Open Source Development

Power Open Source Development

Explore the open source tools and capabilities for building and deploying modern applications on IBM Power platforms including AIX, IBM i, and Linux.


#Power


#Power

 View Only
Expand all | Collapse all

apache tDependent module /opt/IBM/ldap/V6.4/lib64/libldap.a(libldap.so.2) could not be loaded

  • 1.  apache tDependent module /opt/IBM/ldap/V6.4/lib64/libldap.a(libldap.so.2) could not be loaded

    Posted Thu November 19, 2020 05:54 AM
    Hello,

    We have the error below when we start  our  apache httpd deamon.

    [f_apa_start]- 2020-11-19 11:19:34 - INFO - **************************************************

    [f_apa_start]- 2020-11-19 11:19:34 - INFO - ***  /apache/apache_home/apache_2.2.14/bin/httpd -f /apache/AIMMI008/conf/AIMMI008.conf -k start >/dev/null </dev/zero  ***

    httpd: Syntax error on line 87 of /apache/AIMMI008/conf/AIMMI008.conf: Cannot load /apache/apache_home/apache_2.2.14/modules/mod_authnz_ldap.so into server: Could not load module /apache/apache_home/apache_2.2.14/modules/mod_authnz_ldap.so.\n\tDependent module /opt/IBM/ldap/V6.4/lib64/libldap.a(libldap.so.2) could not be loaded.\n\tFile /opt/IBM/ldap/V6.4/lib64/libldap.a is not an\n\t  archive or the file could not be read properly.\nSystem error: Exec format error\nCould not load module /apache/apache_home/apache_2.2.14/modules/mod_authnz_ldap.so.\n\tDependent module /apache/apache_home/apache_2.2.14/modules/mod_authnz_ldap.so could not be loaded.

    [f_apa_start]- 2020-11-19 11:19:34 - ERREUR - ==================================================


    We are running  AIX 7.2 since yesterday.

    I know that before the aix 7.2 migration the openldap rpm  package has been removed.

    I know that the AIX LDAP filesets have been updated after the aix 7.2 migration.

    My question is : do i have to re-install   openldap  rpm package ? If not can you help me to solve this problem please ?

    I thank you very much,

    Christophe


    IBM AIX LDAP Filesets :

    aimmi008:/opt/IBM/ldap/V6.4/bin# lslpp -l | grep -i ldap
    idsldap.clt32bit64.rte 6.4.0.20 COMMITTED Directory Server - 32 bit
    idsldap.clt64bit62.rte 6.2.0.32 COMMITTED Directory Server - 64 bit
    idsldap.clt64bit64.rte 6.4.0.20 COMMITTED Directory Server - 64 bit
    idsldap.clt_max_crypto32bit64.rte
    idsldap.clt_max_crypto64bit62.rte
    idsldap.clt_max_crypto64bit64.rte
    idsldap.cltbase62.adt 6.2.0.32 COMMITTED Directory Server - Base Client
    idsldap.cltbase62.rte 6.2.0.32 COMMITTED Directory Server - Base Client
    idsldap.cltbase64.adt 6.4.0.20 COMMITTED Directory Server - Base Client
    idsldap.cltbase64.rte 6.4.0.20 COMMITTED Directory Server - Base Client
    idsldap.cltjava64.rte 6.4.0.20 COMMITTED Directory Server - Java Client
    idsldap.ent62.rte 6.2.0.3 COMMITTED Directory Server - Entitlement
    idsldap.license64.rte 6.4.0.20 COMMITTED Directory Server - License
    idsldap.msg62.en_US 6.2.0.32 COMMITTED Directory Server - Messages -
    idsldap.srv_max_cryptobase64bit62.rte
    idsldap.srvbase64bit62.rte
    idsldap.srvproxy64bit62.rte
    idsldap.webadmin62.rte 6.2.0.32 COMMITTED Directory Server - Web
    idsldap.webadmin_max_crypto62.rte
    idsldap.clt32bit64.rte 6.4.0.20 COMMITTED Directory Server - 32 bit
    idsldap.clt64bit62.rte 6.2.0.32 COMMITTED Directory Server - 64 bit
    idsldap.clt64bit64.rte 6.4.0.20 COMMITTED Directory Server - 64 bit
    idsldap.cltbase62.rte 6.2.0.32 COMMITTED Directory Server - Base Client
    idsldap.cltbase64.rte 6.4.0.20 COMMITTED Directory Server - Base Client
    idsldap.srvbase64bit62.rte
    idsldap.srvproxy64bit62.rte
    aimmi008:/opt/IBM/ldap/V6.4/bin#

    I ran idslink  to "rebuild" the ldap links :

    Then run the idslink commands below:
    # cd /opt/IBM/ldap/V6.4/bin
    # ./idslink -i -g -l 64 -f
    # ./idslink -i -g -l 32 -f


    ------------------------------
    christophe derouet
    ------------------------------

    #AIXOpenSource


  • 2.  RE: apache tDependent module /opt/IBM/ldap/V6.4/lib64/libldap.a(libldap.so.2) could not be loaded

    Posted Thu November 19, 2020 07:12 AM
    I found a message of  Ayappan saying that     openLDAP   was useful for AIX TOOL BOX packages so  i have decided to re-install   openLDAP on our AIX partition.

    I will check with our development team if  the problem is solved or not.




    Posted Thu March 08, 2018 05:12 AM

    Originally posted by: AyappanP


    Almost all the packages in AIX Toolbox which uses ldap are built using openLDAP. The only exception is "sudo_ids" rpm which works with IBM LDAP. 



    ------------------------------
    christophe derouet
    ------------------------------



  • 3.  RE: apache tDependent module /opt/IBM/ldap/V6.4/lib64/libldap.a(libldap.so.2) could not be loaded

    Posted Thu November 19, 2020 08:03 AM
    Our development team says that it does not solve the problem...

    Do you have an idea please ? What should i check ?

    ------------------------------
    christophe derouet
    ------------------------------



  • 4.  RE: apache tDependent module /opt/IBM/ldap/V6.4/lib64/libldap.a(libldap.so.2) could not be loaded

    Posted Thu November 19, 2020 08:23 AM
    Looks like the Apache/httpd 2.2.14 is a custom built one , not from AIX Toolbox. 
    From the error message , it looks like it is neither built using IBM ldap nor Toolbox Openldap.

    The module "mod_authnz_ldap" looks for a library "libldap.a(libldap.so.2)" which neither IBM ldap nor Toolbox Openldap provides.


    ------------------------------
    Ayappan P
    ------------------------------



  • 5.  RE: apache tDependent module /opt/IBM/ldap/V6.4/lib64/libldap.a(libldap.so.2) could not be loaded

    Posted Thu November 19, 2020 12:33 PM
    So what can i do ???   Sreaming in the desert ?!!


    ------------------------------
    christophe derouet
    ------------------------------



  • 6.  RE: apache tDependent module /opt/IBM/ldap/V6.4/lib64/libldap.a(libldap.so.2) could not be loaded

    Posted Thu November 19, 2020 02:08 PM
    I had a look to our mailbox and it seems we already had this kind of troubles in february of 2019....

    Wait and see !

    ------------------------------
    christophe derouet
    ------------------------------



  • 7.  RE: apache tDependent module /opt/IBM/ldap/V6.4/lib64/libldap.a(libldap.so.2) could not be loaded

    Posted Fri November 20, 2020 05:55 AM
    Edited by christophe derouet Fri November 20, 2020 05:57 AM
    So we were looking for the    libldap.a(libldap.so.2)    library...

    We can see it is a link. We will call it link1.

    aimmi008:/usr/lib# ls -l | grep -i libidsldap.a
    lrwxrwxrwx 1 root system 35 Nov 19 09:23 libibmldap.a -> /opt/IBM/ldap/V6.4/lib/libidsldap.a
    lrwxrwxrwx 1 root system 37 Nov 19 09:23 libibmldap64.a -> /opt/IBM/ldap/V6.4/lib64/libidsldap.a
    lrwxrwxrwx 1 root system 35 Nov 19 09:23 libidsldap.a -> /opt/IBM/ldap/V6.4/lib/libidsldap.a
    lrwxrwxrwx 1 root system 37 Nov 19 09:23 libidsldap64.a -> /opt/IBM/ldap/V6.4/lib64/libidsldap.a
    lrwxrwxrwx 1 root system 35 Nov 19 09:23 libldap.a -> /opt/IBM/ldap/V6.4/lib/libidsldap.a     link1.
    lrwxrwxrwx 1 root system 37 Nov 19 09:23 libldap64.a -> /opt/IBM/ldap/V6.4/lib64/libidsldap.a
    aimmi008:/usr/lib#

    This link1 is associated to another link2
    Link2 is associated to the file    /opt/IBM/ldap/V6.4/lib/libibmldap.a

    aimmi008:/usr/lib# ls -l /opt/IBM/ldap/V6.4/lib/libidsldap.a   ##### link2
    lrwxrwxrwx 1 root system 35 Nov 18 11:18 /opt/IBM/ldap/V6.4/lib/libidsldap.a -> /opt/IBM/ldap/V6.4/lib/libibmldap.a

    aimmi008:/usr/lib# ls -l /opt/IBM/ldap/V6.4/lib/libibmldap.a
    -rwxr-xr-x 1 root system 823853 Nov 29 2019 /opt/IBM/ldap/V6.4/lib/libibmldap.a
    aimmi008:/usr/lib#


    And we can see that the AIX fileset that owns /opt/IBM/ldap/V6.4/lib/libibmldap.a   is :

    aimmi008:/usr/lib#
    aimmi008:/usr/lib# lslpp -w /opt/IBM/ldap/V6.4/lib/libibmldap.a
    File                                                       Fileset                                                                Type
    ------------------------------------------------------------------------------------------------------------------------
    /opt/IBM/ldap/V6.4/lib/libibmldap.a       idsldap.clt_max_crypto32bit64.rte      File
    aimmi008:/usr/lib#


    We have decided to update our   Apache HTTP server configuration file.
    These two libraries are now ignored.

    aimmi008:/usr/lib# grep incompa /apache/AIMMI008/conf/AIMMI008.conf
    #LoadModule authnz_ldap_module modules/mod_authnz_ldap.so        
    #LoadModule ldap_module modules/mod_ldap.so                                 
    aimmi008:/usr/lib#

    Now the httdp daemon starts successfully !

    ​​

    ------------------------------
    christophe derouet
    ------------------------------



  • 8.  RE: apache tDependent module /opt/IBM/ldap/V6.4/lib64/libldap.a(libldap.so.2) could not be loaded

    Posted Fri November 20, 2020 08:01 AM
    What the module is looking for is an archive "libldap.a" which has a member "libldap.so.2". 
    The file "/opt/IBM/ldap/V6.4/lib/libibmldap.a" is not an archive.

    I don't know how that module is built but it looks like during the build , the system had such an archive and the module got linked to it.


    ------------------------------
    Ayappan P
    ------------------------------



  • 9.  RE: apache tDependent module /opt/IBM/ldap/V6.4/lib64/libldap.a(libldap.so.2) could not be loaded

    Posted Mon November 23, 2020 05:17 AM
    Edited by christophe derouet Mon November 23, 2020 05:17 AM
    Hello Ayappan,

    I would like to thank you very much for your message and your help.

    The archive library we were looking for was coming from the removed package openldap-2.0.21-6ssl.ppc on the aimm008 AIX LPAR.

    aimmi002:/root#
    aimmi002:/root# rpm -qf /opt/freeware/lib/libldap.a
    openldap-2.0.21-6ssl.ppc
    aimmi002:/root#

    So we had to copy the archive library from another aix lpar (aimmi002).

    aimmi008:/root# cd /opt/freeware/lib
    aimmi008:/opt/freeware/lib# ls -l libldap*
    -rw-r--r-- 1 root system 317884 Jan 28 2008 libldap.a
    -rw-r--r-- 1 root system 346827 Jan 28 2008 libldap_r.a
    aimmi008:/opt/freeware/lib#
    aimmi008:/opt/freeware/lib# rpm -qa |grep -i ldap
    aimmi008:/opt/freeware/lib#

    aimmi008:/opt/freeware/lib#
    aimmi008:/opt/freeware/lib# rpm -qf /opt/freeware/lib/libldap.a
    file /opt/freeware/lib/libldap.a is not owned by any package
    aimmi008:/opt/freeware/lib#


    Now the httpd daemon works fine with the LDAP libraries.

    But the openldap rpm package does not officially exist.

    How could we solve this problem ?

    Have a nice day,

    ------------------------------
    christophe derouet
    ------------------------------



  • 10.  RE: apache tDependent module /opt/IBM/ldap/V6.4/lib64/libldap.a(libldap.so.2) could not be loaded

    Posted Mon November 23, 2020 05:55 AM
    " rpm -qi openldap-2.0.21-6ssl.ppc" will show the details about this rpm.
    Probably a custom built one and the version 2.0.21 is very old.


    ------------------------------
    Ayappan P
    ------------------------------



  • 11.  RE: apache tDependent module /opt/IBM/ldap/V6.4/lib64/libldap.a(libldap.so.2) could not be loaded

    Posted Mon November 23, 2020 06:05 AM
    aimmi002:/root# rpm -qi openldap-2.0.21-6ssl.ppc
    Name : openldap
    Version : 2.0.21
    Release : 6ssl
    Architecture: ppc
    Install Date: Thu Oct 4 12:08:23 2012
    Group : System Environment/Daemons
    Size : 4027074
    License : IBM_ILA
    Signature : (none)
    Source RPM : openldap-2.0.21-6ssl.src.rpm
    Build Date : Mon Jan 28 20:33:01 2008
    Build Host : wangda.austin.ibm.com
    Relocations : /opt/freeware
    URL : http://www.openldap.org
    Summary : LDAP servers, libraries, utilities, tools and sample clients.
    Description :
    OpenLDAP is an open source suite of LDAP (Lightweight Directory Access
    Protocol) applications and development tools. LDAP is a set of
    protocols for accessing directory services (usually phone book style
    information, but other information is possible) over the Internet,
    similar to the way DNS (Domain Name System) information is propagated
    over the Internet. The suite includes a stand-alone LDAP server
    (slapd), a stand-alone LDAP replication server (slurpd), libraries for
    implementing the LDAP protocol, utilities, tools, and sample clients.

    Install openldap if you need LDAP applications and tools.
    aimmi002:/root#

    ------------------------------
    christophe derouet
    ------------------------------



  • 12.  RE: apache tDependent module /opt/IBM/ldap/V6.4/lib64/libldap.a(libldap.so.2) could not be loaded

    Posted Mon November 23, 2020 06:42 AM
    Okay. I see the corresponding SPEC file here --> https://public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/SPECS/openldap-2.0.21-6.spec

    So it came from Toolbox , long time back (around 2008). The rpms are no longer maintained.
    My suggestion is to either use recent Toolbox openldap and build a custom httpd or use Toolbox httpd as such if it suits your purpose.

    ------------------------------
    Ayappan P
    ------------------------------