[Maria-discuss] Building 10.4.13 without PAM
Hey there again. So, I just today considered turning off PAM, largely to not have to deal with the setuid auth_pam_tool. We’re not going to be using pam, just internal accounts, so.
I added -DPLUGIN_AUTH_PAM=NO and -DPLUGIN_AUTH_PAM_V1=NO to my build options, the same way I had turned off various other plugins I don’t need. But, when running cmake, I now see:
CMake Error at cmake/plugin.cmake:283 (MESSAGE):
Plugin AUTH_PAM cannot be built
Call Stack (most recent call first):
CMakeLists.txt:413 (CONFIGURE_PLUGINS)
I looked in CMakeOutput.log and CMakeError.log but don’t see anything that looks like related errors. And, I asked it not to build AUTH_PAM plugin, so it complaining that it can’t seems unusual.
What did I miss?
- Chris
Hi Chris!
When trying to get help on this, it's helpful if you provide a bit more background information. Useful pieces:
- The full cmake configure line - The commit hash (or version) of MariaDB that you are trying to compile. - Both CMakeOutput.log and CMakeError.log
I tested out the following line and it worked for me: cmake . -DBUILD_TYPE=mysql_release -DPLUGIN_AUTH_PAM=NO -DPLUGIN_AUTH_PAM_V1=NO
You may have some leftover CMakeCache file from a previous attempt that is interfering with this. Try making sure you are doing the configure from a clean source directory and see what happens.
Vicențiu
On Mon, 6 Jul 2020 at 23:01, Chris Ross (cross2) cross2@cisco.com wrote:
Hey there again. So, I just today considered turning off PAM, largely to not have to deal with the setuid auth_pam_tool. We’re not going to be using pam, just internal accounts, so.
I added -DPLUGIN_AUTH_PAM=NO and -DPLUGIN_AUTH_PAM_V1=NO to my build options, the same way I had turned off various other plugins I don’t need. But, when running cmake, I now see:
CMake Error at cmake/plugin.cmake:283 (MESSAGE):
Plugin AUTH_PAM cannot be built
Call Stack (most recent call first):
CMakeLists.txt:413 (CONFIGURE_PLUGINS)
I looked in CMakeOutput.log and CMakeError.log but don’t see anything that looks like related errors. And, I asked it not to build AUTH_PAM plugin, so it complaining that it can’t seems unusual.
What did I miss?
- Chris
_______________________________________________ Mailing list: https://launchpad.net/~maria-discuss Post to : maria-discuss@lists.launchpad.net Unsubscribe : https://launchpad.net/~maria-discuss More help : https://help.launchpad.net/ListHelp
Okay. Sorry about that, thanks for the pointers of what I should provide.
I’m using MariaDB 10.4.13. My build process untar’s the source for each build, so cached files shouldn’t be an issue. I’m cmake’ing as follows:
(cd /data/sources/mariadb-10.4.13 && \
TMPDIR="/data/sources/tmp" \
cmake -DBUILD_CONFIG=mysql_release -DAWS_SDK_EXTERNAL_PROJECT=OFF -DCMAKE_INSTALL_PREFIX:PATH=/usr -DINSTALL_LAYOUT=RPM \
-DINSTALL_PLUGINDIR=lib64/plugin -DINSTALL_SYSCONFDIR="" -DINSTALL_MYSQLTESTDIR="" -DWITH_EMBEDDED_SERVER=NO -DWITH_JEMALLOC=OFF \
-DWITH_PCRE=auto -DWITH_SSL=system -DWITH_ZLIB=system -DWITH_WSREP=OFF -DPLUGIN_WSREP_INFO=NO -DPLUGIN_AUTH_TEST_PLUGIN=NO \
-DPLUGIN_TEST_SQL_DISCOVERY=NO -DPLUGIN_TEST_VERSIONING=NO -DPLUGIN_BLACKHOLE=NO -DPLUGIN_EXAMPLE=NO \
-DPLUGIN_EXAMPLE_KEY_MANAGEMENT=NO -DPLUGIN_FTEXAMPLE=NO -DPLUGIN_FEDERATED=NO -DPLUGIN_FEDERATEDX=NO \
-DPLUGIN_MROONGA=NO -DMRN_GROONGA_EMBED=OFF -DPLUGIN_SPIDER=NO -DPLUGIN_SPHINX=NO -DPLUGIN_TOKUDB=NO \
-DPLUGIN_ROCKSDB=NO -DSKIP_TESTS=ON -DWITH_UNIT_TESTS=NO -DPLUGIN_AUTH_PAM=NO -DPLUGIN_AUTH_PAM_V1=NO)
...at least today. After much searching the system for all of the bits it’s looking for, cmake eventually reports the error noted earlier.
Logs attached, apologies for large attachments.
- Chris
From: Vicențiu Ciorbaru vicentiu@mariadb.org Date: Tuesday, July 7, 2020 at 03:14 To: "Chris Ross (cross2)" cross2@cisco.com Cc: "maria-discuss@lists.launchpad.net" maria-discuss@lists.launchpad.net Subject: Re: [Maria-discuss] Building 10.4.13 without PAM
Hi Chris!
When trying to get help on this, it's helpful if you provide a bit more background information. Useful pieces:
· The full cmake configure line
· The commit hash (or version) of MariaDB that you are trying to compile.
· Both CMakeOutput.log and CMakeError.log
I tested out the following line and it worked for me: cmake . -DBUILD_TYPE=mysql_release -DPLUGIN_AUTH_PAM=NO -DPLUGIN_AUTH_PAM_V1=NO
You may have some leftover CMakeCache file from a previous attempt that is interfering with this. Try making sure you are doing the configure from a clean source directory and see what happens.
Vicențiu
On Mon, 6 Jul 2020 at 23:01, Chris Ross (cross2) cross2@cisco.com wrote:
Hey there again. So, I just today considered turning off PAM, largely to not have to deal with the setuid auth_pam_tool. We’re not going to be using pam, just internal accounts, so.
I added -DPLUGIN_AUTH_PAM=NO and -DPLUGIN_AUTH_PAM_V1=NO to my build options, the same way I had turned off various other plugins I don’t need. But, when running cmake, I now see:
CMake Error at cmake/plugin.cmake:283 (MESSAGE):
Plugin AUTH_PAM cannot be built
Call Stack (most recent call first):
CMakeLists.txt:413 (CONFIGURE_PLUGINS)
I looked in CMakeOutput.log and CMakeError.log but don’t see anything that looks like related errors. And, I asked it not to build AUTH_PAM plugin, so it complaining that it can’t seems unusual.
What did I miss?
- Chris
_______________________________________________ Mailing list: https://launchpad.net/~maria-discuss Post to : maria-discuss@lists.launchpad.net Unsubscribe : https://launchpad.net/~maria-discuss More help : https://help.launchpad.net/ListHelp
Hi Chris!
I found the reason for your problem. It's a combination of BUILD_CONFIG=mysql_release and not having the pam-devel packages installed.
The following line: /mariadb-10.4.13/cmake/build_configurations/mysql_release.cmake(127): SET(PLUGIN_AUTH_PAM YES )
Overrides your settings. I don't think you can do anything about this without a patch to the sources. You can delete that line from the cmake file and it should work. Best to create an MDEV about this to get it covered for next release.
Vicențiu
On 07.07.2020 16:27, Chris Ross (cross2) wrote:
TMPDIR="/data/sources/tmp" \
cmake -DBUILD_CONFIG=mysql_release -DAWS_SDK_EXTERNAL_PROJECT=OFF -DCMAKE_INSTALL_PREFIX:PATH=/usr -DINSTALL_LAYOUT=RPM \
-DINSTALL_PLUGINDIR=lib64/plugin -DINSTALL_SYSCONFDIR="" -DINSTALL_MYSQLTESTDIR="" -DWITH_EMBEDDED_SERVER=NO -DWITH_JEMALLOC=OFF \
-DWITH_PCRE=auto -DWITH_SSL=system -DWITH_ZLIB=system -DWITH_WSREP=OFF -DPLUGIN_WSREP_INFO=NO -DPLUGIN_AUTH_TEST_PLUGIN=NO \
-DPLUGIN_TEST_SQL_DISCOVERY=NO -DPLUGIN_TEST_VERSIONING=NO -DPLUGIN_BLACKHOLE=NO -DPLUGIN_EXAMPLE=NO \
-DPLUGIN_EXAMPLE_KEY_MANAGEMENT=NO -DPLUGIN_FTEXAMPLE=NO -DPLUGIN_FEDERATED=NO -DPLUGIN_FEDERATEDX=NO \
-DPLUGIN_MROONGA=NO -DMRN_GROONGA_EMBED=OFF -DPLUGIN_SPIDER=NO -DPLUGIN_SPHINX=NO -DPLUGIN_TOKUDB=NO \
-DPLUGIN_ROCKSDB=NO -DSKIP_TESTS=ON -DWITH_UNIT_TESTS=NO -DPLUGIN_AUTH_PAM=NO -DPLUGIN_AUTH_PAM_V1=NO)
MDEV created to track this
https://jira.mariadb.org/browse/MDEV-23114
Vicențiu
On 07.07.2020 17:38, Vicențiu Ciorbaru wrote:
Hi Chris!
I found the reason for your problem. It's a combination of BUILD_CONFIG=mysql_release and not having the pam-devel packages installed.
The following line: /mariadb-10.4.13/cmake/build_configurations/mysql_release.cmake(127): SET(PLUGIN_AUTH_PAM YES )
Overrides your settings. I don't think you can do anything about this without a patch to the sources. You can delete that line from the cmake file and it should work. Best to create an MDEV about this to get it covered for next release.
Vicențiu
On 07.07.2020 16:27, Chris Ross (cross2) wrote:
TMPDIR="/data/sources/tmp" \
cmake -DBUILD_CONFIG=mysql_release -DAWS_SDK_EXTERNAL_PROJECT=OFF -DCMAKE_INSTALL_PREFIX:PATH=/usr -DINSTALL_LAYOUT=RPM \
-DINSTALL_PLUGINDIR=lib64/plugin -DINSTALL_SYSCONFDIR="" -DINSTALL_MYSQLTESTDIR="" -DWITH_EMBEDDED_SERVER=NO -DWITH_JEMALLOC=OFF \
-DWITH_PCRE=auto -DWITH_SSL=system -DWITH_ZLIB=system -DWITH_WSREP=OFF -DPLUGIN_WSREP_INFO=NO -DPLUGIN_AUTH_TEST_PLUGIN=NO \
-DPLUGIN_TEST_SQL_DISCOVERY=NO -DPLUGIN_TEST_VERSIONING=NO -DPLUGIN_BLACKHOLE=NO -DPLUGIN_EXAMPLE=NO \
-DPLUGIN_EXAMPLE_KEY_MANAGEMENT=NO -DPLUGIN_FTEXAMPLE=NO -DPLUGIN_FEDERATED=NO -DPLUGIN_FEDERATEDX=NO \
-DPLUGIN_MROONGA=NO -DMRN_GROONGA_EMBED=OFF -DPLUGIN_SPIDER=NO -DPLUGIN_SPHINX=NO -DPLUGIN_TOKUDB=NO \
-DPLUGIN_ROCKSDB=NO -DSKIP_TESTS=ON -DWITH_UNIT_TESTS=NO -DPLUGIN_AUTH_PAM=NO -DPLUGIN_AUTH_PAM_V1=NO)
-- Vicențiu Ciorbaru Software Developer, Team Lead, MariaDB Foundation
_______________________________________________ Mailing list: https://launchpad.net/~maria-discuss Post to : maria-discuss@lists.launchpad.net Unsubscribe : https://launchpad.net/~maria-discuss More help : https://help.launchpad.net/ListHelp
Vincent, and others. I’m still locally patching my tree to avoid MDEV-23027. As that’s very similar, perhaps you can address that too before the upcoming builds?
- Chris
From: Vicențiu Ciorbaru vicentiu@mariadb.org Organization: MariaDB Foundation Date: Tuesday, July 7, 2020 at 10:51 To: "Chris Ross (cross2)" cross2@cisco.com Cc: "maria-discuss@lists.launchpad.net" maria-discuss@lists.launchpad.net Subject: Re: [Maria-discuss] Building 10.4.13 without PAM
MDEV created to track this
https://jira.mariadb.org/browse/MDEV-23114
Vicențiu
On 07.07.2020 17:38, Vicențiu Ciorbaru wrote:
Hi Chris!
I found the reason for your problem. It's a combination of BUILD_CONFIG=mysql_release and not having the pam-devel packages installed.
The following line: /mariadb-10.4.13/cmake/build_configurations/mysql_release.cmake(127): SET(PLUGIN_AUTH_PAM YES )
Overrides your settings. I don't think you can do anything about this without a patch to the sources. You can delete that line from the cmake file and it should work. Best to create an MDEV about this to get it covered for next release.
Vicențiu
On 07.07.2020 16:27, Chris Ross (cross2) wrote:
TMPDIR="/data/sources/tmp" \
cmake -DBUILD_CONFIG=mysql_release -DAWS_SDK_EXTERNAL_PROJECT=OFF -DCMAKE_INSTALL_PREFIX:PATH=/usr -DINSTALL_LAYOUT=RPM \
-DINSTALL_PLUGINDIR=lib64/plugin -DINSTALL_SYSCONFDIR="" -DINSTALL_MYSQLTESTDIR="" -DWITH_EMBEDDED_SERVER=NO -DWITH_JEMALLOC=OFF \
-DWITH_PCRE=auto -DWITH_SSL=system -DWITH_ZLIB=system -DWITH_WSREP=OFF -DPLUGIN_WSREP_INFO=NO -DPLUGIN_AUTH_TEST_PLUGIN=NO \
-DPLUGIN_TEST_SQL_DISCOVERY=NO -DPLUGIN_TEST_VERSIONING=NO -DPLUGIN_BLACKHOLE=NO -DPLUGIN_EXAMPLE=NO \
-DPLUGIN_EXAMPLE_KEY_MANAGEMENT=NO -DPLUGIN_FTEXAMPLE=NO -DPLUGIN_FEDERATED=NO -DPLUGIN_FEDERATEDX=NO \
-DPLUGIN_MROONGA=NO -DMRN_GROONGA_EMBED=OFF -DPLUGIN_SPIDER=NO -DPLUGIN_SPHINX=NO -DPLUGIN_TOKUDB=NO \
-DPLUGIN_ROCKSDB=NO -DSKIP_TESTS=ON -DWITH_UNIT_TESTS=NO -DPLUGIN_AUTH_PAM=NO -DPLUGIN_AUTH_PAM_V1=NO)
Thank you. And thank you for creating an MDEV. I’m curious, though, why it seems to be okay without -DPLUGIN_AUTH_PAM=NO. With only removing those last two -D’s, it builds and appears to build all of the PAM pieces.
I think I’ll leave those pieces building, and just not install them onto my platform. Easier to manage my side if I don’t patch the sources. I’ll watch the MDEV for updates.
- Chris
From: Vicențiu Ciorbaru vicentiu@mariadb.org Date: Tuesday, July 7, 2020 at 10:38 To: "Chris Ross (cross2)" cross2@cisco.com Cc: "maria-discuss@lists.launchpad.net" maria-discuss@lists.launchpad.net Subject: Re: [Maria-discuss] Building 10.4.13 without PAM
Hi Chris!
I found the reason for your problem. It's a combination of BUILD_CONFIG=mysql_release and not having the pam-devel packages installed.
The following line: /mariadb-10.4.13/cmake/build_configurations/mysql_release.cmake(127): SET(PLUGIN_AUTH_PAM YES )
Overrides your settings. I don't think you can do anything about this without a patch to the sources. You can delete that line from the cmake file and it should work. Best to create an MDEV about this to get it covered for next release.
Vicențiu
On 07.07.2020 16:27, Chris Ross (cross2) wrote:
TMPDIR="/data/sources/tmp" \
cmake -DBUILD_CONFIG=mysql_release -DAWS_SDK_EXTERNAL_PROJECT=OFF -DCMAKE_INSTALL_PREFIX:PATH=/usr -DINSTALL_LAYOUT=RPM \
-DINSTALL_PLUGINDIR=lib64/plugin -DINSTALL_SYSCONFDIR="" -DINSTALL_MYSQLTESTDIR="" -DWITH_EMBEDDED_SERVER=NO -DWITH_JEMALLOC=OFF \
-DWITH_PCRE=auto -DWITH_SSL=system -DWITH_ZLIB=system -DWITH_WSREP=OFF -DPLUGIN_WSREP_INFO=NO -DPLUGIN_AUTH_TEST_PLUGIN=NO \
-DPLUGIN_TEST_SQL_DISCOVERY=NO -DPLUGIN_TEST_VERSIONING=NO -DPLUGIN_BLACKHOLE=NO -DPLUGIN_EXAMPLE=NO \
-DPLUGIN_EXAMPLE_KEY_MANAGEMENT=NO -DPLUGIN_FTEXAMPLE=NO -DPLUGIN_FEDERATED=NO -DPLUGIN_FEDERATEDX=NO \
-DPLUGIN_MROONGA=NO -DMRN_GROONGA_EMBED=OFF -DPLUGIN_SPIDER=NO -DPLUGIN_SPHINX=NO -DPLUGIN_TOKUDB=NO \
-DPLUGIN_ROCKSDB=NO -DSKIP_TESTS=ON -DWITH_UNIT_TESTS=NO -DPLUGIN_AUTH_PAM=NO -DPLUGIN_AUTH_PAM_V1=NO)
participants (2)
-
Chris Ross (cross2) -
Vicențiu Ciorbaru