From peter.djalaliev at gmail.com Mon Jan 2 18:11:40 2006 From: peter.djalaliev at gmail.com (Peter Djalaliev) Date: Mon, 2 Jan 2006 13:11:40 -0500 Subject: [Fedora-directory-devel] Segmentation fault - is this a bug? Message-ID: <3032cfcd0601021011k6243dabdqf06caa778bea1a6c@mail.gmail.com> Hello, I am running Apache 2.0.54 with mod_nss using NSS 3.10. I tried to use inside mod_nss the SSL_TRC macro provided by NSS. I have tracing in NSS turned on and declared the environment variable SSLTRACE=10. The I ran Apache in debugging mode: httpd -X -k start -DSSL The output I got is as follows: Please enter password for "internal" token: [at this point I entered the NSS database password] SSL: tracing set to 10 1243: SSL: grow buffer from 0 to 4096 1243: SSL: grow buffer from 0 to 4096 1243: SSL[137084424]: closing, rv=0 errno=-8174 Segmentation fault I get the same error even if I don't have SSLTRACE declared. However, Apache runs just fine when I run it in normal mode: apachectl startssl or httpd -k start -DSSL Also Can anyone help? Why doesn't the Apache debug mode work with mod_nss? Regards, Peter -------------- next part -------------- An HTML attachment was scrubbed... URL: From rcritten at redhat.com Wed Jan 4 15:31:38 2006 From: rcritten at redhat.com (Rob Crittenden) Date: Wed, 04 Jan 2006 10:31:38 -0500 Subject: [Fedora-directory-devel] Segmentation fault - is this a bug? Message-ID: <43BBEA5A.2040006@redhat.com> I haven't done tracing in mod_nss for a very long time but it did work early in the development of the module. I'm a little confused what you mean about Apache "debug" versus "normal" mode. Are you referring to the -X flag? I use that frequently myself. What problem are you trying to solve? I believe the error -8174 is a bad database error. This shouldn't cause a segfault. Are you seeing this when not doing debugging? Is it dropping a core file? thanks rob -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3178 bytes Desc: S/MIME Cryptographic Signature URL: From rcritten at redhat.com Wed Jan 4 15:44:26 2006 From: rcritten at redhat.com (Rob Crittenden) Date: Wed, 04 Jan 2006 10:44:26 -0500 Subject: [Fedora-directory-devel] mod_nss-1.0 and apache-2.2.0 Message-ID: <43BBED5A.8000300@redhat.com> Wow, thanks for the patch! The trick is going to be in making this compatible with both Apache 2.0.x and 2.2.x. I can go ahead and replace the APR_STATUS_IS_SUCCESS calls as you have since the macro has gone away. It looks like the big change is with the new regex structure and its defines and the renaming of http_method to http_scheme. I guess I can do something with AP_SERVER_*VERSION_NUMBER to work around that. Nice catch on the -avoid-version to libtool. I'll see if I can't get this into the tip this week. regards rob -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3178 bytes Desc: S/MIME Cryptographic Signature URL: From rcritten at redhat.com Wed Jan 4 15:52:18 2006 From: rcritten at redhat.com (Rob Crittenden) Date: Wed, 04 Jan 2006 10:52:18 -0500 Subject: [Fedora-directory-devel] running apache with mod_nss Message-ID: <43BBEF32.1010803@redhat.com> Apologies for the very-late reply but mod_nss requires NSS 3.9.3 or higher. You should be able to retrieve pre-built binaries for most systems at ftp://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_10_RTM/ You will also need a more recent version of NSPR. You can get v4.4.1 from ftp://ftp.mozilla.org/pub/mozilla.org/nspr/releases/v4.4.1/ I wouldn't recommend replacing the versions in /usr/lib with what you download. The versions in /usr/lib are used by mozilla/firefox and while NSS and NSPR have excellent backwards compatibility I don't want to hose up your browser. What you can do is untar it in /usr/local and then add /usr/local/nss-3.10/lib (and the NSPR directory) to your LD_LIBRARY_PATH before starting Apache. rob -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3178 bytes Desc: S/MIME Cryptographic Signature URL: From peter.djalaliev at gmail.com Wed Jan 4 17:38:22 2006 From: peter.djalaliev at gmail.com (Peter Djalaliev) Date: Wed, 4 Jan 2006 12:38:22 -0500 Subject: [Fedora-directory-devel] Re: Fedora-directory-devel Digest, Vol 7, Issue 2 In-Reply-To: <20060104170046.99271738E7@hormel.redhat.com> References: <20060104170046.99271738E7@hormel.redhat.com> Message-ID: <3032cfcd0601040938o168be422h6652f091499334e5@mail.gmail.com> > > I haven't done tracing in mod_nss for a very long time but it did work > early in the development of the module. > > I'm a little confused what you mean about Apache "debug" versus "normal" > mode. Are you referring to the -X flag? I use that frequently myself. > > What problem are you trying to solve? > > I believe the error -8174 is a bad database error. This shouldn't cause > a segfault. Are you seeing this when not doing debugging? > > Is it dropping a core file? > > thanks > > rob Rob, Yes, by the debug mode and normal mode I mean using -X as opposed to not using it. Yes, I see the -8174 error w/ or w/o debugging, but Apache with mod_nss was working ok in normal mode (w/o -X) despite of the -8174 error, so I guess I just ignored it. I'll rebuild my database I guess. I don't find any core files in the 'bin' directory, where I run 'httpd -X -k start -DSSL'. Should I be looking for them elsewhere? What I am doing in essence is that I am extending the TLS/SSL3 implementation in the NSS package to incorporate an extension (as defined in RFC3546). Then, I use this modified NSS in Firefox 1.5 and Apache 2.0.54 w/ mod_nss to test my modifications to the TLS handshake. Inside NSS, I am using the SSL_TRC macros for debugging. It works fine with Firefox, but I needed Apache to stay attached to the shell, so I can see the SSL_TRC output. Alternatively, I am trying to get NSS to ouput the debugging information to the Apache log files, but this might be more of a hack than the right way to do it. Do you have any alternative suggestions here? So, just to confirm, you are using Apache 2 with mod_nss and the -X flag and it works OK, right? Thanks, Peter -------------- next part -------------- An HTML attachment was scrubbed... URL: From rcritten at redhat.com Wed Jan 4 18:50:42 2006 From: rcritten at redhat.com (Rob Crittenden) Date: Wed, 04 Jan 2006 13:50:42 -0500 Subject: [Fedora-directory-devel] Re: Fedora-directory-devel Digest, Vol 7, Issue 2 In-Reply-To: <3032cfcd0601040938o168be422h6652f091499334e5@mail.gmail.com> References: <20060104170046.99271738E7@hormel.redhat.com> <3032cfcd0601040938o168be422h6652f091499334e5@mail.gmail.com> Message-ID: <43BC1902.5060205@redhat.com> Peter Djalaliev wrote: > > > I haven't done tracing in mod_nss for a very long time but it did work > early in the development of the module. > > I'm a little confused what you mean about Apache "debug" versus "normal" > mode. Are you referring to the -X flag? I use that frequently myself. > > What problem are you trying to solve? > > I believe the error -8174 is a bad database error. This shouldn't cause > a segfault. Are you seeing this when not doing debugging? > > Is it dropping a core file? > > thanks > > rob > > > Rob, > > Yes, by the debug mode and normal mode I mean using -X as opposed to not > using it. > > Yes, I see the -8174 error w/ or w/o debugging, but Apache with mod_nss > was working ok in normal mode (w/o -X) despite of the -8174 error, so I > guess I just ignored it. I'll rebuild my database I guess. > > I don't find any core files in the 'bin' directory, where I run 'httpd > -X -k start -DSSL'. Should I be looking for them elsewhere? > > What I am doing in essence is that I am extending the TLS/SSL3 > implementation in the NSS package to incorporate an extension (as > defined in RFC3546). Then, I use this modified NSS in Firefox 1.5 and > Apache 2.0.54 w/ mod_nss to test my modifications to the TLS handshake. > > Inside NSS, I am using the SSL_TRC macros for debugging. It works fine > with Firefox, but I needed Apache to stay attached to the shell, so I > can see the SSL_TRC output. Alternatively, I am trying to get NSS to > ouput the debugging information to the Apache log files, but this might > be more of a hack than the right way to do it. Do you have any > alternative suggestions here? > > So, just to confirm, you are using Apache 2 with mod_nss and the -X flag > and it works OK, right? > > Thanks, > Peter I just re-tested this with an Apache 2.0.54 I had lying about and it works ok for me. I built a fresh copy of NSPR 4.4.1, DBM 1.61 and NSS 3.11 (with TRACE) and was able to fire up the server with no problems: % bin/httpd -X -k start SSL: tracing set to 10 SSL: debugging set to 99 25854: SSL: grow buffer from 0 to 18432 25854: SSL: grow buffer from 0 to 18432 25854: SSL[156374648]: closing, rv=0 errno=-8190 SSL: tracing set to 10 SSL: debugging set to 99 25854: SSL: grow buffer from 0 to 18432 25854: SSL: grow buffer from 0 to 18432 25854: SSL: grow buffer from 0 to 18432 25854: SSL: grow buffer from 0 to 18432 25854: SSL[156279504]: handshake gathering, rv=-2 25854: SSL[156279504]: handshake blocked (need 2) 25854: SSL: grow buffer from 0 to 18432 25854: SSL3[156279504]: handle client_hello handshake 25854: SSL3[156279504]: server, lookup client session-id for 0x0000000000000000ffff00000100a8c0 25854: SSL3[156279504]: begin send server_hello sequence 25854: SSL3[156279504]: send server_hello handshake 25854: SSL: grow buffer from 0 to 18432 25854: SSL3[156279504]: Set XXX Pending Cipher Suite to 0x0035 25854: SSL3[156279504]: send certificate handshake 25854: SSL3[156279504]: send server_hello_done handshake 25854: SSL3[156279504] SendRecord type: handshake (22) bytes=1187 25854: SSL[156279504]: Send record (plain text) [Len: 1187] [ snip ] I'm not sure why I'm getting the -8190 (a bad data error I believe) but otherwise it seems to work fine. I'd work on verifying/fixing your cert database first, that error is very suspicious, particularly since you say it works with all debugging disabled. To get a core file be sure that your ulimit allows one. I typically do: ulimit -c unlimited. rob -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3178 bytes Desc: S/MIME Cryptographic Signature URL: From oeriksson at mandriva.com Wed Jan 4 21:27:46 2006 From: oeriksson at mandriva.com (Oden Eriksson) Date: Wed, 4 Jan 2006 22:27:46 +0100 Subject: [Fedora-directory-devel] mod_nss-1.0 and apache-2.2.0 In-Reply-To: <43BBED5A.8000300@redhat.com> References: <43BBED5A.8000300@redhat.com> Message-ID: <200601042227.46784.oeriksson@mandriva.com> onsdagen den 4 januari 2006 16.44 skrev Rob Crittenden: > Wow, thanks for the patch! > > The trick is going to be in making this compatible with both Apache > 2.0.x and 2.2.x. > > I can go ahead and replace the APR_STATUS_IS_SUCCESS calls as you have > since the macro has gone away. I think it should be ok as it is deprecated functions where the compat aliases was removed since apr 1.0 > It looks like the big change is with the new regex structure and its > defines and the renaming of http_method to http_scheme. I guess I can do > something with AP_SERVER_*VERSION_NUMBER to work around that. > > Nice catch on the -avoid-version to libtool. > > I'll see if I can't get this into the tip this week. > > regards > > rob -- Regards // Oden Eriksson Mandriva: http://www.mandriva.com NUX: http://li.nux.se From peter.djalaliev at gmail.com Wed Jan 4 22:10:54 2006 From: peter.djalaliev at gmail.com (Peter Djalaliev) Date: Wed, 4 Jan 2006 17:10:54 -0500 Subject: [Fedora-directory-devel] Re: Fedora-directory-devel Digest, Vol 7, Issue 2 Message-ID: <3032cfcd0601041410j7fe526f7p27dbecd93323d2e6@mail.gmail.com> I used ulimit as you told me and Apache dumped a core file at the next segmentation fault. I ran this with gdb (typed 'gdb httpd ' in the Apache 'bin' directory) For some reason, somewhere in libpthread.so.0, Apache is invoking _PR_CreateThread from ../../../../mozilla/nsprpub/pr/src/pthreads/pthreads.c. This file, however, is apparently not found, be cause I get "../../../../mozilla/nsprpub/pr/src/pthreads/pthread.c: No such file or directory." Similarly, it doesn't find sslsnce.c. Now, from now on, the httpd process in GDB either exits normally, or produces segmentation faults at different points of its execution. I don't always get this segmentation fault almost immediately when I start Apache. Sometimes it would produce output to the point that I starts waiting for connections, but then when I connect to it through FF, the browser would be waiting to receive the server_hello but it wouldn't come. Sometimes, the TLS handshake continues even further. In he meantime, I checked my database, it seems to be fine, even though SSL_TRC still produces that -8174 error. I checked inside nss_engine_init.c, NSS_Initialize() returns SECSuccess. I am not quite sure this guarantees that the database is good. Any suggestions? Regards, Peter -------------- next part -------------- An HTML attachment was scrubbed... URL: From rcritten at redhat.com Thu Jan 5 02:48:41 2006 From: rcritten at redhat.com (Rob Crittenden) Date: Wed, 04 Jan 2006 21:48:41 -0500 Subject: [Fedora-directory-devel] Re: Fedora-directory-devel Digest, Vol 7, Issue 2 In-Reply-To: <3032cfcd0601041410j7fe526f7p27dbecd93323d2e6@mail.gmail.com> References: <3032cfcd0601041410j7fe526f7p27dbecd93323d2e6@mail.gmail.com> Message-ID: <43BC8909.3070302@redhat.com> Peter Djalaliev wrote: > I used ulimit as you told me and Apache dumped a core file at the next > segmentation fault. I ran this with gdb (typed 'gdb httpd ' > in the Apache 'bin' directory) > > For some reason, somewhere in libpthread.so.0, Apache is invoking > _PR_CreateThread from > ../../../../mozilla/nsprpub/pr/src/pthreads/pthreads.c. This file, > however, is apparently not found, be cause I get > "../../../../mozilla/nsprpub/pr/src/pthreads/pthread.c: No such file or > directory." Similarly, it doesn't find sslsnce.c. Those are files in NSPR and NSS. You could use the gdb command "file" to point to the proper file. I've seen this happen once or twice before myself and haven't been able to track it down. In the short term I think you can ignore it. > Now, from now on, the httpd process in GDB either exits normally, or > produces segmentation faults at different points of its execution. > > I don't always get this segmentation fault almost immediately when I > start Apache. Sometimes it would produce output to the point that I > starts waiting for connections, but then when I connect to it through > FF, the browser would be waiting to receive the server_hello but it > wouldn't come. Sometimes, the TLS handshake continues even further. It might be worth it to build an unchanged version of NSS and try it with a browser also with a vanilla NSS and get that working, then throw your changes into the mix. > > In he meantime, I checked my database, it seems to be fine, even though > SSL_TRC still produces that -8174 error. I checked inside > nss_engine_init.c, NSS_Initialize() returns SECSuccess. I am not quite > sure this guarantees that the database is good. Hmm, strange. What did you do to check the database? Again, if the server is coming up ok then it is likely a spurious error, though the NSS team may know better. rob -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3178 bytes Desc: S/MIME Cryptographic Signature URL: From peter.djalaliev at gmail.com Thu Jan 5 22:05:54 2006 From: peter.djalaliev at gmail.com (Peter Djalaliev) Date: Thu, 5 Jan 2006 17:05:54 -0500 Subject: [Fedora-directory-devel] Re: Fedora-directory-devel Digest, Vol 7, Issue 2 Message-ID: <3032cfcd0601051405u66bc5b5cq4b645a4f9ce00071@mail.gmail.com> Hm, I started from scratch, installing downloading, compiling and installing everything on another machine. Here is exactly what I did: I started from scratch on a machine with Ubuntu Linux, kernel 2.6. I downloaded and installed OpenSSL 0.9.8. Then I download and installed Apache 2.0.55 with SSL enabled. After that, I downloaded NSPR 4.6 (both the source tree and the release) and NSS 3.10 (source tree). I copied the nsprpub from the mozilla dir of the NSPR 4.6 source tree to the mozilla dir of the NSS 3.10 source tree. After compiling NSS, I used this and the compiled release of NSPR 4.6 to compile mod_nss, which I downloaded from the Fedora Directory Server website. After compiling mod_nss, I installed it and modified the nss.conf (in the Apache conf dir) file as follows: put and around its contents, specified where NSS should be looking for its database and changed the nickname of the certificate NSS should look for in the database. At this point, I could run 'apachectl startssl', which would ask me for the NSS database password and then start. I could establish the secure connection through a browser - after being asked to accept the certificate (which is the one I wanted NSS to use). However, if I run 'httpd -X -k start' or 'httpd -X -k startssl', I get a segmentation fault and a core dump. When I used GDB to analyze it, everythig seems fine until at some point, when the httpd executable receives a SIGSEGV signal for a segmentation fault. Now, if I reinstall Apache 2.0.55 from the same source tree I used before (after first deleting the directory of the installed Apache), I can run 'httpd -X -k start' with no problem. In the end, I generated a key and a self-signed certificate and fired up Apache w/ mod_ssl with 'httpd -X -k start -DSSL'. It worked alright. So, it seems that when I try to use mod_nss, I get a segmentation fault when I try to use debugging. When I revert back to mod_ssl, it works fine. Where could things be going wrong? Regards, Peter -------------- next part -------------- An HTML attachment was scrubbed... URL: From rcritten at redhat.com Fri Jan 6 16:06:12 2006 From: rcritten at redhat.com (Rob Crittenden) Date: Fri, 06 Jan 2006 11:06:12 -0500 Subject: [Fedora-directory-devel] Re: Fedora-directory-devel Digest, Vol 7, Issue 2 In-Reply-To: <3032cfcd0601051405u66bc5b5cq4b645a4f9ce00071@mail.gmail.com> References: <3032cfcd0601051405u66bc5b5cq4b645a4f9ce00071@mail.gmail.com> Message-ID: <43BE9574.4060801@redhat.com> Peter Djalaliev wrote: > Hm, > > I started from scratch, installing downloading, compiling and installing > everything on another machine. Here is exactly what I did: > > I started from scratch on a machine with Ubuntu Linux, kernel 2.6. I > downloaded and installed OpenSSL 0.9.8. Then I download and installed > Apache 2.0.55 with SSL enabled. After that, I downloaded NSPR 4.6 (both > the source tree and the release) and NSS 3.10 (source tree). I copied > the nsprpub from the mozilla dir of the NSPR 4.6 source tree to the > mozilla dir of the NSS 3.10 source tree. After compiling NSS, I used > this and the compiled release of NSPR 4.6 to compile mod_nss, which I > downloaded from the Fedora Directory Server website. > > After compiling mod_nss, I installed it and modified the nss.conf (in > the Apache conf dir) file as follows: put and > around its contents, specified where NSS should be looking for its > database and changed the nickname of the certificate NSS should look for > in the database. > > At this point, I could run 'apachectl startssl', which would ask me for > the NSS database password and then start. I could establish the secure > connection through a browser - after being asked to accept the > certificate (which is the one I wanted NSS to use). > > However, if I run 'httpd -X -k start' or 'httpd -X -k startssl', I get a > segmentation fault and a core dump. When I used GDB to analyze it, > everythig seems fine until at some point, when the httpd executable > receives a SIGSEGV signal for a segmentation fault. Strange that it would crash without startssl (when theoretically it isn't invoking mod_nss). Can you send me a stack trace of the non-pthreads crashes, both with and without startssl? > Now, if I reinstall Apache 2.0.55 from the same source tree I used > before (after first deleting the directory of the installed Apache), I > can run 'httpd -X -k start' with no problem. In the end, I generated a > key and a self-signed certificate and fired up Apache w/ mod_ssl with > 'httpd -X -k start -DSSL'. It worked alright. > > So, it seems that when I try to use mod_nss, I get a segmentation fault > when I try to use debugging. When I revert back to mod_ssl, it works > fine. Where could things be going wrong? All -X does is prevent forking, so I'm not sure why it is causing you so much grief. rob -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3178 bytes Desc: S/MIME Cryptographic Signature URL: From rmeggins at redhat.com Tue Jan 17 15:07:38 2006 From: rmeggins at redhat.com (Richard Megginson) Date: Tue, 17 Jan 2006 08:07:38 -0700 Subject: [Fedora-directory-devel] Please review: bug 175170: Directory Server Admin Server Dies after Secure Bind to Directory Server Message-ID: <43CD083A.6060206@redhat.com> https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=175170 Bug(s) fixed: 175170 Bug Description: Directory Server Admin Server Dies after Secure Bind to Directory Server Reviewed by: ??? Files: mod_admserv.c Branch: HEAD Fix Description: This fix makes the assumption that mod_nss will always be used. It is possible to use mod_admserv without mod_nss - this would mean that the admin server accepts http, but uses ldaps to communicate with the DS. However, I don't forsee that happening, so in order to simplify things, this fix makes mod_nss resposible for initializing NSS and shutting it down properly. Another problem was the memory and resource leaks. pset's have to be disposed of after use. This appears to have been a problem in the old NES libAdmservPlugin as well since most of the code was just copied/pasted. There were also a couple of other memory leaks. NOTE: This is only part of the total fix, which will involve changes to mod_nss, ldap sdk, and admin server components. Platforms tested: FC4 Flag Day: no Doc impact: no https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=123293 From rmeggins at redhat.com Tue Jan 17 15:11:39 2006 From: rmeggins at redhat.com (Richard Megginson) Date: Tue, 17 Jan 2006 08:11:39 -0700 Subject: [Fedora-directory-devel] Please review: bug 175170: Directory Server Admin Server Dies after Secure Bind to Directory Server In-Reply-To: <43CD083A.6060206@redhat.com> References: <43CD083A.6060206@redhat.com> Message-ID: <43CD092B.1070900@redhat.com> Whoops, wrong diffs - new link - https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=123294 Richard Megginson wrote: > https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=175170 > Bug(s) fixed: 175170 > Bug Description: Directory Server Admin Server Dies after Secure Bind > to Directory Server > Reviewed by: ??? > Files: mod_admserv.c > Branch: HEAD > Fix Description: This fix makes the assumption that mod_nss will > always be used. It is possible to use mod_admserv without mod_nss - > this would mean that the admin server accepts http, but uses ldaps to > communicate with the DS. However, I don't forsee that happening, so > in order to simplify things, this fix makes mod_nss resposible for > initializing NSS and shutting it down properly. > Another problem was the memory and resource leaks. pset's have to be > disposed of after use. This appears to have been a problem in the old > NES libAdmservPlugin as well since most of the code was just > copied/pasted. There were also a couple of other memory leaks. > NOTE: This is only part of the total fix, which will involve changes > to mod_nss, ldap sdk, and admin server components. > Platforms tested: FC4 > Flag Day: no > Doc impact: no > https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=123293 > > -- > Fedora-directory-devel mailing list > Fedora-directory-devel at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-devel -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3178 bytes Desc: S/MIME Cryptographic Signature URL: From rmeggins at redhat.com Wed Jan 18 17:21:41 2006 From: rmeggins at redhat.com (Richard Megginson) Date: Wed, 18 Jan 2006 10:21:41 -0700 Subject: [Fedora-directory-devel] Please review: allow admin server to build without java Message-ID: <43CE7925.4060401@redhat.com> It's a little bit tricky. The base package is a dependency of both the main admin server package and the directory server package. However, it works if you just create a zero length .zip file for the base archive - you get a warning when running setup, but everything installs correctly. While it's not perfect (it will be addressed for the next major release) it will at least allow those developers who do not want to use java at all to build and install. You must use "make NOJAVA=1 ..." to build and package admin server without java. -------------- next part -------------- An embedded and charset-unspecified text was scrubbed... Name: cvsfiles URL: -------------- next part -------------- An embedded and charset-unspecified text was scrubbed... Name: cvsdiffs URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3178 bytes Desc: S/MIME Cryptographic Signature URL: From rmeggins at redhat.com Thu Jan 19 22:56:28 2006 From: rmeggins at redhat.com (Richard Megginson) Date: Thu, 19 Jan 2006 15:56:28 -0700 Subject: [Fedora-directory-devel] Announcing Fedora DS - dsbuild with debug support Message-ID: <43D0191C.5070406@redhat.com> Now you can use the one step build method - http://directory.fedora.redhat.com/wiki/Building#One-Step_Build - to build a debug version of the server, suitable for gdb and the like. Please try it out and let us know how it works. -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3178 bytes Desc: S/MIME Cryptographic Signature URL: From fitzsim at redhat.com Thu Jan 19 23:56:59 2006 From: fitzsim at redhat.com (Thomas Fitzsimmons) Date: Thu, 19 Jan 2006 18:56:59 -0500 Subject: [Fedora-directory-devel] Announcing Fedora DS - dsbuild with debug support In-Reply-To: <43D0191C.5070406@redhat.com> References: <43D0191C.5070406@redhat.com> Message-ID: <1137715019.2691.7.camel@tortoise.toronto.redhat.com> On Thu, 2006-01-19 at 15:56 -0700, Richard Megginson wrote: > Now you can use the one step build method - > http://directory.fedora.redhat.com/wiki/Building#One-Step_Build - to > build a debug version of the server, suitable for gdb and the like. > Please try it out and let us know how it works. I'm trying this on FC5test1 to see if I can build FDS against gcj. One nit is the instructions: ... % cd to dsbuild/meta/ds ... should read: ... % cd dsbuild/meta/ds ... The next problem is that I can't find apr-config for FC5. All I have is apr-1-config. When I modify ds/mod_nss/Makefile's CONFIGURE_ARGS to change --with-apr-config to --with-apr-config=/usr/bin/apr-1-config the build fails like this: /bin/sh ./libtool --mode=compile cc -DPACKAGE_NAME=\"\" -DPACKAGE_TARNAME=\"\" -DPACKAGE_VERSION=\"\" -DPACKAGE_STRING=\"\" -DPACKAGE_BUGREPORT=\"\" -DPACKAGE=\"mod_nss\" -DVERSIO N=\"1.0\" -DSTDC_HEADERS=1 -DHAVE_SYS_TYPES_H=1 -DHAVE_SYS_STAT_H=1 -DHAVE_STDLIB_H=1 -DHAVE_STRING_H=1 -DHAVE_MEMORY_H=1 -DHAVE_STRINGS_H=1 -DHAVE_INTTYPES_H=1 -DHAVE_STDINT_H=1 -DHAVE_UNISTD_H=1 -DHAVE_DLFCN_H=1 -DSTDC_HEADERS=1 -DHAVE_UNISTD_H=1 -DYYTEXT_POINTER=1 -I. -I. -I/usr/include/httpd -I/home/fitzsim/sources/dsbuild/ds/mozilla/work/mozilla/dist /Linux2.6_x86_glibc_PTH_OPT.OBJ/include -I/home/fitzsim/sources/dsbuild/ds/mozilla/work/mozilla/dist/public/nss -I/usr/include/apr-1 -I/tmp/fedora-ds-build/include -I/tmp/fedor a-ds-build/include -I/tmp/fedora-ds-build/include -DWANT_SSL2 -I/tmp/fedora-ds-build/include -L/tmp/fedora-ds-build/lib -O2 -pipe -I/tmp/fedora-ds-build/include -L/tmp/fedora-ds-b uild/lib -O2 -pipe -I/tmp/fedora-ds-build/include -L/tmp/fedora-ds-build/lib -O2 -pipe -c -o mod_nss.lo `test -f 'mod_nss.c' || echo './'`mod_nss.c mkdir .libs cc -DPACKAGE_NAME=\"\" -DPACKAGE_TARNAME=\"\" -DPACKAGE_VERSION=\"\" -DPACKAGE_STRING=\"\" -DPACKAGE_BUGREPORT=\"\" -DPACKAGE=\"mod_nss\" -DVERSION=\"1.0\" -DSTDC_HEADERS=1 -DHAVE _SYS_TYPES_H=1 -DHAVE_SYS_STAT_H=1 -DHAVE_STDLIB_H=1 -DHAVE_STRING_H=1 -DHAVE_MEMORY_H=1 -DHAVE_STRINGS_H=1 -DHAVE_INTTYPES_H=1 -DHAVE_STDINT_H=1 -DHAVE_UNISTD_H=1 -DHAVE_DLFCN_H= 1 -DSTDC_HEADERS=1 -DHAVE_UNISTD_H=1 -DYYTEXT_POINTER=1 -I. -I. -I/usr/include/httpd -I/home/fitzsim/sources/dsbuild/ds/mozilla/work/mozilla/dist/Linux2.6_x86_glibc_PTH_OPT.OBJ/in clude -I/home/fitzsim/sources/dsbuild/ds/mozilla/work/mozilla/dist/public/nss -I/usr/include/apr-1 -I/tmp/fedora-ds-build/include -I/tmp/fedora-ds-build/include -I/tmp/fedora-ds-b uild/include -DWANT_SSL2 -I/tmp/fedora-ds-build/include -L/tmp/fedora-ds-build/lib -O2 -pipe -I/tmp/fedora-ds-build/include -L/tmp/fedora-ds-build/lib -O2 -pipe -I/tmp/fedora-ds-b uild/include -L/tmp/fedora-ds-build/lib -O2 -pipe -c mod_nss.c -MT mod_nss.lo -MD -MP -MF .deps/mod_nss.TPlo -fPIC -DPIC -o .libs/mod_nss.lo In file included from /usr/include/httpd/ap_config.h:25, from /usr/include/httpd/httpd.h:43, from mod_nss.h:20, from mod_nss.c:16: /usr/include/apr-1/apr.h:270: error: expected '=', ',', ';', 'asm' or '__attribute__' before 'apr_off_t' In file included from /usr/include/apr-1/apr_file_io.h:29, from /usr/include/apr-1/apr_network_io.h:26, from /usr/include/httpd/httpd.h:53, from mod_nss.h:20, from mod_nss.c:16: /usr/include/apr-1/apr_file_info.h:204: error: expected specifier-qualifier-list before 'apr_off_t' In file included from /usr/include/apr-1/apr_network_io.h:26, from /usr/include/httpd/httpd.h:53, from mod_nss.h:20, from mod_nss.c:16: /usr/include/apr-1/apr_file_io.h:548: error: expected declaration specifiers or '...' before 'apr_off_t' /usr/include/apr-1/apr_file_io.h:740: error: expected declaration specifiers or '...' before 'apr_off_t' In file included from /usr/include/httpd/httpd.h:53, from mod_nss.h:20, from mod_nss.c:16: /usr/include/apr-1/apr_network_io.h:545: error: expected declaration specifiers or '...' before 'apr_off_t' In file included from /usr/include/apr-1/apr_buckets.h:32, from /usr/include/httpd/httpd.h:54, from mod_nss.h:20, from mod_nss.c:16: /usr/include/apr-1/apr_mmap.h:134: error: expected declaration specifiers or '...' before 'apr_off_t' /usr/include/apr-1/apr_mmap.h:161: error: expected declaration specifiers or '...' before 'apr_off_t' In file included from /usr/include/httpd/httpd.h:54, from mod_nss.h:20, from mod_nss.c:16: /usr/include/apr-1/apr_buckets.h:242: error: expected specifier-qualifier-list before 'apr_off_t' /usr/include/apr-1/apr_buckets.h:706: error: expected declaration specifiers or '...' before 'apr_off_t' /usr/include/apr-1/apr_buckets.h:718: error: expected declaration specifiers or '...' before 'apr_off_t' /usr/include/apr-1/apr_buckets.h:754: error: expected declaration specifiers or '...' before 'apr_off_t' /usr/include/apr-1/apr_buckets.h:890: error: expected declaration specifiers or '...' before 'apr_off_t' /usr/include/apr-1/apr_buckets.h:891: error: expected declaration specifiers or '...' before 'apr_off_t' /usr/include/apr-1/apr_buckets.h:1168: error: expected declaration specifiers or '...' before 'apr_off_t' /usr/include/apr-1/apr_buckets.h:1367: error: expected declaration specifiers or '...' before 'apr_off_t' /usr/include/apr-1/apr_buckets.h:1381: error: expected declaration specifiers or '...' before 'apr_off_t' /usr/include/apr-1/apr_buckets.h:1431: error: expected declaration specifiers or '...' before 'apr_off_t' /usr/include/apr-1/apr_buckets.h:1447: error: expected declaration specifiers or '...' before 'apr_off_t' In file included from mod_nss.h:20, from mod_nss.c:16: /usr/include/httpd/httpd.h:826: error: expected specifier-qualifier-list before 'apr_off_t' In file included from /usr/include/httpd/http_core.h:32, from mod_nss.h:22, from mod_nss.c:16: /usr/include/httpd/util_filter.h:142: error: expected declaration specifiers or '...' before 'apr_off_t' /usr/include/httpd/util_filter.h:299: error: expected declaration specifiers or '...' before 'apr_off_t' In file included from mod_nss.h:22, from mod_nss.c:16: /usr/include/httpd/http_core.h:229: error: expected '=', ',', ';', 'asm' or '__attribute__' before 'ap_get_limit_req_body' /usr/include/httpd/http_core.h:672: error: expected declaration specifiers or '...' before 'apr_off_t' In file included from mod_nss.h:27, from mod_nss.c:16: /usr/include/httpd/http_protocol.h:111: error: expected declaration specifiers or '...' before 'apr_off_t' /usr/include/httpd/http_protocol.h:203: error: expected declaration specifiers or '...' before 'apr_off_t' In file included from /usr/include/httpd/mpm.h:28, from mod_nss.h:30, from mod_nss.c:16: /usr/include/httpd/scoreboard.h:116: error: expected specifier-qualifier-list before 'apr_off_t' In file included from mod_nss.h:32, from mod_nss.c:16: /usr/include/apr-1/apr_strings.h:297: error: expected declaration specifiers or '...' before 'apr_off_t' /usr/include/apr-1/apr_strings.h:313: error: expected ')' before '*' token /usr/include/apr-1/apr_strings.h:349: error: expected ')' before 'size' make[2]: *** [mod_nss.lo] Error 1 make[2]: Leaving directory `/home/fitzsim/sources/dsbuild/ds/mod_nss/work/mod_nss-1.0' make[1]: *** [build-work/mod_nss-1.0/Makefile] Error 2 make[1]: Leaving directory `/home/fitzsim/sources/dsbuild/ds/mod_nss' make: *** [dep-../../ds/mod_nss] Error 2 Any ideas? Tom From rmeggins at redhat.com Fri Jan 20 00:16:56 2006 From: rmeggins at redhat.com (Richard Megginson) Date: Thu, 19 Jan 2006 17:16:56 -0700 Subject: [Fedora-directory-devel] Announcing Fedora DS - dsbuild with debug support In-Reply-To: <1137715019.2691.7.camel@tortoise.toronto.redhat.com> References: <43D0191C.5070406@redhat.com> <1137715019.2691.7.camel@tortoise.toronto.redhat.com> Message-ID: <43D02BF8.9080500@redhat.com> Thomas Fitzsimmons wrote: >On Thu, 2006-01-19 at 15:56 -0700, Richard Megginson wrote: > > >>Now you can use the one step build method - >>http://directory.fedora.redhat.com/wiki/Building#One-Step_Build - to >>build a debug version of the server, suitable for gdb and the like. >>Please try it out and let us know how it works. >> >> > >I'm trying this on FC5test1 to see if I can build FDS against gcj. > Hmm - if you just want to check our java code, you might want to just build the Java based components with gcj - http://directory.fedora.redhat.com/wiki/BuildingConsole and the like. But I suppose you will want to test the console against the server once it is compiled. >One >nit is the instructions: > >... >% cd to dsbuild/meta/ds >... > >should read: > >... >% cd dsbuild/meta/ds >... > > Done. >The next problem is that I can't find apr-config for FC5. All I have is >apr-1-config. When I modify ds/mod_nss/Makefile's CONFIGURE_ARGS to >change --with-apr-config to --with-apr-config=/usr/bin/apr-1-config the >build fails like this: > > Hmm - what version of Apache does FC5 use? Try apr-1-config --version and /usr/sbin/httpd.worker -v >/bin/sh ./libtool --mode=compile cc -DPACKAGE_NAME=\"\" -DPACKAGE_TARNAME=\"\" -DPACKAGE_VERSION=\"\" -DPACKAGE_STRING=\"\" -DPACKAGE_BUGREPORT=\"\" -DPACKAGE=\"mod_nss\" -DVERSIO >N=\"1.0\" -DSTDC_HEADERS=1 -DHAVE_SYS_TYPES_H=1 -DHAVE_SYS_STAT_H=1 -DHAVE_STDLIB_H=1 -DHAVE_STRING_H=1 -DHAVE_MEMORY_H=1 -DHAVE_STRINGS_H=1 -DHAVE_INTTYPES_H=1 -DHAVE_STDINT_H=1 >-DHAVE_UNISTD_H=1 -DHAVE_DLFCN_H=1 -DSTDC_HEADERS=1 -DHAVE_UNISTD_H=1 -DYYTEXT_POINTER=1 -I. -I. -I/usr/include/httpd -I/home/fitzsim/sources/dsbuild/ds/mozilla/work/mozilla/dist >/Linux2.6_x86_glibc_PTH_OPT.OBJ/include -I/home/fitzsim/sources/dsbuild/ds/mozilla/work/mozilla/dist/public/nss -I/usr/include/apr-1 -I/tmp/fedora-ds-build/include -I/tmp/fedor >a-ds-build/include -I/tmp/fedora-ds-build/include -DWANT_SSL2 -I/tmp/fedora-ds-build/include -L/tmp/fedora-ds-build/lib -O2 -pipe -I/tmp/fedora-ds-build/include -L/tmp/fedora-ds-b >uild/lib -O2 -pipe -I/tmp/fedora-ds-build/include -L/tmp/fedora-ds-build/lib -O2 -pipe -c -o mod_nss.lo `test -f 'mod_nss.c' || echo './'`mod_nss.c >mkdir .libs >cc -DPACKAGE_NAME=\"\" -DPACKAGE_TARNAME=\"\" -DPACKAGE_VERSION=\"\" -DPACKAGE_STRING=\"\" -DPACKAGE_BUGREPORT=\"\" -DPACKAGE=\"mod_nss\" -DVERSION=\"1.0\" -DSTDC_HEADERS=1 -DHAVE >_SYS_TYPES_H=1 -DHAVE_SYS_STAT_H=1 -DHAVE_STDLIB_H=1 -DHAVE_STRING_H=1 -DHAVE_MEMORY_H=1 -DHAVE_STRINGS_H=1 -DHAVE_INTTYPES_H=1 -DHAVE_STDINT_H=1 -DHAVE_UNISTD_H=1 -DHAVE_DLFCN_H= >1 -DSTDC_HEADERS=1 -DHAVE_UNISTD_H=1 -DYYTEXT_POINTER=1 -I. -I. -I/usr/include/httpd -I/home/fitzsim/sources/dsbuild/ds/mozilla/work/mozilla/dist/Linux2.6_x86_glibc_PTH_OPT.OBJ/in >clude -I/home/fitzsim/sources/dsbuild/ds/mozilla/work/mozilla/dist/public/nss -I/usr/include/apr-1 -I/tmp/fedora-ds-build/include -I/tmp/fedora-ds-build/include -I/tmp/fedora-ds-b >uild/include -DWANT_SSL2 -I/tmp/fedora-ds-build/include -L/tmp/fedora-ds-build/lib -O2 -pipe -I/tmp/fedora-ds-build/include -L/tmp/fedora-ds-build/lib -O2 -pipe -I/tmp/fedora-ds-b >uild/include -L/tmp/fedora-ds-build/lib -O2 -pipe -c mod_nss.c -MT mod_nss.lo -MD -MP -MF .deps/mod_nss.TPlo -fPIC -DPIC -o .libs/mod_nss.lo >In file included from /usr/include/httpd/ap_config.h:25, > from /usr/include/httpd/httpd.h:43, > from mod_nss.h:20, > from mod_nss.c:16: >/usr/include/apr-1/apr.h:270: error: expected '=', ',', ';', 'asm' or '__attribute__' before 'apr_off_t' >In file included from /usr/include/apr-1/apr_file_io.h:29, > from /usr/include/apr-1/apr_network_io.h:26, > from /usr/include/httpd/httpd.h:53, > from mod_nss.h:20, > from mod_nss.c:16: >/usr/include/apr-1/apr_file_info.h:204: error: expected specifier-qualifier-list before 'apr_off_t' >In file included from /usr/include/apr-1/apr_network_io.h:26, > from /usr/include/httpd/httpd.h:53, > from mod_nss.h:20, > from mod_nss.c:16: >/usr/include/apr-1/apr_file_io.h:548: error: expected declaration specifiers or '...' before 'apr_off_t' >/usr/include/apr-1/apr_file_io.h:740: error: expected declaration specifiers or '...' before 'apr_off_t' >In file included from /usr/include/httpd/httpd.h:53, > from mod_nss.h:20, > from mod_nss.c:16: >/usr/include/apr-1/apr_network_io.h:545: error: expected declaration specifiers or '...' before 'apr_off_t' >In file included from /usr/include/apr-1/apr_buckets.h:32, > from /usr/include/httpd/httpd.h:54, > from mod_nss.h:20, > from mod_nss.c:16: >/usr/include/apr-1/apr_mmap.h:134: error: expected declaration specifiers or '...' before 'apr_off_t' >/usr/include/apr-1/apr_mmap.h:161: error: expected declaration specifiers or '...' before 'apr_off_t' >In file included from /usr/include/httpd/httpd.h:54, > from mod_nss.h:20, > from mod_nss.c:16: >/usr/include/apr-1/apr_buckets.h:242: error: expected specifier-qualifier-list before 'apr_off_t' >/usr/include/apr-1/apr_buckets.h:706: error: expected declaration specifiers or '...' before 'apr_off_t' >/usr/include/apr-1/apr_buckets.h:718: error: expected declaration specifiers or '...' before 'apr_off_t' >/usr/include/apr-1/apr_buckets.h:754: error: expected declaration specifiers or '...' before 'apr_off_t' >/usr/include/apr-1/apr_buckets.h:890: error: expected declaration specifiers or '...' before 'apr_off_t' >/usr/include/apr-1/apr_buckets.h:891: error: expected declaration specifiers or '...' before 'apr_off_t' >/usr/include/apr-1/apr_buckets.h:1168: error: expected declaration specifiers or '...' before 'apr_off_t' >/usr/include/apr-1/apr_buckets.h:1367: error: expected declaration specifiers or '...' before 'apr_off_t' >/usr/include/apr-1/apr_buckets.h:1381: error: expected declaration specifiers or '...' before 'apr_off_t' >/usr/include/apr-1/apr_buckets.h:1431: error: expected declaration specifiers or '...' before 'apr_off_t' >/usr/include/apr-1/apr_buckets.h:1447: error: expected declaration specifiers or '...' before 'apr_off_t' >In file included from mod_nss.h:20, > from mod_nss.c:16: >/usr/include/httpd/httpd.h:826: error: expected specifier-qualifier-list before 'apr_off_t' >In file included from /usr/include/httpd/http_core.h:32, > from mod_nss.h:22, > from mod_nss.c:16: >/usr/include/httpd/util_filter.h:142: error: expected declaration specifiers or '...' before 'apr_off_t' >/usr/include/httpd/util_filter.h:299: error: expected declaration specifiers or '...' before 'apr_off_t' >In file included from mod_nss.h:22, > from mod_nss.c:16: >/usr/include/httpd/http_core.h:229: error: expected '=', ',', ';', 'asm' or '__attribute__' before 'ap_get_limit_req_body' >/usr/include/httpd/http_core.h:672: error: expected declaration specifiers or '...' before 'apr_off_t' >In file included from mod_nss.h:27, > from mod_nss.c:16: >/usr/include/httpd/http_protocol.h:111: error: expected declaration specifiers or '...' before 'apr_off_t' >/usr/include/httpd/http_protocol.h:203: error: expected declaration specifiers or '...' before 'apr_off_t' >In file included from /usr/include/httpd/mpm.h:28, > from mod_nss.h:30, > from mod_nss.c:16: >/usr/include/httpd/scoreboard.h:116: error: expected specifier-qualifier-list before 'apr_off_t' >In file included from mod_nss.h:32, > from mod_nss.c:16: >/usr/include/apr-1/apr_strings.h:297: error: expected declaration specifiers or '...' before 'apr_off_t' >/usr/include/apr-1/apr_strings.h:313: error: expected ')' before '*' token >/usr/include/apr-1/apr_strings.h:349: error: expected ')' before 'size' >make[2]: *** [mod_nss.lo] Error 1 >make[2]: Leaving directory `/home/fitzsim/sources/dsbuild/ds/mod_nss/work/mod_nss-1.0' >make[1]: *** [build-work/mod_nss-1.0/Makefile] Error 2 >make[1]: Leaving directory `/home/fitzsim/sources/dsbuild/ds/mod_nss' >make: *** [dep-../../ds/mod_nss] Error 2 > >Any ideas? > >Tom > > >-- >Fedora-directory-devel mailing list >Fedora-directory-devel at redhat.com >https://www.redhat.com/mailman/listinfo/fedora-directory-devel > > -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3178 bytes Desc: S/MIME Cryptographic Signature URL: From fitzsim at redhat.com Fri Jan 20 00:28:22 2006 From: fitzsim at redhat.com (Thomas Fitzsimmons) Date: Thu, 19 Jan 2006 19:28:22 -0500 Subject: [Fedora-directory-devel] Announcing Fedora DS - dsbuild with debug support In-Reply-To: <43D02BF8.9080500@redhat.com> References: <43D0191C.5070406@redhat.com> <1137715019.2691.7.camel@tortoise.toronto.redhat.com> <43D02BF8.9080500@redhat.com> Message-ID: <1137716902.2691.11.camel@tortoise.toronto.redhat.com> On Thu, 2006-01-19 at 17:16 -0700, Richard Megginson wrote: > Thomas Fitzsimmons wrote: > > >On Thu, 2006-01-19 at 15:56 -0700, Richard Megginson wrote: > > > > > >>Now you can use the one step build method - > >>http://directory.fedora.redhat.com/wiki/Building#One-Step_Build - to > >>build a debug version of the server, suitable for gdb and the like. > >>Please try it out and let us know how it works. > >> > >> > > > >I'm trying this on FC5test1 to see if I can build FDS against gcj. > > > Hmm - if you just want to check our java code, you might want to just > build the Java based components with gcj - > http://directory.fedora.redhat.com/wiki/BuildingConsole and the like. > But I suppose you will want to test the console against the server once > it is compiled. Yeah, I'd like to compile the whole thing, if possible. > > >One > >nit is the instructions: > > > >... > >% cd to dsbuild/meta/ds > >... > > > >should read: > > > >... > >% cd dsbuild/meta/ds > >... > > > > > Done. > > >The next problem is that I can't find apr-config for FC5. All I have is > >apr-1-config. When I modify ds/mod_nss/Makefile's CONFIGURE_ARGS to > >change --with-apr-config to --with-apr-config=/usr/bin/apr-1-config the > >build fails like this: > > > > > Hmm - what version of Apache does FC5 use? Try > apr-1-config --version $ apr-1-config --version 1.2.2 > and > /usr/sbin/httpd.worker -v $ /usr/sbin/httpd.worker -v Server version: Apache/2.2.0 Server built: Jan 5 2006 06:53:51 Tom From rmeggins at redhat.com Fri Jan 20 00:40:23 2006 From: rmeggins at redhat.com (Richard Megginson) Date: Thu, 19 Jan 2006 17:40:23 -0700 Subject: [Fedora-directory-devel] Announcing Fedora DS - dsbuild with debug support In-Reply-To: <1137716902.2691.11.camel@tortoise.toronto.redhat.com> References: <43D0191C.5070406@redhat.com> <1137715019.2691.7.camel@tortoise.toronto.redhat.com> <43D02BF8.9080500@redhat.com> <1137716902.2691.11.camel@tortoise.toronto.redhat.com> Message-ID: <43D03177.2050703@redhat.com> Thomas Fitzsimmons wrote: >On Thu, 2006-01-19 at 17:16 -0700, Richard Megginson wrote: > > >>Thomas Fitzsimmons wrote: >> >> >> >>>On Thu, 2006-01-19 at 15:56 -0700, Richard Megginson wrote: >>> >>> >>> >>> >>>>Now you can use the one step build method - >>>>http://directory.fedora.redhat.com/wiki/Building#One-Step_Build - to >>>>build a debug version of the server, suitable for gdb and the like. >>>>Please try it out and let us know how it works. >>>> >>>> >>>> >>>> >>>I'm trying this on FC5test1 to see if I can build FDS against gcj. >>> >>> >>> >>Hmm - if you just want to check our java code, you might want to just >>build the Java based components with gcj - >>http://directory.fedora.redhat.com/wiki/BuildingConsole and the like. >>But I suppose you will want to test the console against the server once >>it is compiled. >> >> > >Yeah, I'd like to compile the whole thing, if possible. > > > >>>One >>>nit is the instructions: >>> >>>... >>>% cd to dsbuild/meta/ds >>>... >>> >>>should read: >>> >>>... >>>% cd dsbuild/meta/ds >>>... >>> >>> >>> >>> >>Done. >> >> >> >>>The next problem is that I can't find apr-config for FC5. All I have is >>>apr-1-config. When I modify ds/mod_nss/Makefile's CONFIGURE_ARGS to >>>change --with-apr-config to --with-apr-config=/usr/bin/apr-1-config the >>>build fails like this: >>> >>> >>> >>> >>Hmm - what version of Apache does FC5 use? Try >>apr-1-config --version >> >> > >$ apr-1-config --version >1.2.2 > > > >>and >>/usr/sbin/httpd.worker -v >> >> > >$ /usr/sbin/httpd.worker -v >Server version: Apache/2.2.0 >Server built: Jan 5 2006 06:53:51 > > Ah. It looks as though there will be some porting work - darn - why the heck did they have to change the include files used for modules from Apache 2.0 to Apache 2.2 :-( >Tom > > >-- >Fedora-directory-devel mailing list >Fedora-directory-devel at redhat.com >https://www.redhat.com/mailman/listinfo/fedora-directory-devel > > -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3178 bytes Desc: S/MIME Cryptographic Signature URL: From fitzsim at redhat.com Fri Jan 20 00:48:33 2006 From: fitzsim at redhat.com (Thomas Fitzsimmons) Date: Thu, 19 Jan 2006 19:48:33 -0500 Subject: [Fedora-directory-devel] Announcing Fedora DS - dsbuild with debug support In-Reply-To: <43D03177.2050703@redhat.com> References: <43D0191C.5070406@redhat.com> <1137715019.2691.7.camel@tortoise.toronto.redhat.com> <43D02BF8.9080500@redhat.com> <1137716902.2691.11.camel@tortoise.toronto.redhat.com> <43D03177.2050703@redhat.com> Message-ID: <1137718113.1883.1.camel@tortoise.toronto.redhat.com> On Thu, 2006-01-19 at 17:40 -0700, Richard Megginson wrote: > Thomas Fitzsimmons wrote: > > >On Thu, 2006-01-19 at 17:16 -0700, Richard Megginson wrote: > > > > > >>Thomas Fitzsimmons wrote: > >> > >> > >> > >>>On Thu, 2006-01-19 at 15:56 -0700, Richard Megginson wrote: > >>> > >>> > >>> > >>> > >>>>Now you can use the one step build method - > >>>>http://directory.fedora.redhat.com/wiki/Building#One-Step_Build - to > >>>>build a debug version of the server, suitable for gdb and the like. > >>>>Please try it out and let us know how it works. > >>>> > >>>> > >>>> > >>>> > >>>I'm trying this on FC5test1 to see if I can build FDS against gcj. > >>> > >>> > >>> > >>Hmm - if you just want to check our java code, you might want to just > >>build the Java based components with gcj - > >>http://directory.fedora.redhat.com/wiki/BuildingConsole and the like. > >>But I suppose you will want to test the console against the server once > >>it is compiled. > >> > >> > > > >Yeah, I'd like to compile the whole thing, if possible. > > > > > > > >>>One > >>>nit is the instructions: > >>> > >>>... > >>>% cd to dsbuild/meta/ds > >>>... > >>> > >>>should read: > >>> > >>>... > >>>% cd dsbuild/meta/ds > >>>... > >>> > >>> > >>> > >>> > >>Done. > >> > >> > >> > >>>The next problem is that I can't find apr-config for FC5. All I have is > >>>apr-1-config. When I modify ds/mod_nss/Makefile's CONFIGURE_ARGS to > >>>change --with-apr-config to --with-apr-config=/usr/bin/apr-1-config the > >>>build fails like this: > >>> > >>> > >>> > >>> > >>Hmm - what version of Apache does FC5 use? Try > >>apr-1-config --version > >> > >> > > > >$ apr-1-config --version > >1.2.2 > > > > > > > >>and > >>/usr/sbin/httpd.worker -v > >> > >> > > > >$ /usr/sbin/httpd.worker -v > >Server version: Apache/2.2.0 > >Server built: Jan 5 2006 06:53:51 > > > > > Ah. It looks as though there will be some porting work - darn - why the > heck did they have to change the include files used for modules from > Apache 2.0 to Apache 2.2 :-( Joe Orton (CCed) may know; Joe is there some compatibility package I can install to work around 2.0 -> 2.2 header differences? Tom > > >Tom > > > > > >-- > >Fedora-directory-devel mailing list > >Fedora-directory-devel at redhat.com > >https://www.redhat.com/mailman/listinfo/fedora-directory-devel > > > > > -- > Fedora-directory-devel mailing list > Fedora-directory-devel at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-devel From rmeggins at redhat.com Fri Jan 20 00:52:53 2006 From: rmeggins at redhat.com (Richard Megginson) Date: Thu, 19 Jan 2006 17:52:53 -0700 Subject: [Fedora-directory-devel] Announcing Fedora DS - dsbuild with debug support In-Reply-To: <1137718113.1883.1.camel@tortoise.toronto.redhat.com> References: <43D0191C.5070406@redhat.com> <1137715019.2691.7.camel@tortoise.toronto.redhat.com> <43D02BF8.9080500@redhat.com> <1137716902.2691.11.camel@tortoise.toronto.redhat.com> <43D03177.2050703@redhat.com> <1137718113.1883.1.camel@tortoise.toronto.redhat.com> Message-ID: <43D03465.3010003@redhat.com> Thomas Fitzsimmons wrote: >On Thu, 2006-01-19 at 17:40 -0700, Richard Megginson wrote: > > >>Thomas Fitzsimmons wrote: >> >> >> >>>On Thu, 2006-01-19 at 17:16 -0700, Richard Megginson wrote: >>> >>> >>> >>> >>>>Thomas Fitzsimmons wrote: >>>> >>>> >>>> >>>> >>>> >>>>>On Thu, 2006-01-19 at 15:56 -0700, Richard Megginson wrote: >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>>>Now you can use the one step build method - >>>>>>http://directory.fedora.redhat.com/wiki/Building#One-Step_Build - to >>>>>>build a debug version of the server, suitable for gdb and the like. >>>>>>Please try it out and let us know how it works. >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>I'm trying this on FC5test1 to see if I can build FDS against gcj. >>>>> >>>>> >>>>> >>>>> >>>>> >>>>Hmm - if you just want to check our java code, you might want to just >>>>build the Java based components with gcj - >>>>http://directory.fedora.redhat.com/wiki/BuildingConsole and the like. >>>>But I suppose you will want to test the console against the server once >>>>it is compiled. >>>> >>>> >>>> >>>> >>>Yeah, I'd like to compile the whole thing, if possible. >>> >>> >>> >>> >>> >>>>>One >>>>>nit is the instructions: >>>>> >>>>>... >>>>>% cd to dsbuild/meta/ds >>>>>... >>>>> >>>>>should read: >>>>> >>>>>... >>>>>% cd dsbuild/meta/ds >>>>>... >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>Done. >>>> >>>> >>>> >>>> >>>> >>>>>The next problem is that I can't find apr-config for FC5. All I have is >>>>>apr-1-config. When I modify ds/mod_nss/Makefile's CONFIGURE_ARGS to >>>>>change --with-apr-config to --with-apr-config=/usr/bin/apr-1-config the >>>>>build fails like this: >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>Hmm - what version of Apache does FC5 use? Try >>>>apr-1-config --version >>>> >>>> >>>> >>>> >>>$ apr-1-config --version >>>1.2.2 >>> >>> >>> >>> >>> >>>>and >>>>/usr/sbin/httpd.worker -v >>>> >>>> >>>> >>>> >>>$ /usr/sbin/httpd.worker -v >>>Server version: Apache/2.2.0 >>>Server built: Jan 5 2006 06:53:51 >>> >>> >>> >>> >>Ah. It looks as though there will be some porting work - darn - why the >>heck did they have to change the include files used for modules from >>Apache 2.0 to Apache 2.2 :-( >> >> > >Joe Orton (CCed) may know; Joe is there some compatibility package I can >install to work around 2.0 -> 2.2 header differences? > > Or better yet - is there a way we can change our module code so that it compiles with Apache 2.0 and 2.2? >Tom > > > >>>Tom >>> >>> >>>-- >>>Fedora-directory-devel mailing list >>>Fedora-directory-devel at redhat.com >>>https://www.redhat.com/mailman/listinfo/fedora-directory-devel >>> >>> >>> >>> >>-- >>Fedora-directory-devel mailing list >>Fedora-directory-devel at redhat.com >>https://www.redhat.com/mailman/listinfo/fedora-directory-devel >> >> > >-- >Fedora-directory-devel mailing list >Fedora-directory-devel at redhat.com >https://www.redhat.com/mailman/listinfo/fedora-directory-devel > > -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3178 bytes Desc: S/MIME Cryptographic Signature URL: From fitzsim at redhat.com Fri Jan 20 01:17:15 2006 From: fitzsim at redhat.com (Thomas Fitzsimmons) Date: Thu, 19 Jan 2006 20:17:15 -0500 Subject: [Fedora-directory-devel] Announcing Fedora DS - dsbuild with debug support In-Reply-To: <43D03465.3010003@redhat.com> References: <43D0191C.5070406@redhat.com> <1137715019.2691.7.camel@tortoise.toronto.redhat.com> <43D02BF8.9080500@redhat.com> <1137716902.2691.11.camel@tortoise.toronto.redhat.com> <43D03177.2050703@redhat.com> <1137718113.1883.1.camel@tortoise.toronto.redhat.com> <43D03465.3010003@redhat.com> Message-ID: <1137719835.1883.2.camel@tortoise.toronto.redhat.com> On Thu, 2006-01-19 at 17:52 -0700, Richard Megginson wrote: > Thomas Fitzsimmons wrote: > > >On Thu, 2006-01-19 at 17:40 -0700, Richard Megginson wrote: > > > > > >>Thomas Fitzsimmons wrote: > >> > >> > >> > >>>On Thu, 2006-01-19 at 17:16 -0700, Richard Megginson wrote: > >>> > >>> > >>> > >>> > >>>>Thomas Fitzsimmons wrote: > >>>> > >>>> > >>>> > >>>> > >>>> > >>>>>On Thu, 2006-01-19 at 15:56 -0700, Richard Megginson wrote: > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>>>Now you can use the one step build method - > >>>>>>http://directory.fedora.redhat.com/wiki/Building#One-Step_Build - to > >>>>>>build a debug version of the server, suitable for gdb and the like. > >>>>>>Please try it out and let us know how it works. > >>>>>> > >>>>>> > >>>>>> > >>>>>> > >>>>>> > >>>>>> > >>>>>I'm trying this on FC5test1 to see if I can build FDS against gcj. > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>Hmm - if you just want to check our java code, you might want to just > >>>>build the Java based components with gcj - > >>>>http://directory.fedora.redhat.com/wiki/BuildingConsole and the like. > >>>>But I suppose you will want to test the console against the server once > >>>>it is compiled. > >>>> > >>>> > >>>> > >>>> > >>>Yeah, I'd like to compile the whole thing, if possible. > >>> > >>> > >>> > >>> > >>> > >>>>>One > >>>>>nit is the instructions: > >>>>> > >>>>>... > >>>>>% cd to dsbuild/meta/ds > >>>>>... > >>>>> > >>>>>should read: > >>>>> > >>>>>... > >>>>>% cd dsbuild/meta/ds > >>>>>... > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>Done. > >>>> > >>>> > >>>> > >>>> > >>>> > >>>>>The next problem is that I can't find apr-config for FC5. All I have is > >>>>>apr-1-config. When I modify ds/mod_nss/Makefile's CONFIGURE_ARGS to > >>>>>change --with-apr-config to --with-apr-config=/usr/bin/apr-1-config the > >>>>>build fails like this: > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>Hmm - what version of Apache does FC5 use? Try > >>>>apr-1-config --version > >>>> > >>>> > >>>> > >>>> > >>>$ apr-1-config --version > >>>1.2.2 > >>> > >>> > >>> > >>> > >>> > >>>>and > >>>>/usr/sbin/httpd.worker -v > >>>> > >>>> > >>>> > >>>> > >>>$ /usr/sbin/httpd.worker -v > >>>Server version: Apache/2.2.0 > >>>Server built: Jan 5 2006 06:53:51 > >>> > >>> > >>> > >>> > >>Ah. It looks as though there will be some porting work - darn - why the > >>heck did they have to change the include files used for modules from > >>Apache 2.0 to Apache 2.2 :-( > >> > >> > > > >Joe Orton (CCed) may know; Joe is there some compatibility package I can > >install to work around 2.0 -> 2.2 header differences? > > > > > Or better yet - is there a way we can change our module code so that it > compiles with Apache 2.0 and 2.2? Re-posting the build errors for Joe's inspection: /bin/sh ./libtool --mode=compile cc -DPACKAGE_NAME=\"\" -DPACKAGE_TARNAME=\"\" -DPACKAGE_VERSION=\"\" -DPACKAGE_STRING=\"\" -DPACKAGE_BUGREPORT=\"\" -DPACKAGE=\"mod_nss\" -DVERSIO N=\"1.0\" -DSTDC_HEADERS=1 -DHAVE_SYS_TYPES_H=1 -DHAVE_SYS_STAT_H=1 -DHAVE_STDLIB_H=1 -DHAVE_STRING_H=1 -DHAVE_MEMORY_H=1 -DHAVE_STRINGS_H=1 -DHAVE_INTTYPES_H=1 -DHAVE_STDINT_H=1 -DHAVE_UNISTD_H=1 -DHAVE_DLFCN_H=1 -DSTDC_HEADERS=1 -DHAVE_UNISTD_H=1 -DYYTEXT_POINTER=1 -I. -I. -I/usr/include/httpd -I/home/fitzsim/sources/dsbuild/ds/mozilla/work/mozilla/dist /Linux2.6_x86_glibc_PTH_OPT.OBJ/include -I/home/fitzsim/sources/dsbuild/ds/mozilla/work/mozilla/dist/public/nss -I/usr/include/apr-1 -I/tmp/fedora-ds-build/include -I/tmp/fedor a-ds-build/include -I/tmp/fedora-ds-build/include -DWANT_SSL2 -I/tmp/fedora-ds-build/include -L/tmp/fedora-ds-build/lib -O2 -pipe -I/tmp/fedora-ds-build/include -L/tmp/fedora-ds-b uild/lib -O2 -pipe -I/tmp/fedora-ds-build/include -L/tmp/fedora-ds-build/lib -O2 -pipe -c -o mod_nss.lo `test -f 'mod_nss.c' || echo './'`mod_nss.c mkdir .libs cc -DPACKAGE_NAME=\"\" -DPACKAGE_TARNAME=\"\" -DPACKAGE_VERSION=\"\" -DPACKAGE_STRING=\"\" -DPACKAGE_BUGREPORT=\"\" -DPACKAGE=\"mod_nss\" -DVERSION=\"1.0\" -DSTDC_HEADERS=1 -DHAVE _SYS_TYPES_H=1 -DHAVE_SYS_STAT_H=1 -DHAVE_STDLIB_H=1 -DHAVE_STRING_H=1 -DHAVE_MEMORY_H=1 -DHAVE_STRINGS_H=1 -DHAVE_INTTYPES_H=1 -DHAVE_STDINT_H=1 -DHAVE_UNISTD_H=1 -DHAVE_DLFCN_H= 1 -DSTDC_HEADERS=1 -DHAVE_UNISTD_H=1 -DYYTEXT_POINTER=1 -I. -I. -I/usr/include/httpd -I/home/fitzsim/sources/dsbuild/ds/mozilla/work/mozilla/dist/Linux2.6_x86_glibc_PTH_OPT.OBJ/in clude -I/home/fitzsim/sources/dsbuild/ds/mozilla/work/mozilla/dist/public/nss -I/usr/include/apr-1 -I/tmp/fedora-ds-build/include -I/tmp/fedora-ds-build/include -I/tmp/fedora-ds-b uild/include -DWANT_SSL2 -I/tmp/fedora-ds-build/include -L/tmp/fedora-ds-build/lib -O2 -pipe -I/tmp/fedora-ds-build/include -L/tmp/fedora-ds-build/lib -O2 -pipe -I/tmp/fedora-ds-b uild/include -L/tmp/fedora-ds-build/lib -O2 -pipe -c mod_nss.c -MT mod_nss.lo -MD -MP -MF .deps/mod_nss.TPlo -fPIC -DPIC -o .libs/mod_nss.lo In file included from /usr/include/httpd/ap_config.h:25, from /usr/include/httpd/httpd.h:43, from mod_nss.h:20, from mod_nss.c:16: /usr/include/apr-1/apr.h:270: error: expected '=', ',', ';', 'asm' or '__attribute__' before 'apr_off_t' In file included from /usr/include/apr-1/apr_file_io.h:29, from /usr/include/apr-1/apr_network_io.h:26, from /usr/include/httpd/httpd.h:53, from mod_nss.h:20, from mod_nss.c:16: /usr/include/apr-1/apr_file_info.h:204: error: expected specifier-qualifier-list before 'apr_off_t' In file included from /usr/include/apr-1/apr_network_io.h:26, from /usr/include/httpd/httpd.h:53, from mod_nss.h:20, from mod_nss.c:16: /usr/include/apr-1/apr_file_io.h:548: error: expected declaration specifiers or '...' before 'apr_off_t' /usr/include/apr-1/apr_file_io.h:740: error: expected declaration specifiers or '...' before 'apr_off_t' In file included from /usr/include/httpd/httpd.h:53, from mod_nss.h:20, from mod_nss.c:16: /usr/include/apr-1/apr_network_io.h:545: error: expected declaration specifiers or '...' before 'apr_off_t' In file included from /usr/include/apr-1/apr_buckets.h:32, from /usr/include/httpd/httpd.h:54, from mod_nss.h:20, from mod_nss.c:16: /usr/include/apr-1/apr_mmap.h:134: error: expected declaration specifiers or '...' before 'apr_off_t' /usr/include/apr-1/apr_mmap.h:161: error: expected declaration specifiers or '...' before 'apr_off_t' In file included from /usr/include/httpd/httpd.h:54, from mod_nss.h:20, from mod_nss.c:16: /usr/include/apr-1/apr_buckets.h:242: error: expected specifier-qualifier-list before 'apr_off_t' /usr/include/apr-1/apr_buckets.h:706: error: expected declaration specifiers or '...' before 'apr_off_t' /usr/include/apr-1/apr_buckets.h:718: error: expected declaration specifiers or '...' before 'apr_off_t' /usr/include/apr-1/apr_buckets.h:754: error: expected declaration specifiers or '...' before 'apr_off_t' /usr/include/apr-1/apr_buckets.h:890: error: expected declaration specifiers or '...' before 'apr_off_t' /usr/include/apr-1/apr_buckets.h:891: error: expected declaration specifiers or '...' before 'apr_off_t' /usr/include/apr-1/apr_buckets.h:1168: error: expected declaration specifiers or '...' before 'apr_off_t' /usr/include/apr-1/apr_buckets.h:1367: error: expected declaration specifiers or '...' before 'apr_off_t' /usr/include/apr-1/apr_buckets.h:1381: error: expected declaration specifiers or '...' before 'apr_off_t' /usr/include/apr-1/apr_buckets.h:1431: error: expected declaration specifiers or '...' before 'apr_off_t' /usr/include/apr-1/apr_buckets.h:1447: error: expected declaration specifiers or '...' before 'apr_off_t' In file included from mod_nss.h:20, from mod_nss.c:16: /usr/include/httpd/httpd.h:826: error: expected specifier-qualifier-list before 'apr_off_t' In file included from /usr/include/httpd/http_core.h:32, from mod_nss.h:22, from mod_nss.c:16: /usr/include/httpd/util_filter.h:142: error: expected declaration specifiers or '...' before 'apr_off_t' /usr/include/httpd/util_filter.h:299: error: expected declaration specifiers or '...' before 'apr_off_t' In file included from mod_nss.h:22, from mod_nss.c:16: /usr/include/httpd/http_core.h:229: error: expected '=', ',', ';', 'asm' or '__attribute__' before 'ap_get_limit_req_body' /usr/include/httpd/http_core.h:672: error: expected declaration specifiers or '...' before 'apr_off_t' In file included from mod_nss.h:27, from mod_nss.c:16: /usr/include/httpd/http_protocol.h:111: error: expected declaration specifiers or '...' before 'apr_off_t' /usr/include/httpd/http_protocol.h:203: error: expected declaration specifiers or '...' before 'apr_off_t' In file included from /usr/include/httpd/mpm.h:28, from mod_nss.h:30, from mod_nss.c:16: /usr/include/httpd/scoreboard.h:116: error: expected specifier-qualifier-list before 'apr_off_t' In file included from mod_nss.h:32, from mod_nss.c:16: /usr/include/apr-1/apr_strings.h:297: error: expected declaration specifiers or '...' before 'apr_off_t' /usr/include/apr-1/apr_strings.h:313: error: expected ')' before '*' token /usr/include/apr-1/apr_strings.h:349: error: expected ')' before 'size' make[2]: *** [mod_nss.lo] Error 1 make[2]: Leaving directory `/home/fitzsim/sources/dsbuild/ds/mod_nss/work/mod_nss-1.0' make[1]: *** [build-work/mod_nss-1.0/Makefile] Error 2 make[1]: Leaving directory `/home/fitzsim/sources/dsbuild/ds/mod_nss' make: *** [dep-../../ds/mod_nss] Error 2 Tom > > >Tom > > > > > > > >>>Tom > >>> > >>> > >>>-- > >>>Fedora-directory-devel mailing list > >>>Fedora-directory-devel at redhat.com > >>>https://www.redhat.com/mailman/listinfo/fedora-directory-devel > >>> > >>> > >>> > >>> > >>-- > >>Fedora-directory-devel mailing list > >>Fedora-directory-devel at redhat.com > >>https://www.redhat.com/mailman/listinfo/fedora-directory-devel > >> > >> > > > >-- > >Fedora-directory-devel mailing list > >Fedora-directory-devel at redhat.com > >https://www.redhat.com/mailman/listinfo/fedora-directory-devel > > > > > -- > Fedora-directory-devel mailing list > Fedora-directory-devel at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-devel From akb1975 at yahoo.com Fri Jan 20 11:23:45 2006 From: akb1975 at yahoo.com (ALI KATOUZIAN) Date: Fri, 20 Jan 2006 03:23:45 -0800 (PST) Subject: [Fedora-directory-devel] hello a technical Q? Message-ID: <20060120112345.22453.qmail@web50201.mail.yahoo.com> Hello A;ll, I have convdate on my system. I cannot use it though! how can I activate this command and get it running? thank you regards, Ali Ali Katouzian MSc, BEng, Dipl.-Ing. --------------------------------- Yahoo! Autos. Looking for a sweet ride? Get pricing, reviews, & more on new and used cars. -------------- next part -------------- An HTML attachment was scrubbed... URL: From rcritten at redhat.com Fri Jan 20 13:42:14 2006 From: rcritten at redhat.com (Rob Crittenden) Date: Fri, 20 Jan 2006 08:42:14 -0500 Subject: [Fedora-directory-devel] Announcing Fedora DS - dsbuild with debug support In-Reply-To: <43D03465.3010003@redhat.com> References: <43D0191C.5070406@redhat.com> <1137715019.2691.7.camel@tortoise.toronto.redhat.com> <43D02BF8.9080500@redhat.com> <1137716902.2691.11.camel@tortoise.toronto.redhat.com> <43D03177.2050703@redhat.com> <1137718113.1883.1.camel@tortoise.toronto.redhat.com> <43D03465.3010003@redhat.com> Message-ID: <43D0E8B6.9020805@redhat.com> Richard Megginson wrote: > Thomas Fitzsimmons wrote: > >> On Thu, 2006-01-19 at 17:40 -0700, Richard Megginson wrote: >> >> >>> Thomas Fitzsimmons wrote: >>> >>> >>> >>>> On Thu, 2006-01-19 at 17:16 -0700, Richard Megginson wrote: >>>> >>>> >>>> >>>> >>>>> Thomas Fitzsimmons wrote: >>>>> >>>>> >>>>> >>>>> >>>>>> On Thu, 2006-01-19 at 15:56 -0700, Richard Megginson wrote: >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>>> Now you can use the one step build method - >>>>>>> http://directory.fedora.redhat.com/wiki/Building#One-Step_Build - >>>>>>> to build a debug version of the server, suitable for gdb and the >>>>>>> like. Please try it out and let us know how it works. >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>> >>>>>> I'm trying this on FC5test1 to see if I can build FDS against gcj. >>>>>> >>>>>> >>>>>> >>>>> >>>>> Hmm - if you just want to check our java code, you might want to >>>>> just build the Java based components with gcj - >>>>> http://directory.fedora.redhat.com/wiki/BuildingConsole and the >>>>> like. But I suppose you will want to test the console against the >>>>> server once it is compiled. >>>>> >>>>> >>>> >>>> Yeah, I'd like to compile the whole thing, if possible. >>>> >>>> >>>> >>>> >>>> >>>>>> One >>>>>> nit is the instructions: >>>>>> >>>>>> ... >>>>>> % cd to dsbuild/meta/ds >>>>>> ... >>>>>> >>>>>> should read: >>>>>> >>>>>> ... >>>>>> % cd dsbuild/meta/ds >>>>>> ... >>>>>> >>>>>> >>>>>> >>>>>> >>>>> >>>>> Done. >>>>> >>>>> >>>>> >>>>> >>>>>> The next problem is that I can't find apr-config for FC5. All I >>>>>> have is >>>>>> apr-1-config. When I modify ds/mod_nss/Makefile's CONFIGURE_ARGS to >>>>>> change --with-apr-config to >>>>>> --with-apr-config=/usr/bin/apr-1-config the >>>>>> build fails like this: >>>>>> >>>>>> >>>>>> >>>>>> >>>>> >>>>> Hmm - what version of Apache does FC5 use? Try >>>>> apr-1-config --version >>>>> >>>>> >>>> >>>> $ apr-1-config --version >>>> 1.2.2 >>>> >>>> >>>> >>>> >>>> >>>>> and >>>>> /usr/sbin/httpd.worker -v >>>>> >>>>> >>>> >>>> $ /usr/sbin/httpd.worker -v >>>> Server version: Apache/2.2.0 >>>> Server built: Jan 5 2006 06:53:51 >>>> >>>> >>>> >>> >>> Ah. It looks as though there will be some porting work - darn - why >>> the heck did they have to change the include files used for modules >>> from Apache 2.0 to Apache 2.2 :-( >>> >> >> >> Joe Orton (CCed) may know; Joe is there some compatibility package I can >> install to work around 2.0 -> 2.2 header differences? >> >> > Or better yet - is there a way we can change our module code so that it > compiles with Apache 2.0 and 2.2? The mod_nss tip does compile against either version. It hasn't been heavily tested against 2.2 but I had no problems in my limited testing. rob -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3178 bytes Desc: S/MIME Cryptographic Signature URL: From jorton at redhat.com Fri Jan 20 10:43:13 2006 From: jorton at redhat.com (Joe Orton) Date: Fri, 20 Jan 2006 10:43:13 +0000 Subject: [Fedora-directory-devel] Announcing Fedora DS - dsbuild with debug support In-Reply-To: <1137719835.1883.2.camel@tortoise.toronto.redhat.com> References: <43D0191C.5070406@redhat.com> <1137715019.2691.7.camel@tortoise.toronto.redhat.com> <43D02BF8.9080500@redhat.com> <1137716902.2691.11.camel@tortoise.toronto.redhat.com> <43D03177.2050703@redhat.com> <1137718113.1883.1.camel@tortoise.toronto.redhat.com> <43D03465.3010003@redhat.com> <1137719835.1883.2.camel@tortoise.toronto.redhat.com> Message-ID: <20060120104313.GA18845@redhat.com> On Thu, Jan 19, 2006 at 08:17:15PM -0500, Thomas Fitzsimmons wrote: ... > uild/include -L/tmp/fedora-ds-build/lib -O2 -pipe -c mod_nss.c -MT > mod_nss.lo -MD -MP -MF .deps/mod_nss.TPlo -fPIC -DPIC > -o .libs/mod_nss.lo > In file included from /usr/include/httpd/ap_config.h:25, > from /usr/include/httpd/httpd.h:43, > from mod_nss.h:20, > from mod_nss.c:16: > /usr/include/apr-1/apr.h:270: error: expected '=', ',', ';', 'asm' or > '__attribute__' before 'apr_off_t' Yes, it is possible to make a module compatible with both 2.0 and 2.2; any 2.0 module which doesn't use deprecated interfaces should work without any source code changes in general. You must add the output of: `$apr_config --cppflags --includes --cflags` to CFLAGS when building; where $apr_config is the path to the apr-config or apr-1-config script. The above error is because you've not picked up -D_LARGEFILE64_SOURCE so off64_t is not defined. Let me know if you have any other problems. Regards, joe From rmeggins at redhat.com Fri Jan 20 17:20:07 2006 From: rmeggins at redhat.com (Richard Megginson) Date: Fri, 20 Jan 2006 10:20:07 -0700 Subject: [Fedora-directory-devel] Announcing Fedora DS - dsbuild with debug support In-Reply-To: <20060120104313.GA18845@redhat.com> References: <43D0191C.5070406@redhat.com> <1137715019.2691.7.camel@tortoise.toronto.redhat.com> <43D02BF8.9080500@redhat.com> <1137716902.2691.11.camel@tortoise.toronto.redhat.com> <43D03177.2050703@redhat.com> <1137718113.1883.1.camel@tortoise.toronto.redhat.com> <43D03465.3010003@redhat.com> <1137719835.1883.2.camel@tortoise.toronto.redhat.com> <20060120104313.GA18845@redhat.com> Message-ID: <43D11BC7.6020108@redhat.com> Joe Orton wrote: >On Thu, Jan 19, 2006 at 08:17:15PM -0500, Thomas Fitzsimmons wrote: >... > > >>uild/include -L/tmp/fedora-ds-build/lib -O2 -pipe -c mod_nss.c -MT >>mod_nss.lo -MD -MP -MF .deps/mod_nss.TPlo -fPIC -DPIC >>-o .libs/mod_nss.lo >>In file included from /usr/include/httpd/ap_config.h:25, >> from /usr/include/httpd/httpd.h:43, >> from mod_nss.h:20, >> from mod_nss.c:16: >>/usr/include/apr-1/apr.h:270: error: expected '=', ',', ';', 'asm' or >>'__attribute__' before 'apr_off_t' >> >> > >Yes, it is possible to make a module compatible with both 2.0 and 2.2; >any 2.0 module which doesn't use deprecated interfaces should work >without any source code changes in general. > >You must add the output of: > > `$apr_config --cppflags --includes --cflags` > >to CFLAGS when building; where $apr_config is the path to the apr-config >or apr-1-config script. The above error is because you've not picked up >-D_LARGEFILE64_SOURCE so off64_t is not defined. > > It looks as though /usr/sbin/apxs -q EXTRA_CPPFLAGS produces the same output as apr-config --cppflags - which one is better to use for this purpose? >Let me know if you have any other problems. > >Regards, > >joe > >-- >Fedora-directory-devel mailing list >Fedora-directory-devel at redhat.com >https://www.redhat.com/mailman/listinfo/fedora-directory-devel > > -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3178 bytes Desc: S/MIME Cryptographic Signature URL: From neil.lane at intelliform.co.za Mon Jan 30 10:24:33 2006 From: neil.lane at intelliform.co.za (Neil Lane) Date: Mon, 30 Jan 2006 12:24:33 +0200 Subject: [Fedora-directory-devel] Cert Message-ID: <000501c62587$5d05ed40$3060fea9@NeilLaptop> HI All I am in the process of writing a custom login module using LDAP. I am attempting to use a cert (PKCS12 Cert) for the users "password". I would like to load the cert from a keystore and validate it against the LDAP entries userPKCS12 attribute. Please can someone let me know if this is possible and then let me know how this may be achieved. Any assistance would be appreciated. Thanks Neil Lane -------------- next part -------------- An HTML attachment was scrubbed... URL: From rmeggins at redhat.com Mon Jan 30 17:27:15 2006 From: rmeggins at redhat.com (Richard Megginson) Date: Mon, 30 Jan 2006 10:27:15 -0700 Subject: [Fedora-directory-devel] Cert In-Reply-To: <000501c62587$5d05ed40$3060fea9@NeilLaptop> References: <000501c62587$5d05ed40$3060fea9@NeilLaptop> Message-ID: <43DE4C73.2000901@redhat.com> Neil Lane wrote: > HI All > > I am in the process of writing a custom login module using LDAP. > > I am attempting to use a cert (PKCS12 Cert) for the users ?password?. > > I would like to load the cert from a keystore and validate it against > the LDAP entries userPKCS12 attribute. > > Please can someone let me know if this is possible and then let me > know how this may be achieved. > > Any assistance would be appreciated. > Fedora DS supports client certificate based authentication, so I'm not sure why you need to do something similar. See http://www.redhat.com/docs/manuals/dir-server/ag/7.1/ssl.html#1053102 and http://directory.fedora.redhat.com/wiki/Howto:CertMapping > Thanks > > Neil Lane > >------------------------------------------------------------------------ > >-- >Fedora-directory-devel mailing list >Fedora-directory-devel at redhat.com >https://www.redhat.com/mailman/listinfo/fedora-directory-devel > > -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3178 bytes Desc: S/MIME Cryptographic Signature URL: From neil.lane at intelliform.co.za Tue Jan 31 07:18:31 2006 From: neil.lane at intelliform.co.za (Neil Lane) Date: Tue, 31 Jan 2006 09:18:31 +0200 Subject: [Fedora-directory-devel] Cert In-Reply-To: <43DE4C73.2000901@redhat.com> Message-ID: <002d01c62636$8ab84760$3060fea9@NeilLaptop> Is there any way to install a trusted CA through the commandline??? I am having major issues with starting the admin console, logging in and modifying entries as the user I log in as. I have had a look through the ldapmodify docs but no joy yet. Any Ideas??? -----Original Message----- From: fedora-directory-devel-bounces at redhat.com [mailto:fedora-directory-devel-bounces at redhat.com] On Behalf Of Richard Megginson Sent: 30 January 2006 07:27 PM To: Fedora Directory server developer discussion. Subject: Re: [Fedora-directory-devel] Cert Neil Lane wrote: > HI All > > I am in the process of writing a custom login module using LDAP. > > I am attempting to use a cert (PKCS12 Cert) for the users "password". > > I would like to load the cert from a keystore and validate it against > the LDAP entries userPKCS12 attribute. > > Please can someone let me know if this is possible and then let me > know how this may be achieved. > > Any assistance would be appreciated. > Fedora DS supports client certificate based authentication, so I'm not sure why you need to do something similar. See http://www.redhat.com/docs/manuals/dir-server/ag/7.1/ssl.html#1053102 and http://directory.fedora.redhat.com/wiki/Howto:CertMapping > Thanks > > Neil Lane > >------------------------------------------------------------------------ > >-- >Fedora-directory-devel mailing list >Fedora-directory-devel at redhat.com >https://www.redhat.com/mailman/listinfo/fedora-directory-devel > > From heidistein at gmail.com Mon Jan 30 17:32:28 2006 From: heidistein at gmail.com (Arjen Heidinga) Date: Mon, 30 Jan 2006 18:32:28 +0100 Subject: [Fedora-directory-devel] SELinux Message-ID: <901618490601300932xc6bbf9fm7189ff66c4a3d984@mail.gmail.com> Hello, Is there a SELinux ruleset somewhere? I read somewhere that if someone knows how to set up a ruleset to inform you. (I assumed 'you' means 'developers'). I know how to set up a SeLinux ruleset thing. Thing is; this is a hell of a job... IF there is something unfinisches oid from someone i might want to use is. I could use a list or something with things that dont work with SELinux enabled, should i search the bugreports or so? Please CC to my personal mail couse i'm not on the list. Thanks Arjen Heidinga -------------- next part -------------- An HTML attachment was scrubbed... URL: From rmeggins at redhat.com Tue Jan 31 13:56:39 2006 From: rmeggins at redhat.com (Richard Megginson) Date: Tue, 31 Jan 2006 06:56:39 -0700 Subject: [Fedora-directory-devel] Cert In-Reply-To: <002d01c62636$8ab84760$3060fea9@NeilLaptop> References: <002d01c62636$8ab84760$3060fea9@NeilLaptop> Message-ID: <43DF6C97.6040602@redhat.com> Neil Lane wrote: >Is there any way to install a trusted CA through the commandline??? > > Yes, using the certutil command - see here - http://directory.fedora.redhat.com/wiki/Howto:SSL#Import_the_CA_cert_into_another_Fedora_DS If you want slapd-instance to know and trust the CA with the CA cert stored in ascii format (base64 encoded) in a file called cacert.asc: cd /opt/fedora-ds/alias ../shared/bin/certutil -A -d . -P slapd-instance- -n "CA certificate" -t "CT,," -a -i cacert.asc You'll need to shutdown slapd-instance before you do this. The -t argument sets the trust flags, and the CT means the cert you're importing is a trusted CA cert. > >I am having major issues with starting the admin console, logging in and >modifying entries as the user I log in as. > > What user are you logging in as, and what entries are you having trouble modifying? >I have had a look through the ldapmodify docs but no joy yet. > >Any Ideas??? > > > > > > >-----Original Message----- >From: fedora-directory-devel-bounces at redhat.com >[mailto:fedora-directory-devel-bounces at redhat.com] On Behalf Of Richard >Megginson >Sent: 30 January 2006 07:27 PM >To: Fedora Directory server developer discussion. >Subject: Re: [Fedora-directory-devel] Cert > >Neil Lane wrote: > > > >>HI All >> >>I am in the process of writing a custom login module using LDAP. >> >>I am attempting to use a cert (PKCS12 Cert) for the users "password". >> >>I would like to load the cert from a keystore and validate it against >>the LDAP entries userPKCS12 attribute. >> >>Please can someone let me know if this is possible and then let me >>know how this may be achieved. >> >>Any assistance would be appreciated. >> >> >> >Fedora DS supports client certificate based authentication, so I'm not >sure why you need to do something similar. >See http://www.redhat.com/docs/manuals/dir-server/ag/7.1/ssl.html#1053102 >and >http://directory.fedora.redhat.com/wiki/Howto:CertMapping > > > >>Thanks >> >>Neil Lane >> >>------------------------------------------------------------------------ >> >>-- >>Fedora-directory-devel mailing list >>Fedora-directory-devel at redhat.com >>https://www.redhat.com/mailman/listinfo/fedora-directory-devel >> >> >> >> > > >-- >Fedora-directory-devel mailing list >Fedora-directory-devel at redhat.com >https://www.redhat.com/mailman/listinfo/fedora-directory-devel > > -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3178 bytes Desc: S/MIME Cryptographic Signature URL: From rmeggins at redhat.com Tue Jan 31 14:41:47 2006 From: rmeggins at redhat.com (Richard Megginson) Date: Tue, 31 Jan 2006 07:41:47 -0700 Subject: [Fedora-directory-devel] SELinux In-Reply-To: <901618490601300932xc6bbf9fm7189ff66c4a3d984@mail.gmail.com> References: <901618490601300932xc6bbf9fm7189ff66c4a3d984@mail.gmail.com> Message-ID: <43DF772B.5030701@redhat.com> Arjen Heidinga wrote: > Hello, > > Is there a SELinux ruleset somewhere? There are rulesets in Fedora Core 5. One of the SELinux developers added them. However, that ruleset is based on an upcoming version of the software and does not apply to the current version. Paths have been moved around, files have been renamed. > I read somewhere that if someone knows how to set up a ruleset to > inform you. (I assumed 'you' means 'developers'). Yes. > I know how to set up a SeLinux ruleset thing. Thing is; this is a hell > of a job... IF there is something unfinisches oid from someone i might > want to use is. I could use a list or something with things that dont > work with SELinux enabled, should i search the bugreports or so? The main thing right now is our Admin Server. The Fedora DS 1.x Admin Server uses an instance of Apache, but it doesn't use any of the standard locations like /var/www, /var/log, or /etc/httpd. RHEL4/Fedora Core has default selinux policy for Apache but this seems to disallow certain Admin Server operations. https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174855 > > Please CC to my personal mail couse i'm not on the list. Thanks > > Arjen Heidinga > >------------------------------------------------------------------------ > >-- >Fedora-directory-devel mailing list >Fedora-directory-devel at redhat.com >https://www.redhat.com/mailman/listinfo/fedora-directory-devel > > -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3178 bytes Desc: S/MIME Cryptographic Signature URL: