Upgraded RHEL server, shibboleth SP no longer building from source

Paul Beckett (ITCS - Staff) P.Beckett at uea.ac.uk
Tue Jul 31 08:21:19 EDT 2018

I recently upgraded one of my RedHat Enterprise Linux 6 servers (from RHEL 6.9 to RHEL 6.10) using yum update. The shibboleth dependencies which were installed from the shibboleth repository were also updated.

For a variety of reasons, we use a source built Apache, requiring us to build the shibboleth module from source. Our software stack versions are:

*         Apache 2.4.34

*         OpenSSL 1.1.0h

*         APR 1.6.3

*         APR-Util 1.6.1

*         shibboleth-sp-2.6.1

This built fine before, but now fails during the configure:
./configure --with-apxs24=/usr/local/apache/bin/apxs --enable-apache-24 --prefix=/usr/local/shibsp
checking for a BSD-compatible install... /usr/bin/install -c
checking for boost/tuple/tuple.hpp... yes
checking for ctime_r... yes, and it takes 2 arguments
checking for log4shib-config... no
configure: WARNING: log4shib-config not found, may need to use --with-log4shib option
configure: WARNING: will look for original log4cpp library
checking for log4cpp-config... no
configure: error: log4cpp-config not found, may need to use --with-log4cpp option

I've experimented with using various --with-log4shib and/or --with-log4cpp options, but had no success in resolving this.

Looking at the shibboleth dependencies that are installed I wondered if this is due to the liblog4shib-devel library having been updated from 1.0.903.1 to 2.0.0-3.1. Below is a list of the shibboleth dependencies from the shibboleth repo on a working RHEL6.9 system and an upgraded RHEL 6.10 system that is not working.

[working : RHEL6.9]
yum list installed | grep shibboleth
libcurl-openssl.x86_64           7.57.0-1.1.el6            @security_shibboleth
libcurl-openssl-devel.x86_64     7.57.0-1.1.el6            @security_shibboleth
liblog4shib-devel.x86_64         1.0.9-3.1.el6             @security_shibboleth
liblog4shib1.x86_64              1.0.9-3.1.el6             @security_shibboleth
libsaml-devel.x86_64             2.6.1-3.1.el6             @security_shibboleth
libsaml9.x86_64                  2.6.1-3.1.el6             @security_shibboleth
libxerces-c-3_1.x86_64           3.1.4-1.1.el6             @security_shibboleth
libxerces-c-devel.x86_64         3.1.4-1.1.el6             @security_shibboleth
libxml-security-c-devel.x86_64   1.7.3-3.2.el6             @security_shibboleth
libxml-security-c17.x86_64       1.7.3-3.2.el6             @security_shibboleth
libxmltooling-devel.x86_64       1.6.4-3.1.el6             @security_shibboleth
libxmltooling7.x86_64            1.6.4-3.1.el6             @security_shibboleth
opensaml-schemas.x86_64          2.6.1-3.1.el6             @security_shibboleth
xmltooling-schemas.x86_64        1.6.4-3.1.el6             @security_shibboleth

[not working: RHEL 6.10]
yum list installed | grep shibboleth
libcurl-openssl.x86_64           7.61.0-1.1.el6           @security_shibboleth
libcurl-openssl-devel.x86_64     7.61.0-1.1.el6           @security_shibboleth
liblog4shib-devel.x86_64         2.0.0-3.1.el6            @security_shibboleth
liblog4shib1.x86_64              1.0.9-3.1.el6            @security_shibboleth
liblog4shib2.x86_64              2.0.0-3.1.el6            @security_shibboleth
libsaml10.x86_64                 3.0.0-1.1.el6            @security_shibboleth
libxerces-c-3_1.x86_64           3.1.4-1.1.el6            @security_shibboleth
libxerces-c-3_2.x86_64           3.2.1-1.1.el6            @security_shibboleth
libxerces-c-devel.x86_64         3.2.1-1.1.el6            @security_shibboleth
libxml-security-c-devel.x86_64   2.0.0-1.1.el6            @security_shibboleth
libxml-security-c17.x86_64       1.7.3-3.2.el6            @security_shibboleth
libxml-security-c20.x86_64       2.0.0-1.1.el6            @security_shibboleth
libxmltooling8.x86_64            3.0.2-3.1.el6            @security_shibboleth
log4shib-debuginfo.x86_64        2.0.0-3.1.el6            @security_shibboleth
opensaml-schemas.x86_64          3.0.0-1.1.el6            @security_shibboleth
xmltooling-schemas.x86_64        3.0.2-3.1.el6            @security_shibboleth

Pre-upgrade /usr/bin/log4shib-config exists but afterwards no longer exists.

Any help resolving this would be very greatly appreciated.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180731/49c970aa/attachment.html>

More information about the users mailing list