enabling the ldap keyserver plugin on HP-UX

[David Shaw]

On Thu, Aug 29, 2002 at 07:40:57AM -0700, David Ellement wrote:
> On 020827, at 15:18:32, David Shaw wrote
> > > I have the OpenLDAP 2.1.3 libraries installed, libldap and liblber.
> > > The OpenLDAP configure script looks for resolv.h, which does find in
> > > /usr/include.  (However, there is no libresolv in /usr/lib).
> > 
> > Interesting.  Perhaps the dependencies are different on HP.  Can you
> > try removing the -lresolv from the configure test? (leave -lldap and
> 
> I modified configure.ac and keyserver/Makefile.ac to remove -lresolv,
> rebuilt configure and keyserver/Makefile.in, and ran configure.  It
> passed, everything compiled, and 'make check' passed.
> 
> However, when I try specifying an ldap keyserver to pull a key, I
> get the error message:
> 
>     gpgkeys: internal LDAP bind error: Can't contact LDAP server
> 
> Is this due to a bad compile? an inactive keyserver? blocking by our
> firewall? (I am able to pull from hkp keyservers).

It could be any of the above.  Try these two LDAP keyservers:

  ldap://64.94.85.200
and
  ldap://pgp.surfnet.nl:11370

(the first one is the pgp.com keyserver - I'm giving an IP address as
they've been having DNS issues for a little while that falsely make
the server look like it is unreachable).

If neither of them work, try this:

  telnet 64.94.85.200 389
and
  telnet pgp.surfnet.nl 11370

This should check if your firewall is letting LDAP connections get
out.

> After digging a little deeper, I found the resolver routines are
> part of the standard C library on HP-UX (/usr/lib/libc.sl).  I also
> need to add '-lssl -lcrypto' via the environment variable LDFLAGS to
> get the compile to succeed.

You needed -lssl -lcrypto to compile GnuPG in general, or just
gpgkeys_ldap ?

David

-- 
   David Shaw  |  dshaw at jabberwocky.com  |  WWW http://www.jabberwocky.com/
+---------------------------------------------------------------------------+
   "There are two major products that come out of Berkeley: LSD and UNIX.
      We don't believe this to be a coincidence." - Jeremy S. Anderson