-xr-x   2 8799     1116         512 Dec  5 09:01 .
	drwxr-xr-x   6 root     other        512 Dec  5 07:52 ..
	-rw-r--r--   1 8799     1116        2100 Feb 17  2006
libiutil50.a
	-rw-r--r--   1 8799     1116       37444 Feb 17  2006
liblber50.a
	lrwxrwxrwx   1 root     other         11 Dec  5 09:01 libldap.a
-> libldap50.a
	lrwxrwxrwx   1 root     other         12 Dec  5 09:01 libldap.so
-> libldap50.so
	-rw-r--r--   1 8799     1116      440404 Feb 17  2006
libldap50.a
	-rwxr-xr-x   1 8799     1116      384836 Feb 17  2006
libldap50.so
	-rw-r--r--   1 8799     1116        9924 Feb 17  2006
libldif50.a
	-rwxr-xr-x   1 8799     1116       32672 Feb 17  2006
libprldap50.so
	-rwxr-xr-x   1 8799     1116       50796 Feb 17  2006
libssldap50.so


Where you can see I introduced links thinking they may be necessary to
help the compile after the first failure.


Also, the header files do define the function:
	# grep ldap_start_tls_s
/export/home/macleodp/ldapcsdk-5.1.7/include/*
	/export/home/macleodp/ldapcsdk-5.1.7/include/ldap_ssl.h:int
LDAP_CALL ldap_start_tls_s( LDAP *ld, LDAPControl **serverctrls,


I would therefore appreciate your help if you have suggestions where I'm
going wrong.

Thanks in advance,

-Paul.