samba - Feb 2020 - Issue compiling Samba 4.11.6 with GNUTLS 3.6.12 (Not standard location)

Hello,

I try to compile Samba 4.11.6 on an old SLES11 machine. There is an old GNUTLS
installed.
Since I do not have root access and I have to use a newer GNUTLS-Version, I have
installed gnutls-3.6.12 in a different location and set PKG_CONFIG_PATH
appropriately. The configure script has run successfully, but when I run make
(with verbose option), I get this error:

17:44:33 runner ['/usr/bin/gcc', '-D_SAMBA_BUILD_=4',
'-DHAVE_CONFIG_H=1', '-D_GNU_SOURCE=1',
'-D_XOPEN_SOURCE_EXTENDED=1', '-DHAVE_CONFIG_H=1',
'-fPIC', '-D__STDC_WANT_LIB_EXT1__=1', '-D_REENTRANT',
'-fstack-protector', '-fstack-clash-protection',
'-DSTATIC_cli_composite_MODULES=NULL',
'-DSTATIC_cli_composite_MODULES_PROTO=extern void
__cli_composite_dummy_module_proto(void)', '-Isource4/libcli',
'-I../../source4/libcli', '-Iinclude/public',
'-I../../include/public', '-Isource4',
'-I../../source4', '-Ilib', '-I../../lib',
'-Isource4/lib', '-I../../source4/lib',
'-Isource4/include', '-I../../source4/include',
'-Iinclude', '-I../../include', '-Ilib/replace',
'-I../../lib/replace', '-I.', '-I../..',
'-Isource4/lib/events', '-I../../source4/lib/events',
'-Ilib/util/charset', '-I../../lib/util/charset',
'-Ilib/talloc', '-I../../lib/talloc', '-Ilib/crypto',
'-I../../lib/crypto', '-Ilib/tevent',
'-I../../lib/tevent', '-Idynconfig',
'-I../../dynconfig',
'../../source4/libcli/composite/composite.c', '-c',
'-o/lfs/EDA/DATA/install/samba-4.11.6/bin/default/source4/libcli/composite/composite.c.4.o']
In file included from ../../source4/../libcli/smb/smb_common.h:30,
                 from ../../source4/libcli/raw/libcliraw.h:25,
                 from ../../source4/libcli/composite/composite.c:26:
../../libcli/smb/smb2_signing.h:30: error: expected specifier-qualifier-list
before 'gnutls_hmac_hd_t'

Waf: Leaving directory `/lfs/EDA/DATA/install/samba-4.11.6/bin/default'
Build failed
-> task in 'cli_composite' failed with exit status 1:
        {task 39922456: c composite.c -> composite.c.4.o}
['/usr/bin/gcc', '-D_SAMBA_BUILD_=4',
'-DHAVE_CONFIG_H=1', '-D_GNU_SOURCE=1',
'-D_XOPEN_SOURCE_EXTENDED=1', '-DHAVE_CONFIG_H=1',
'-fPIC', '-D__STDC_WANT_LIB_EXT1__=1', '-D_REENTRANT',
'-fstack-protector', '-fstack-clash-protection',
'-DSTATIC_cli_composite_MODULES=NULL',
'-DSTATIC_cli_composite_MODULES_PROTO=extern void
__cli_composite_dummy_module_proto(void)', '-Isource4/libcli',
'-I../../source4/libcli', '-Iinclude/public',
'-I../../include/public', '-Isource4',
'-I../../source4', '-Ilib', '-I../../lib',
'-Isource4/lib', '-I../../source4/lib',
'-Isource4/include', '-I../../source4/include',
'-Iinclude', '-I../../include', '-Ilib/replace',
'-I../../lib/replace', '-I.', '-I../..',
'-Isource4/lib/events', '-I../../source4/lib/events',
'-Ilib/util/charset', '-I../../lib/util/charset',
'-Ilib/talloc', '-I../../lib/talloc', '-Ilib/crypto',
'-I../../lib/crypto', '-Ilib/tevent',
'-I../../lib/tevent', '-Idynconfig',
'-I../../dynconfig',
'../../source4/libcli/composite/composite.c', '-c',
'-o/lfs/EDA/DATA/install/samba-4.11.6/bin/default/source4/libcli/composite/composite.c.4.o']
make: *** [all] Error 1

It looks like, with this compile that the old GNUTLS includes are used where
gnutls_hmac_hd_t is not defined.
How can I tell the samba build system to use the new GNUTLS installation with
this compile?

Kind regards

Georg Biberger

#GernPerDu
#CallMeByMyFirstName

Biberger und Partner
Kobellstra?e 1
80336 M?nchen
--------------------------------------------------------------------------------------------------------
Biberger und Partner Diplom-Informatiker Partnerschaftsgesellschaft
Partner: Anne Feldmeier, Georg Biberger
Sitz und Registergericht: M?nchen PR 480
Umsatzsteuer-ID: DE206858618
--------------------------------------------------------------------------------------------------------
Erreichbarkeit bei der BMW Group:
Tel.: +49 89 382-49629
Mobil: +49 172 7719871
E-Mail: Georg.Biberger at partner.bmw.de<mailto:Georg.Biberger at
partner.bmw.de>

On 28/02/2020 17:12, Georg.Biberger--- via samba wrote:
> Hello,
>
> I try to compile Samba 4.11.6 on an old SLES11 machine. There is an old
GNUTLS installed.
> Since I do not have root access and I have to use a newer GNUTLS-Version, I
have installed gnutls-3.6.12 in a different location and set PKG_CONFIG_PATH
appropriately. The configure script has run successfully, but when I run make
(with verbose option), I get this error:
>
SLES11 is EOL and is python3 easily available for it ?

Also, if you don't have root access, should you even be thinking of 
building a package ?

If it is your machine, I suggest you upgrade to a supported version of 
SLES and build Samba on that.

Rowland

On 28/02/2020 18:01, Georg.Biberger at partner.bmw.de
wrote:
>> SLES11 is EOL and is python3 easily available for it ?
> BMW has extended support from SUSE for SLES11 until end of 2021, so no EOL.
> I use phyton2 with "export PYTHON=python2"
I thought the extended support was for security updates only and whilst 
you should be able to build Samba using python2, you need python3 to run 
Samba 4.11.x
>> Also, if you don't have root access, should you even be thinking of
>> building a package ?
> Our linux operating team is very restrictive with packages, so my preferred
way is to build samba by myself.
Have you actually asked them if you can do this ?
>> If it is your machine, I suggest you upgrade to a supported version of
>> SLES and build Samba on that
> It is not my machine, currently we run Samba 4.10.6.
Ah.
>
> Is there a way to solve this build issue with Samba 4.11.6?
>
Not sure, but even if you can, you cannot use it without python3

Rowland

On Fri, 2020-02-28 at 17:12 +0000, Georg.Biberger--- via samba
wrote:
> Hello,
> 
> I try to compile Samba 4.11.6 on an old SLES11 machine. There is an old
GNUTLS installed.
> Since I do not have root access and I have to use a newer GNUTLS-Version, I
have installed gnutls-3.6.12 in a different location and set PKG_CONFIG_PATH
appropriately. The configure script has run successfully, but when I run make
(with verbose option), I get this error:
> 
> 17:44:33 runner ['/usr/bin/gcc', '-D_SAMBA_BUILD_=4',
'-DHAVE_CONFIG_H=1', '-D_GNU_SOURCE=1',
'-D_XOPEN_SOURCE_EXTENDED=1', '-DHAVE_CONFIG_H=1',
'-fPIC', '-D__STDC_WANT_LIB_EXT1__=1', '-D_REENTRANT',
'-fstack-protector', '-fstack-clash-protection',
'-DSTATIC_cli_composite_MODULES=NULL',
'-DSTATIC_cli_composite_MODULES_PROTO=extern void
__cli_composite_dummy_module_proto(void)', '-Isource4/libcli',
'-I../../source4/libcli', '-Iinclude/public',
'-I../../include/public', '-Isource4',
'-I../../source4', '-Ilib', '-I../../lib',
'-Isource4/lib', '-I../../source4/lib',
'-Isource4/include', '-I../../source4/include',
'-Iinclude', '-I../../include', '-Ilib/replace',
'-I../../lib/replace', '-I.', '-I../..',
'-Isource4/lib/events', '-I../../source4/lib/events',
'-Ilib/util/charset', '-I../../lib/util/charset',
'-Ilib/talloc', '-I../../lib/talloc', '-Ilib/crypto',
'-I../../lib/crypto', '-Ilib/tevent',
'-I../../lib/tevent', '-Idynconfig',
'-I../../dynconfig',
'../../source4/libcli/composite/composite.c', '-c',
'-o/lfs/EDA/DATA/install/samba-4.11.6/bin/default/source4/libcli/composite/composite.c.4.o']
> In file included from ../../source4/../libcli/smb/smb_common.h:30,
>                  from ../../source4/libcli/raw/libcliraw.h:25,
>                  from ../../source4/libcli/composite/composite.c:26:
> ../../libcli/smb/smb2_signing.h:30: error: expected
specifier-qualifier-list before 'gnutls_hmac_hd_t'
Samba 4.12 (you could build a release candidate) should fix this.  What
is happening is that some parts of the Samba build don't depend on
GnuTLS and so don't put the path into the -I list, so are getting the
system header.

https://bugzilla.samba.org/show_bug.cgi?id=14271

If that patch works for you on 4.11 you can ask that it be included in
the next 4.11 as well.

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba

On Fri, 2020-02-28 at 18:38 +0000, Rowland penny via samba
wrote:
> > Is there a way to solve this build issue with Samba 4.11.6?
> > 
> Not sure, but even if you can, you cannot use it without python3
> 
> Rowland
G'Day Rowland,

If the OS only needs to build Samba for a fileserver or a client
library then the python3 issue doesn't come up, we still allow a build
of those components as long as --disable-python is set.

Andrew Bartlett
-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba