Description of problem:
smbk5pwd cannot be loaded in a ldap server : the error log shows it is missing "ldap_x_utf8s_to_wcs", which is defined in /usr/lib/libldap*
Version-Release number of selected component (if applicable):
Steps to Reproduce:
0. (Not mandatory) get samba.schema and krb5-kdc.schema in your /etc/openldap/schema and include them in your slapd.conf
1. Add "moduleload smbk5pwd.la", "overlay smbk5pwd" in slapd.conf
2. Restart openldap
service ldap restart
sldapd -u ldap -d 255 -h ldap:///
3. Change a password, ie:
ldappasswd -x -D cn=admin,dc=example,dc=org -H ldap://localhost:389/ -W -S uid=someuser,ou=People,dc=example,dc=org
$ ldappasswd ...
Re-enter new password:
Enter LDAP Password:
ldap_result: Can't contact LDAP server (-1)
ldap daemon is down
and no error in the log except the last line :
slapd: symbol lookup error: /usr/lib/openldap/smbk5pwd-2.4.so.2: undefined symbol: ldap_x_utf8s_to_wcs
ldappasswd to work, slapd to not die
BTW, I didn't find a package including krb5-kdc.schema, which is needed by smbk5pwd, according to its readme (/usr/share/doc/openldap-servers-2.4.15/README.smbk5pwd)
I've made a build which could fix the issue. Could you please test it for me? You can find packages on http://jzeleny.fedorapeople.org/packages/
I'm only using x86 (32 bits) architecture. Could you rebuild these packages for this arch please ? I'll test them.
Here is a build for all architectures:
Ok, it's working very well in Release 5.fc11. Thanks !
Is there a "fix committed" flag or do this bug has to be closed ?
The issue is resolved, I'm closing this bug. I will do the build and push it to updates ASAP.
Note: Although this issue is resolved, the fix is not very clean. If there is similar problem in another part of openldap, linking libldap should be done directly for slapd binary and not for smbk5pwd.so library. This solution however spares linking (of libldap) on startup of slapd when smbk5pwd isn't used.
openldap-2.4.15-6.fc11 has been submitted as an update for Fedora 11.
openldap-2.4.15-6.fc11 has been pushed to the Fedora 11 stable repository. If problems still persist, please make note of it in this bug report.