Comments on: Building LDAP Authentication into Apache2

By: Brent

Brent — Tue, 05 Apr 2011 05:22:50 +0000

Thanks for the comment! It looks like the Apache team have finally fixed up the build of the ldap module. That only took 5 years ;-).

By: Voltaire Germinal

Voltaire Germinal — Tue, 05 Apr 2011 02:34:42 +0000

For the benefit of others who wants to install Apache with LDAP support here’s a working configuration setup that I have. Using CentOS5.5 but should also work with other flavors of Unix.

1. Install OpenLDAP from source (openldap-2.4.25.tgz)

./configure –prefix=/usr/local/openldap
–enable-cleartext \
–enable-crypt \
–enable-lmpasswd \
–enable-spasswd \
–enable-modules \
–enable-rewrite \
–enable-rlookups \
–enable-slapi \
–enable-slp \
–enable-wrappers \
–enable-ldap \
–enable-monitor \
–enable-null \
–enable-passwd \
–enable-perl \
–enable-relay \
–enable-shell \
–enable-sock

make
make install

2. Install apache from source (httpd-2.2.17.tar.gz)

./configure –prefix=/usr/local/apache \
–enable-mods-shared=all \
–enable-so \
–enable-ldap \
–enable-authnz-ldap \
–with-included-apr \
–with-ldap-lib=/usr/local/openldap/lib \
–with-ldap-include=/usr/local/openldap/include \
–with-ldap=ldap

By: Mamoru

Mamoru — Fri, 09 Jul 2010 09:28:40 +0000

I made it all at FreeBSD 7.2, apache 2.2.15
Well done. but one little fix.
Need to remove include of APR from the build/config-vars.mk (line 180)
and add includes (-I) for srclib/apr/include and srclib/apr-util/include

By: Igor

Igor — Mon, 07 Jun 2010 02:52:53 +0000

After try and fail this is the config command that finally worked for me on Solaris 10

./configure –prefix=/usr/local/apache2 –with-mpm=worker –with-included-apr …(some other options)… –with-ldap=ldap –with-ldap-lib=/usr/lib –with-ldap-include=/usr/include –enable-ldap –enable-authnz-ldap

Cheers,
Igor

By: Steve

Steve — Sat, 13 Mar 2010 04:55:34 +0000

I was getting the same problem with Apache 2.2.15 trying to configure with just the main configure script. The trick that worked for me for was to combine all the above into one step, for my setup I ran the following command in the top level apache folder:

./configure –prefix=/usr/local/apache –enable-rewrite –enable-so –enable-authnz-ldap –enable-ldap –with-included-apr –with-ldap-lib=/usr/local/openldap/lib –with-ldap-include=/usr/local/openldap/include –with-ldap=ldap

Obviously paths need to be changed, but by using the –with-ldap-lib and –with-ldap-include in the top level configure script, everything went smoothly without having to do these extra steps. Hope it helps someone else!

By: Chris Grieger

Chris Grieger — Fri, 21 Aug 2009 09:14:10 +0000

Using the switch -enable-ldap instead of –with-ldap did the job for me. (apache httpd 2.2.13 on openSuse 10.3)

By: Abidoon Nadeem

Abidoon Nadeem — Sun, 07 Jun 2009 01:54:29 +0000

There is a configuration difference for Apache 2.2.11 on CentOS 5.2

./configure –enable-deflate –enable-mime-magic –enable-expires –enable-usertrack –enable-unique-id –enable-ssl –enable-http –enable-mod-info –enable-info –enable-cgi –enable-cgid –enable-spelling –enable-module=all –enable-ldap –enable-authnz-ldap –with-ldap –with-included-apr

The “–with-included-apr” and “–with-ldap” are necessary otherwise it won’t compile and keeps giving the same error.

By: Brent

Brent — Thu, 16 Apr 2009 15:51:54 +0000

I’m pretty sure that the error message refers to the protocol “LDAP”, version 3. Not a particular implementation of the protocol, such as OpenLDAP. If you are using OpenLDAP, then it supports LDAPv3.

If you are getting the same message after OpenLDAP is installed, “Support for LDAP v2.0…”, then you probably have some old libraries on your system, and it’s using those instead of the new ones from OpenLDAP.

I just noticed in your original post that this is happening in the apr-util folder. Did you build ‘apr’ first, as per the article? It compiled cleanly?

By: D69

D69 — Thu, 16 Apr 2009 15:39:47 +0000

it’s not clear where to find LDAP toolkit 3.0.
The latest available from OpenLdap is 2.4
Apache 2.2.11 fails with it!

By: Brent

Brent — Mon, 09 Mar 2009 23:16:47 +0000

I’d say that this is your main problem:

/work/run4/httpd-2.2.11/srclib/apr-util/include/apr_ldap.h:132:2: #error Support for LDAP v2.0 toolkits has been removed from apr-util. Please use an LDAP v3.0 toolkit.

It appears that you have some old LDAP libraries installed…

By: TC

TC — Mon, 09 Mar 2009 22:35:08 +0000

I ran these steps:

cd ../apr-util
make clean
./configure –prefix=/usr/local/apache2 –with-apr=../apr \
–with-ldap-lib=/usr/lib –with-ldap-include=/usr/include \
–with-ldap=ldap
make

I got no error in the configure; however, make return
In file included from ldap/apr_ldap_stub.c:20:
/work/run4/httpd-2.2.11/srclib/apr-util/include/apr_ldap.h:132:2: #error Support for LDAP v2.0 toolkits has been removed from apr-util. Please use an LDAP v3.0 toolkit.
In file included from /work/run4/httpd-2.2.11/srclib/apr-util/include/apr_ldap.h:187,
from ldap/apr_ldap_stub.c:20:
/work/run4/httpd-2.2.11/srclib/apr-util/include/apr_ldap_init.h:141: error: parse error before “LDAP”
In file included from /work/run4/httpd-2.2.11/srclib/apr-util/include/apr_ldap.h:188,
from ldap/apr_ldap_stub.c:20:
/work/run4/httpd-2.2.11/srclib/apr-util/include/apr_ldap_option.h:219: error: parse error before “LDAP”
/work/run4/httpd-2.2.11/srclib/apr-util/include/apr_ldap_option.h:241: error: parse error before “LDAP”
In file included from /work/run4/httpd-2.2.11/srclib/apr-util/include/apr_ldap.h:189,
from ldap/apr_ldap_stub.c:20:
/work/run4/httpd-2.2.11/srclib/apr-util/include/apr_ldap_rebind.h:67: error: parse error before “LDAP”
/work/run4/httpd-2.2.11/srclib/apr-util/include/apr_ldap_rebind.h:82: error: parse error before ‘*’ token
In file included from ldap/apr_ldap_stub.c:21:
/work/run4/httpd-2.2.11/srclib/apr-util/include/private/apu_internal.h:49: error: parse error before “LDAP”
/work/run4/httpd-2.2.11/srclib/apr-util/include/private/apu_internal.h:54: error: parse error before “LDAP”
/work/run4/httpd-2.2.11/srclib/apr-util/include/private/apu_internal.h:56: error: parse error before “LDAP”
/work/run4/httpd-2.2.11/srclib/apr-util/include/private/apu_internal.h:59: error: parse error before “LDAP”
/work/run4/httpd-2.2.11/srclib/apr-util/include/private/apu_internal.h:61: error: parse error before ‘*’ token
ldap/apr_ldap_stub.c:76: error: parse error before “LDAP”
ldap/apr_ldap_stub.c: In function `apr_ldap_init’:
ldap/apr_ldap_stub.c:82: error: `pool’ undeclared (first use in this function)
ldap/apr_ldap_stub.c:82: error: (Each undeclared identifier is reported only once
ldap/apr_ldap_stub.c:82: error: for each function it appears in.)
ldap/apr_ldap_stub.c:83: error: `ldap’ undeclared (first use in this function)
ldap/apr_ldap_stub.c:83: error: `hostname’ undeclared (first use in this function)
ldap/apr_ldap_stub.c:83: error: `portno’ undeclared (first use in this function)
ldap/apr_ldap_stub.c:83: error: `secure’ undeclared (first use in this function)
ldap/apr_ldap_stub.c:83: error: `result_err’ undeclared (first use in this function)
ldap/apr_ldap_stub.c: At top level:
ldap/apr_ldap_stub.c:103: error: parse error before “LDAP”
ldap/apr_ldap_stub.c: In function `apr_ldap_get_option’:
ldap/apr_ldap_stub.c:108: error: `pool’ undeclared (first use in this function)
ldap/apr_ldap_stub.c:109: error: `ldap’ undeclared (first use in this function)
ldap/apr_ldap_stub.c:109: error: `option’ undeclared (first use in this function)
ldap/apr_ldap_stub.c:109: error: `outvalue’ undeclared (first use in this function)
ldap/apr_ldap_stub.c:109: error: `result_err’ undeclared (first use in this function)
ldap/apr_ldap_stub.c: At top level:
ldap/apr_ldap_stub.c:113: error: parse error before “LDAP”
ldap/apr_ldap_stub.c: In function `apr_ldap_set_option’:
ldap/apr_ldap_stub.c:118: error: `pool’ undeclared (first use in this function)
ldap/apr_ldap_stub.c:119: error: `ldap’ undeclared (first use in this function)
ldap/apr_ldap_stub.c:119: error: `option’ undeclared (first use in this function)
ldap/apr_ldap_stub.c:119: error: `invalue’ undeclared (first use in this function)
ldap/apr_ldap_stub.c:119: error: `result_err’ undeclared (first use in this function)
ldap/apr_ldap_stub.c: At top level:
ldap/apr_ldap_stub.c:129: error: parse error before “LDAP”
ldap/apr_ldap_stub.c: In function `apr_ldap_rebind_add’:
ldap/apr_ldap_stub.c:133: error: `pool’ undeclared (first use in this function)
ldap/apr_ldap_stub.c:134: error: `ld’ undeclared (first use in this function)
ldap/apr_ldap_stub.c:134: error: `bindDN’ undeclared (first use in this function)
ldap/apr_ldap_stub.c:134: error: `bindPW’ undeclared (first use in this function)
ldap/apr_ldap_stub.c: At top level:
ldap/apr_ldap_stub.c:137: error: parse error before ‘*’ token
ldap/apr_ldap_stub.c: In function `apr_ldap_rebind_remove’:
ldap/apr_ldap_stub.c:141: error: `ld’ undeclared (first use in this function)
make: 1254-004 The error code from the last command is 1.

Stop.
make: 1254-004 The error code from the last command is 1.

Stop.

How to get rid of these errors?

By: links for 2008-07-20 « /home/servrrockr

links for 2008-07-20 « /home/servrrockr — Sun, 20 Jul 2008 23:30:51 +0000

[...] Building LDAP Authentication into Apache2 | brent.kearneys.ca (tags: apache howto ldap) « links for 2008-07-14 [...]

By: David Alston

David Alston — Wed, 02 Jul 2008 15:54:07 +0000

the problem seems to persist through apache 2.2.9 on Solaris.. the solution above works fine with only one correction…

instead of the “–with-ldap” you have to use “–enable-ldap” option. The former is apparrently depricated (though the source code comments suggest using the old argument)

By: Brent Kearney

Brent Kearney — Tue, 19 Dec 2006 02:34:00 +0000

I believe it is because apr and apr-util don’t get compiled with the –with-ldap option, even when you add it to the top-level apache configure script. A Makefile error is my guess.

Did you run ‘make clean’ in the srclib/apr and apr-util subdirectories before running ./configure and make in those dirs? Where in the build process are you encountering problems, and what is the compile-time error?

By: Vincent

Vincent — Mon, 18 Dec 2006 22:16:37 +0000

Don’t suppose you have any knowledge as to what might have caused that “hiccough” that you experienced when dealing with version 2.0.5.8 where you had to do a reconfigure/remake?

I’ve been trying to get this authz_ldap module to compile on both 2.2.3 and 2.2 with no success whatsoever, even applying your great steps.