Building nss_ldap on HP-UX 11.x

The latest release of nss_ldap (nss_ldap-199) and pam_ldap (pam_ldap-151) support HP-UX 11.x.

As HP already have their own LDAP solution as part of the LDAP-UX package, there is less reason to use the PADL modules on HP-UX than on (for example) AIX. We are however providing this enhancement at the request of several customers.

Requirements:

• PADL nss_ldap and pam_ldap modules
• HP-UX 11.x (we tested on 11.11)
• the HP Linux Porting Kit (at least gcc and gmake are required)
• an LDAP client library and server

Installation

The installation procedure for these modules is essentially the same as for Solaris: run the configure script with the appropriate options to detect your LDAP client library, and then make followed by make install. HP-UX uses a different shared library extension to Solaris.

Note that you cannot use an LDAP client library that links against libpthreads, as HP-UX will not dynamically load libraries that require thread local storage. Netscape and iPlanet SSL-enabled LDAP libraries require libpthreads. We suggest you use OpenLDAP libraries if you require SSL support for nss_ldap or pam_ldap.

If you are statically linking SSL libraries into nss_ldap and pam_ldap, ensure that the SSL libraries are compiled position independent (gcc option -fPIC) and all symbols are loaded into the LDAP libraries (ld option -Fl for each library).

For example:

CC=gcc LD="ld -Fl /opt/ssl/lib/libcrypto.a -Fl /opt/ssl/lib/libssl.a -Fl

/usr/local/lib/gcc-lib/hppa2.0n-hp-hpux11.00/3.2.3/libgcc.a"

LDFLAGS="-L/opt/ssl/lib" CPPFLAGS="-I/opt/ssl/include" ./configure

--prefix=/opt/openldap --with-tls --disable-slapd

Acknowledgments

Thanks to Hewlett Packard.