[squid-users] squid-7.0.2 can't configure with LDAP-helpers

Andrey K ankor2023 at gmail.com
Tue Jul 15 10:26:47 UTC 2025 

Hello, Francesco,

I found that ldap.pc has been added to the openldap package since version
2.5.
Should I manually add the file from version 2.6 to my host?

Kind regards,
    Ankor.

вт, 15 июл. 2025 г. в 12:41, Andrey K <ankor2023 at gmail.com>:

> Hello, Francesco,
>
> The output of the command:
> pkg-config --libs ldap
> Package ldap was not found in the pkg-config search path.
> Perhaps you should add the directory containing `ldap.pc'
> to the PKG_CONFIG_PATH environment variable
> Package 'ldap', required by 'virtual:world', not found
>
> However, the libldap is installed in the system as a part of the openldap
> package:
> locate libldap
> /usr/lib64/libldap-2.4.so.2
> /usr/lib64/libldap-2.4.so.2.10.9
> /usr/lib64/libldap.so
> /usr/lib64/libldap_r-2.4.so.2
> /usr/lib64/libldap_r-2.4.so.2.10.9
> /usr/lib64/libldap_r.so
>
> There is no ldap.pc file in the standard OEL openldap packages:
> openldap-devel-2.4.46-18.el8.x86_64
> openldap-2.4.46-18.el8.x86_64
>
>
> Kind regards,
>     Ankor
>
>
>
> вт, 15 июл. 2025 г. в 10:42, Francesco Chemolli <gkinkie at gmail.com>:
>
>> Hi Andrey,
>>   looking at the code changes, the main reason I can see is that
>> pkg-config needs to be present and working in order to Squid the
>> libraries it needs.
>> Could you try running
>>
>> pkg-config --libs ldap
>>
>> on your system?
>>
>> On Tue, Jul 15, 2025 at 7:13 AM Andrey K <ankor2023 at gmail.com> wrote:
>> >
>> > Hello, Francesco,
>> >
>> > I have also run a configure script with the same arguments on the Squid
>> 6.13 sources.
>> > It finished without errors.
>> >
>> > The link to the 6.13 logs:
>> https://drive.google.com/file/d/16DY4uCM5cAbsNC8NcaoM8YB6GT8oUW3-/view?usp=sharing
>> > The excerpt on the LDAP filter:
>> >
>> > grep -i ldap /tmp/configure.6.13.log
>> > checking for LIBLDAP... no
>> > checking for ldap_init in -lldap... yes
>> > checking ldap.h usability... yes
>> > checking ldap.h presence... yes
>> > checking for ldap.h... yes
>> > checking mozldap/ldap.h usability... no
>> > checking mozldap/ldap.h presence... no
>> > checking for mozldap/ldap.h... no
>> > checking for LDAP... 1
>> > checking for OpenLDAP... 1
>> > checking for Sun LDAP SDK... 0
>> > checking for Mozilla LDAP SDK... 0
>> > checking for LDAP_OPT_DEBUG_LEVEL... 1
>> > checking for LDAP_SCOPE_DEFAULT... 1
>> > checking for LDAP_REBIND_PROC... 1
>> > checking for LDAP_REBINDPROC_CALLBACK... 0
>> > checking for LDAP_REBIND_FUNCTION... 0
>> > checking for LDAP_URL_LUD_SCHEME... 0
>> > checking for ldapssl_client_init in -lldap... no
>> > checking for library containing ldap_url_desc2str... -lldap
>> > checking for library containing ldap_url_parse... none required
>> > checking for library containing ldap_start_tls_s... none required
>> > configure: checking auth/basic helpers: LDAP SMB SMB_LM
>> > checking for ldap.h... (cached) yes
>> > checking winldap.h usability... no
>> > checking winldap.h presence... no
>> > checking for winldap.h... no
>> > configure: auth/basic helpers to be built:  LDAP SMB SMB_LM
>> > configure: checking auth/digest helpers: LDAP eDirectory file
>> > checking for ldap.h... (cached) yes
>> > checking for winldap.h... (cached) no
>> > checking for ldap.h... (cached) yes
>> > checking for winldap.h... (cached) no
>> > configure: auth/digest helpers to be built:  LDAP eDirectory file
>> > configure: checking acl/external helpers: kerberos_ldap_group
>> wbinfo_group
>> > configure: acl/external helpers to be built:  kerberos_ldap_group
>> wbinfo_group
>> > config.status: creating src/acl/external/kerberos_ldap_group/Makefile
>> > config.status: creating src/acl/external/LDAP_group/Makefile
>> > config.status: creating src/auth/basic/LDAP/Makefile
>> > config.status: creating src/auth/digest/LDAP/Makefile
>> > configure: running /bin/sh ./configure --disable-option-checking
>> '--prefix=/usr/local/squid'  '--enable-auth-basic=LDAP,SMB,SMB_LM'
>> '--enable-auth-negotiate=kerberos,wrapper' '--enable-auth-ntlm=SMB_LM'
>> '--enable-external-acl-helpers=kerberos_ldap_group,wbinfo_group'
>> --cache-file=/dev/null --srcdir=.
>> >
>> >
>> > Kind regards,
>> >      Ankor.
>> >
>> >
>> >
>> >
>> >
>> > вт, 15 июл. 2025 г. в 06:05, Andrey K <ankor2023 at gmail.com>:
>> >>
>> >> Hello, Francesco,
>> >>
>> >> Thank you for the help.
>> >>
>> >> Full logs of the configure command are available at the link:
>> https://drive.google.com/file/d/1wxAmtK2PDTuS41vvM0kuAS-1TtlzZKFl/view?usp=sharing
>> >>
>> >> Here is a short excerpt on the LDAP filter:
>> >> cat /tmp/configure.log | grep -i ldap
>> >> checking for LIBLDAP... no
>> >> checking for ldap.h... yes
>> >> checking for mozldap/ldap.h... no
>> >> checking for LDAP... 1
>> >> checking for OpenLDAP... 1
>> >> checking for Sun LDAP SDK... 0
>> >> checking for Mozilla LDAP SDK... 0
>> >> checking for LDAP_OPT_DEBUG_LEVEL... 1
>> >> checking for LDAP_SCOPE_DEFAULT... 1
>> >> checking for LDAP_REBIND_PROC... 1
>> >> checking for LDAP_REBINDPROC_CALLBACK... 0
>> >> checking for LDAP_REBIND_FUNCTION... 0
>> >> checking for LDAP_URL_LUD_SCHEME... 0
>> >> checking for ldapssl_client_init in -lldap... no
>> >> checking for library containing ldap_url_desc2str... no
>> >> checking for library containing ldap_url_parse... no
>> >> checking for library containing ldap_start_tls_s... no
>> >> configure: Library 'ldap' support: no (auto)
>> >> configure: checking auth/basic helpers: LDAP SMB SMB_LM
>> >> configure: error: required helper auth/basic/LDAP ... found but cannot
>> be built
>> >>
>> >> Kind regards,
>> >>       Ankor.
>> >>
>> >>
>> >> пн, 14 июл. 2025 г. в 18:10, Francesco Chemolli <gkinkie at gmail.com>:
>> >>>
>> >>> Hi Ankor,
>> >>>   it's really hard to help you with this little context. The main
>> >>> reason why both these helpers may fail to build is because the LDAP
>> >>> libraries were not found on the system. Would you mind running on your
>> >>> system:
>> >>>
>> >>> $ ./configure --enable-auth-basic=LDAP,SMB,SMB_LM
>> >>> --enable-auth-negotiate=kerberos,wrapper --enable-auth-ntlm=SMB_LM
>> >>> --enable-external-acl-helpers=kerberos_ldap_group,wbinfo_group
>> >>> >/tmp/configure.log 2>&1 && grep -i ldap /tmp/configure.log
>> >>>
>> >>> and sharing the output from that command?
>> >>>
>> >>> On Mon, Jul 14, 2025 at 10:38 AM Andrey K <ankor2023 at gmail.com>
>> wrote:
>> >>> >
>> >>> > Hello,
>> >>> >
>> >>> > I tried to build squid-7.0.2, but ./configure failed if I use:
>> >>> > --enable-auth-basic=LDAP,SMB,SMB_LM
>> --enable-auth-negotiate=kerberos,wrapper --enable-auth-ntlm=SMB_LM
>> --enable-external-acl-helpers=kerberos_ldap_group,wbinfo_group
>> >>> >
>> >>> > configure: Authentication support enabled: yes
>> >>> > configure: checking auth/basic helpers: LDAP SMB SMB_LM
>> >>> > configure: error: required helper auth/basic/LDAP ... found but
>> cannot be built
>> >>> >
>> >>> > configure: checking acl/external helpers: kerberos_ldap_group
>> wbinfo_group
>> >>> > configure: error: required helper acl/external/kerberos_ldap_group
>> ... found but cannot be built
>> >>> >
>> >>> > When I remove the LDAP and kerberos_ldap_group options,
>> ./configure passes smoothly.
>> >>> >
>> >>> > I did not observe a similar problem in the Squid-6.
>> >>> >
>> >>> > I am building Squid on an OEL-8 Linux with installed openldap-devel
>> and openldap packages.
>> >>> >
>> >>> > Kind regards,
>> >>> >      Ankor.
>> >>> >
>> >>> >
>> >>> >
>> >>> > _______________________________________________
>> >>> > squid-users mailing list
>> >>> > squid-users at lists.squid-cache.org
>> >>> > https://lists.squid-cache.org/listinfo/squid-users
>> >>>
>> >>>
>> >>>
>> >>> --
>> >>>     Francesco
>>
>>
>>
>> --
>>     Francesco
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20250715/a709356a/attachment.htm>

More information about the squid-users mailing list