Topic: Apache-2.4.52: apr/apr-util is compiled without ldap support

[Joey]

Hello Colleagues,

I'm having problems in enabling the LDAP support during compilation Apache Web Server 2.4.52 on Redhat 7.

=======================================

configure: Configuring Apache httpd
......
checking for sd_notify in -lsystemd-daemon... no
checking whether to enable mod_authn_file... shared
checking whether to enable mod_authn_dbm... shared
checking whether to enable mod_authn_anon... shared
checking whether to enable mod_authn_dbd... shared
checking whether to enable mod_authn_socache... shared (all)
checking whether to enable mod_authn_core... shared
checking whether to enable mod_authz_host... shared
checking whether to enable mod_authz_groupfile... shared
checking whether to enable mod_authz_user... shared
checking whether to enable mod_authz_dbm... shared
checking whether to enable mod_authz_owner... shared
checking whether to enable mod_authz_dbd... shared (all)
checking whether to enable mod_authz_core... shared
checking whether to enable mod_authnz_ldap... checking dependencies
checking for ldap support in apr/apr-util... no
configure: WARNING: apr/apr-util is compiled without ldap support
checking whether to enable mod_authnz_ldap... configure: error: mod_authnz_ldap has been requested but can not be built due to prerequisite failures

============================

When I try to compile the APR-UTIL seperately, this way:
./configure \
--host=x86_64-pc-linux-gnu \
--target=x86_64-pc-linux-gnu \
--prefix=${PREFIX} \
--build=x86_64-pc-linux-gnu \
--with-apr=${PREFIX} \
--with-gdbm=${PREFIX} \
--with-crypto \
--with-openssl=/applications/openssl/1.1.111.0 \
--with-expat=${PREFIX_EXPAT} \
--with-commoncrypto \
--enable-so \
--with-ldap=ldap \

I get the following error:
checking for CCKeyDerivationPBKDF in -lSystem... no
checking for ldap support...
checking for ldap_init in -lldap... no
checking for ldap_init in -lldap... no
checking for ldap_init in -lldap... no
checking for ldap_init in -lldap... no
configure: error: could not find an LDAP library
============================

I have LDAP installed on the system and also I tried compiling it in the package creation

openldap-2.4.44-21.el7_6.x86_64
openldap-devel-2.4.44-21.el7_6.x86_64

# Configure Apache
./configure \
--prefix=${PREFIX} \
--enable-authnz-fcgi \
--enable-layout=BLFS \
--enable-mods-shared="all cgi proxy proxy_ajp proxy_balancer proxy_connect proxy_ftp proxy_http ssl cern_meta env expires headers ident mime_magic setenvif unique_id usertrack version actions alias dir imagemap negotiation rewrite speling userdir vhost_alias log_config log_forensic logio ldap ldap_cache mime asis autoindex cgi cgid info status suexec charset_lite deflate ext_filter filter include echo bucketeer dumpio dav_fs dav_lock dav dbd cache disk_cache file_cache mem_cache auth auth_digest auth_basic authn_alias authn_anon authn_dbd authn_dbm authn_default authn_file authnz_ldap authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user" \
--enable-mpms-shared=all \
--enable-suexec=shared \
--enable-cgi \
--with-apr=${PREFIX} \
--with-apr-util=${PREFIX} \
--with-included-apr-iconv \
--with-expat=${PREFIX_EXPAT} \
--with-included-pcre \
--enable-ssl \
--with-ssl=/applications/openssl/CURRENT \
--with-suexec \
--with-libxml2=${PREFIX_XML} \
--with-z=${PREFIX_ZLIB} \
--with-lua=${PREFIX_LUA} \
--enable-lua=shared \
--enable-ldap=shared \
--with-ldap=${PREFIX_LDAP} \
--enable-authnz-ldap \
--enable-so \
-------------------------------------
I have tried several solutions like :
https://comp.infosystems.www.servers.unix.narkive.com/OuQl6AZ4/configure-error-could-not-find-an-ldap-library

and
https://bz.apache.org/bugzilla/show_bug.cgi?id=58197

BUT that did not help.

Thank you for your timely support

[tangent]

I came across this "ldap_init" error some years ago when building Apache from scratch on Linux.

The solution I found was to include the following configure options, when building both apr-util and httpd (note you need the openldap-devel package installed):

[Joey]

@Tangent: Sorry for not posting earlier.
The following was my solution:

I had LDAP devel package installed.
The OS LDAP happened to be corrupt, so I had to compile a separate LDAP into a different ${$PREFIX_LDAP}

APRIUTIL needed to include these options for LDAP support to be detected, otherwise Apache build complained APRIUTIL was compiled without LDAP support, so I configured APRIUTIL including the following:
....
--with-crypto=/usr/lib64 \
--with-ldap=ldap \
--with-ldap-lib=${$PREFIX_LDAP}/lib \
--with-ldap-include=${$PREFIX_LDAP}/include \
....

then configured Apache WebServer with:
.....
--with-crypto \
--with-ldap=ldap \
--with-ldap-lib=${PREFIX_LDAP}/lib \
--with-ldap-include=${PREFIX_LDAP}/include \
--enable-ldap=shared \
--with-ldap=${PREFIX_LDAP} \
.....

Thank you for your support

JOEY