svnserve in 1.6.17dfsg-3ubuntu3 not linked against libldap-2.4-2 any more

[Klaus Thorn]

I tried to migrate from 11.04 to 12.04 but svnserve does not validate users against sasl's ldap auxprop plugin any more.

in /var/log/auth.log:
 svnserve: could not find auxprop plugin, was searching for 'ldap'

... whenever I open a Tortoise-SVN repo-browser on a client machine with a URL pointing to this 12.04 server. (No problem with the 11.04 server.)

But by using testsaslauthd on the 12.04 server, I AM able to auth against ldap, so I have no reason to doubt saslauthd.
Also, The error says "svnserve..." not "sasl...".

Due to the identical configuration of my 11.04 and 12.04 installations, the only possible reason I could find is the missing linking:

libldap_r-2.4.so.2 => /usr/lib/libldap_r-2.4.so.2

... which is present under 11.04 (1.6.12dfsg-4ubuntu2.1) but not under 12.04 (1.6.17dfsg-3ubuntu3).
I DO have installed the libldap-2.4-2 on both systems.

So why is it not linked? If this is not a bug, why is it not authenticating?

Details:
uname -a @12.04 server:
Linux zeus 3.2.0-34-generic #53-Ubuntu SMP Thu Nov 15 10:48:16 UTC 2012 x86_64 x86_64 x86_64 GNU/Linux

uname -a @11.04 server:
Linux rogue 2.6.38-8-server #42-Ubuntu SMP Mon Apr 11 03:49:04 UTC 2011 x86_64 x86_64 x86_64 GNU/Linux

There are more libraries that are linked under 11.04 but not 12.04:

libldap_r-2.4.so.2 => /usr/lib/libldap_r-2.4.so.2 (0x00007f22fb596000)
liblber-2.4.so.2 => /usr/lib/liblber-2.4.so.2 (0x00007f22fb387000)
libresolv.so.2 => /lib/x86_64-linux-gnu/libresolv.so.2 (0x00007f22f9ed7000)
libgssapi_krb5.so.2 => /usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2 (0x00007f22f9ca2000)
libgnutls.so.26 => /usr/lib/x86_64-linux-gnu/libgnutls.so.26 (0x00007f22f9a00000)
libgcrypt.so.11 => /lib/x86_64-linux-gnu/libgcrypt.so.11 (0x00007f22f9786000)
libkrb5.so.3 => /usr/lib/x86_64-linux-gnu/libkrb5.so.3 (0x00007f22f94c1000)
libk5crypto.so.3 => /usr/lib/x86_64-linux-gnu/libk5crypto.so.3 (0x00007f22f929a000)
libcom_err.so.2 => /lib/x86_64-linux-gnu/libcom_err.so.2 (0x00007f22f9096000)
libkrb5support.so.0 => /usr/lib/x86_64-linux-gnu/libkrb5support.so.0 (0x00007f22f8e8d000)
libkeyutils.so.1 => /lib/x86_64-linux-gnu/libkeyutils.so.1 (0x00007f22f8c8a000)
libtasn1.so.3 => /usr/lib/x86_64-linux-gnu/libtasn1.so.3 (0x00007f22f8a79000)
libgpg-error.so.0 => /lib/x86_64-linux-gnu/libgpg-error.so.0 (0x00007f22f8874000)
librt.so.1 => /lib/x86_64-linux-gnu/librt.so.1 (0x00007f8f32ea6000)

I also DO have installed all those library packages on both systems.
And subversion-tools.
I also re-installed subversion.

probably related:
http://serverfault.com/questions/437748/svn-authorizing-over-saslldap-failing-after-ubuntu-update-10-04-12-04/

thanks,
klaus

[Klaus Thorn (klaus-trillke)]

I did
 ldd /usr/bin/svnserve
to get the list of linked libraries, by the way.
In the list above I omitted the libraries which are common to both versions of subversion that I compared.

Advice on how to compile subversion myself with all needed libs for sasl+ldap is also welcome as a workaround.

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Klaus Thorn (klaus-trillke)]

This is not a problem for me (original poster) any more. With some changes to the config files I could get it running.

If I were the only one to have this problem, I would have tried to close this bug. But since at least one other user seems to have this problem, I reset the bug status to "new", I hope this fits the workflow here. If not: Sorry, I improvised :-)

Thanks for posting the helpful, working config files goes to http://serverfault.com/users/181004/kaeptn

Finally, in hope to help others who are searching for a solution, the working config files:

/etc/sasl2/svn.conf (I guess this was the most relevant for my setup):

pwcheck_method: saslauthd
mech_list: plain

/etc/saslauthd.conf (only minor changes to what I had anyway):

ldap_servers: ldap://xxx.xxx.xxx.xxx
ldap_use_sasl:no
ldap_search_base: DC=domain,DC=tdl
ldap_bind_dn: <email address hidden>
ldap_bind_pw: magic_word:)
ldap_mech: PLAIN
ldap_auth_method: bind
ldap_filter: (sAMAccountName=%U)
log_level: 7

/etc/default/saslauthd (only minor changes to what I had anyway):

START=yes
DESC="SASL Authentication Daemon"
NAME="saslauthd"
MECHANISMS="ldap"
MECH_OPTIONS=""
THREADS=5

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Duarte Alvim (duarte-alvim)]

Hello.

Details:
----------

uname -a
Linux svn 3.2.0-70-generic #105-Ubuntu SMP Wed Sep 24 19:49:16 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux

svnserve --version
svnserve, version 1.6.17 (r1128011)
   compiled Aug 13 2014, 20:41:52

Issue:
-------

With log level: 7 i see:

Nov 12 14:37:02 svn sudo: root : TTY=pts/0 ; PWD=/SVN/repo1/conf ; USER=root ; COMMAND=/usr/bin/apt-get install libldap-2.4-2

which is installed.

[kaeptn (kkoeppler)]

Hi

did you try to add the following to your svn.conf ?

ldapdb_uri: ldap://myldaphost.tld

this worked for me after upgrading svnserve (r1615264)