facing issue with RHEL 9.5 with Shibboleth SP 3.4.1 or latest

[Rathore, Rajendra]

Hi Alan,

We installed the Shibboleth using yum installer.


o/p of ldd /usr/sbin/shibd

       "linux-vdso.so.1 (0x00007ffe5cf9b000)
        libshibsp.so.11 => /lib64/libshibsp.so.11 (0x00007fa430a00000)
        libsystemd.so.0 => /lib64/libsystemd.so.0 (0x00007fa430923000)
        libxerces-c-3.2.so => /lib64/libxerces-c-3.2.so (0x00007fa430400000)
        libstdc++.so.6 => /lib64/libstdc++.so.6 (0x00007fa430000000)
        libc.so.6 => /lib64/libc.so.6 (0x00007fa42fc00000)
        libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x00007fa430cad000)
        liblog4shib.so.2 => /lib64/liblog4shib.so.2 (0x00007fa430c78000)
        libsaml.so.12 => /lib64/libsaml.so.12 (0x00007fa42f600000)
        libxml-security-c.so.20 => /lib64/libxml-security-c.so.20 (0x00007fa430885000)
        libxmltooling.so.10 => /lib64/libxmltooling.so.10 (0x00007fa42f200000)
        libm.so.6 => /lib64/libm.so.6 (0x00007fa4307aa000)
        libgcc_s.so.1 => /lib64/libgcc_s.so.1 (0x00007fa430c5d000)
        libcap.so.2 => /lib64/libcap.so.2 (0x00007fa4307a0000)
        libgcrypt.so.20 => /lib64/libgcrypt.so.20 (0x00007fa4302c3000)
        liblzma.so.5 => /lib64/liblzma.so.5 (0x00007fa430297000)
        libzstd.so.1 => /lib64/libzstd.so.1 (0x00007fa42ff29000)
        liblz4.so.1 => /lib64/liblz4.so.1 (0x00007fa430273000)
        /lib64/ld-linux-x86-64.so.2 (0x00007fa430d16000)
        libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00007fa42fe4f000)
        libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x00007fa430787000)
        libcom_err.so.2 => /lib64/libcom_err.so.2 (0x00007fa43026c000)
        libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x00007fa43025b000)
        libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x00007fa430254000)
        libcrypto.so.3 => /lib64/libcrypto.so.3 (0x00007fa42ec00000)
        libresolv.so.2 => /lib64/libresolv.so.2 (0x00007fa430240000)
        libcurl.so.4 => /lib64/libcurl.so.4 (0x00007fa42f55e000)
        libssl.so.3 => /lib64/libssl.so.3 (0x00007fa42f478000)
        libz.so.1 => /lib64/libz.so.1 (0x00007fa42fe35000)
        libgpg-error.so.0 => /lib64/libgpg-error.so.0 (0x00007fa42fe0f000)
        libselinux.so.1 => /lib64/libselinux.so.1 (0x00007fa42fbd3000)
        libnghttp2.so.14 => /lib64/libnghttp2.so.14 (0x00007fa42fba9000)
        libidn2.so.0 => /lib64/libidn2.so.0 (0x00007fa42f1df000)
        libssh.so.4 => /lib64/libssh.so.4 (0x00007fa42f16a000)
        libpsl.so.5 => /lib64/libpsl.so.5 (0x00007fa43022c000)
        libldap.so.2 => /lib64/libldap.so.2 (0x00007fa42eb99000)
        liblber.so.2 => /lib64/liblber.so.2 (0x00007fa42fb97000)
        libbrotlidec.so.1 => /lib64/libbrotlidec.so.1 (0x00007fa42f15c000)
        libpcre2-8.so.0 => /lib64/libpcre2-8.so.0 (0x00007fa42eafd000)
        libunistring.so.2 => /lib64/libunistring.so.2 (0x00007fa42e978000)
        libevent-2.1.so.7 => /lib64/libevent-2.1.so.7 (0x00007fa42e91f000)
        libsasl2.so.3 => /lib64/libsasl2.so.3 (0x00007fa42f13c000)
        libbrotlicommon.so.1 => /lib64/libbrotlicommon.so.1 (0x00007fa42f119000)
        libcrypt.so.2 => /lib64/libcrypt.so.2 (0x00007fa42e8e5000)"
Thanks and Regards,
Rajendra Rathore
9922701491

From: Alan Buxey <alan.buxey at myunidays.com>
Sent: Tuesday, March 4, 2025 2:40 AM
To: Shib Users <users at shibboleth.net>
Cc: Rathore, Rajendra <rarathore at ptc.com>
Subject: Re: facing issue with RHEL 9.5 with Shibboleth SP 3.4.1 or latest

You don't often get email from alan.buxey at myunidays.com<mailto:alan.buxey at myunidays.com>. Learn why this is important<https://aka.ms/LearnAboutSenderIdentification>
hi,

We recently update RHEL to 9.5. during our application testing with Shibboleth SP 3.4.1 or latest, we found below issue.

httpd: Syntax error on line 3 of HTTPServer/conf/httpd.conf: Syntax error on line 16 of //HTTPServer/conf/conf.d/00-1mod_shib.conf: Cannot load /usr/lib64/shibboleth/mod_shib_24.so into server: /lib64/libldap.so.2: undefined symbol: EVP_md2, version OPENSSL_3.0.0.


so you have other SSL libraries lying around in /lib64 ?  was your Shibboleth installed from package or built from source?

what does ldd /usr/sbin/shibd give as output ?

regards

alan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20250304/b42ae7de/attachment.htm>