Re: squid-7.0.2 can't configure with LDAP-helpers

Hi Andrey,
  looking at the code changes, the main reason I can see is that
pkg-config needs to be present and working in order to Squid the
libraries it needs.
Could you try running

pkg-config --libs ldap

on your system?

On Tue, Jul 15, 2025 at 7:13 AM Andrey K <[email protected]> wrote:
>
> Hello, Francesco,
>
> I have also run a configure script with the same arguments on the Squid 6.13 sources.
> It finished without errors.
>
> The link to the 6.13 logs: https://drive.google.com/file/d/16DY4uCM5cAbsNC8NcaoM8YB6GT8oUW3-/view?usp=sharing
> The excerpt on the LDAP filter:
>
> grep -i ldap /tmp/configure.6.13.log
> checking for LIBLDAP... no
> checking for ldap_init in -lldap... yes
> checking ldap.h usability... yes
> checking ldap.h presence... yes
> checking for ldap.h... yes
> checking mozldap/ldap.h usability... no
> checking mozldap/ldap.h presence... no
> checking for mozldap/ldap.h... no
> checking for LDAP... 1
> checking for OpenLDAP... 1
> checking for Sun LDAP SDK... 0
> checking for Mozilla LDAP SDK... 0
> checking for LDAP_OPT_DEBUG_LEVEL... 1
> checking for LDAP_SCOPE_DEFAULT... 1
> checking for LDAP_REBIND_PROC... 1
> checking for LDAP_REBINDPROC_CALLBACK... 0
> checking for LDAP_REBIND_FUNCTION... 0
> checking for LDAP_URL_LUD_SCHEME... 0
> checking for ldapssl_client_init in -lldap... no
> checking for library containing ldap_url_desc2str... -lldap
> checking for library containing ldap_url_parse... none required
> checking for library containing ldap_start_tls_s... none required
> configure: checking auth/basic helpers: LDAP SMB SMB_LM
> checking for ldap.h... (cached) yes
> checking winldap.h usability... no
> checking winldap.h presence... no
> checking for winldap.h... no
> configure: auth/basic helpers to be built:  LDAP SMB SMB_LM
> configure: checking auth/digest helpers: LDAP eDirectory file
> checking for ldap.h... (cached) yes
> checking for winldap.h... (cached) no
> checking for ldap.h... (cached) yes
> checking for winldap.h... (cached) no
> configure: auth/digest helpers to be built:  LDAP eDirectory file
> configure: checking acl/external helpers: kerberos_ldap_group wbinfo_group
> configure: acl/external helpers to be built:  kerberos_ldap_group wbinfo_group
> config.status: creating src/acl/external/kerberos_ldap_group/Makefile
> config.status: creating src/acl/external/LDAP_group/Makefile
> config.status: creating src/auth/basic/LDAP/Makefile
> config.status: creating src/auth/digest/LDAP/Makefile
> configure: running /bin/sh ./configure --disable-option-checking '--prefix=/usr/local/squid'  '--enable-auth-basic=LDAP,SMB,SMB_LM' '--enable-auth-negotiate=kerberos,wrapper' '--enable-auth-ntlm=SMB_LM' '--enable-external-acl-helpers=kerberos_ldap_group,wbinfo_group' --cache-file=/dev/null --srcdir=.
>
>
> Kind regards,
>      Ankor.
>
>
>
>
>
> вт, 15 июл. 2025 г. в 06:05, Andrey K <[email protected]>:
>>
>> Hello, Francesco,
>>
>> Thank you for the help.
>>
>> Full logs of the configure command are available at the link: https://drive.google.com/file/d/1wxAmtK2PDTuS41vvM0kuAS-1TtlzZKFl/view?usp=sharing
>>
>> Here is a short excerpt on the LDAP filter:
>> cat /tmp/configure.log | grep -i ldap
>> checking for LIBLDAP... no
>> checking for ldap.h... yes
>> checking for mozldap/ldap.h... no
>> checking for LDAP... 1
>> checking for OpenLDAP... 1
>> checking for Sun LDAP SDK... 0
>> checking for Mozilla LDAP SDK... 0
>> checking for LDAP_OPT_DEBUG_LEVEL... 1
>> checking for LDAP_SCOPE_DEFAULT... 1
>> checking for LDAP_REBIND_PROC... 1
>> checking for LDAP_REBINDPROC_CALLBACK... 0
>> checking for LDAP_REBIND_FUNCTION... 0
>> checking for LDAP_URL_LUD_SCHEME... 0
>> checking for ldapssl_client_init in -lldap... no
>> checking for library containing ldap_url_desc2str... no
>> checking for library containing ldap_url_parse... no
>> checking for library containing ldap_start_tls_s... no
>> configure: Library 'ldap' support: no (auto)
>> configure: checking auth/basic helpers: LDAP SMB SMB_LM
>> configure: error: required helper auth/basic/LDAP ... found but cannot be built
>>
>> Kind regards,
>>       Ankor.
>>
>>
>> пн, 14 июл. 2025 г. в 18:10, Francesco Chemolli <[email protected]>:
>>>
>>> Hi Ankor,
>>>   it's really hard to help you with this little context. The main
>>> reason why both these helpers may fail to build is because the LDAP
>>> libraries were not found on the system. Would you mind running on your
>>> system:
>>>
>>> $ ./configure --enable-auth-basic=LDAP,SMB,SMB_LM
>>> --enable-auth-negotiate=kerberos,wrapper --enable-auth-ntlm=SMB_LM
>>> --enable-external-acl-helpers=kerberos_ldap_group,wbinfo_group
>>> >/tmp/configure.log 2>&1 && grep -i ldap /tmp/configure.log
>>>
>>> and sharing the output from that command?
>>>
>>> On Mon, Jul 14, 2025 at 10:38 AM Andrey K <[email protected]> wrote:
>>> >
>>> > Hello,
>>> >
>>> > I tried to build squid-7.0.2, but ./configure failed if I use:
>>> > --enable-auth-basic=LDAP,SMB,SMB_LM --enable-auth-negotiate=kerberos,wrapper --enable-auth-ntlm=SMB_LM --enable-external-acl-helpers=kerberos_ldap_group,wbinfo_group
>>> >
>>> > configure: Authentication support enabled: yes
>>> > configure: checking auth/basic helpers: LDAP SMB SMB_LM
>>> > configure: error: required helper auth/basic/LDAP ... found but cannot be built
>>> >
>>> > configure: checking acl/external helpers: kerberos_ldap_group wbinfo_group
>>> > configure: error: required helper acl/external/kerberos_ldap_group ... found but cannot be built
>>> >
>>> > When I remove the LDAP and kerberos_ldap_group options,  ./configure passes smoothly.
>>> >
>>> > I did not observe a similar problem in the Squid-6.
>>> >
>>> > I am building Squid on an OEL-8 Linux with installed openldap-devel and openldap packages.
>>> >
>>> > Kind regards,
>>> >      Ankor.
>>> >
>>> >
>>> >
>>> > _______________________________________________
>>> > squid-users mailing list
>>> > [email protected]
>>> > https://lists.squid-cache.org/listinfo/squid-users
>>>
>>>
>>>
>>> --
>>>     Francesco



-- 
    Francesco
_______________________________________________
squid-users mailing list
[email protected]
https://lists.squid-cache.org/listinfo/squid-users