LDAP error with .NET 8 on docker: sdk:8.0 vs runtime:8.0 ? #98990

pellea · 2024-02-27T14:28:07Z

pellea
Feb 27, 2024

Hello,

I'm trying to make an LDAP connection works with .NET 8, on Linux.

All docker images are from : mcr.microsoft.com/dotnet/.

If I build a docker image with sdk:8.0 as base it's working.
If I build the docker image with aspnet:8.0 or runtime:8.0 as base it's not working.

I have compared both packages/dependencies and have installed all packages from sdk to aspnet but it's still not working.

With sdk:8.0 simply adding the package libldap-2.5-0 is enough.

What differences could it be to make LDAP work on the sdk:8.0 image but not the other two ?

Docker file:

#FROM mcr.microsoft.com/dotnet/runtime:8.0 AS base
#FROM mcr.microsoft.com/dotnet/aspnet:8.0 AS base
FROM mcr.microsoft.com/dotnet/sdk:8.0 AS base
#USER app
WORKDIR /app

FROM mcr.microsoft.com/dotnet/sdk:8.0 AS build
ARG BUILD_CONFIGURATION=Release
WORKDIR /src
COPY ["NuGet.Config", "."]
COPY ["ldap-test.csproj", "."]
RUN dotnet restore "./././ldap-test.csproj"
COPY . .
WORKDIR "/src/."
RUN dotnet build "./ldap-test.csproj" -c $BUILD_CONFIGURATION -o /app/build

FROM build AS publish
ARG BUILD_CONFIGURATION=Release
RUN dotnet publish "./ldap-test.csproj" -c $BUILD_CONFIGURATION -o /app/publish /p:UseAppHost=false

FROM base AS final

USER root
ARG BUILD_CONFIGURATION=Release
RUN apt update \
    && apt install -qqy --no-install-recommends libldap-2.5-0 curl git git-man libatomic1:amd64 libbrotli1:amd64 libcurl3-gnutls:amd64 libcurl4:amd64 liberror-perl libexpat1:amd64 libgdbm-compat4:amd64 libgdbm6:amd64 libgssapi-krb5-2:amd64 libk5crypto3:amd64 libkeyutils1:amd64 libkrb5-3:amd64 libkrb5support0:amd64 libldap-2.5-0:amd64 libnghttp2-14:amd64 libperl5.36:amd64 libpsl5:amd64 librtmp1:amd64 libsasl2-2:amd64 libsasl2-modules-db:amd64 libssh2-1:amd64 perl perl-modules-5.36 wget \
    && ln -s /usr/lib/x86_64-linux-gnu/libldap-2.5.so.0 /usr/lib/x86_64-linux-gnu/libldap-2.4.so.2 \
    && apt clean \
    && rm -rf /var/lib/apt/lists/* 
RUN mkdir -p /etc/ldap
RUN echo "TLS_CACERT	/etc/ssl/certs/ca-certificates.crt" >> /etc/ldap/ldap.conf

USER $APP_UID
#ENV LD_DEBUG="bindings libs"
WORKDIR /app
COPY --from=publish /app/publish .
ENTRYPOINT ["dotnet", "ldap-test.dll"]

App code:

using System.DirectoryServices.Protocols;
using System.Net;

Console.WriteLine("Hello, World!");

AdCredential adCredential = new("winsrv.dev-srv.local", "apiuserlinux", "Password1", "DC=dev-srv,DC=local");

// create connection
var credential = new NetworkCredential(adCredential.User, adCredential.Password);
var identifier = new LdapDirectoryIdentifier(adCredential.Server, 636, true, false);

using var ldapConnection = new LdapConnection(identifier, credential, AuthType.Basic);

ldapConnection.SessionOptions.ProtocolVersion = 3;
ldapConnection.SessionOptions.ReferralChasing = ReferralChasingOptions.None;
ldapConnection.SessionOptions.SecureSocketLayer = true;
ldapConnection.Timeout = TimeSpan.FromMinutes(1);
ldapConnection.AutoBind = true;

record struct AdCredential(
    string Server, string User, string Password, string OrganizationalUnit);

The error with aspnet:8.0 or runtime:8.0:

DllNotFoundException: Unable to load shared library 'libldap-2.5.so.0' or one of its dependencies. In order to help diagnose loading problems, consider using a tool like strace. If you're using glibc, consider setting the LD_DEBUG environment variable: 
/usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/libldap-2.5.so.0: cannot open shared object file: No such file or directory
/app/bin/Debug/net8.0/runtimes/linux/lib/net8.0/libldap-2.5.so.0: cannot open shared object file: No such file or directory
/usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/liblibldap-2.5.so.0: cannot open shared object file: No such file or directory
/app/bin/Debug/net8.0/runtimes/linux/lib/net8.0/liblibldap-2.5.so.0: cannot open shared object file: No such file or directory
/usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/libldap-2.5.so.0.so: cannot open shared object file: No such file or directory
/app/bin/Debug/net8.0/runtimes/linux/lib/net8.0/libldap-2.5.so.0.so: cannot open shared object file: No such file or directory
/usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/liblibldap-2.5.so.0.so: cannot open shared object file: No such file or directory
/app/bin/Debug/net8.0/runtimes/linux/lib/net8.0/liblibldap-2.5.so.0.so: cannot open shared object file: No such file or directory

The extra package are: git git-man libatomic1:amd64 libbrotli1:amd64 libcurl3-gnutls:amd64 libcurl4:amd64 liberror-perl libexpat1:amd64 libgdbm-compat4:amd64 libgdbm6:amd64 libgssapi-krb5-2:amd64 libk5crypto3:amd64 libkeyutils1:amd64 libkrb5-3:amd64 libkrb5support0:amd64 libldap-2.5-0:amd64 libnghttp2-14:amd64 libperl5.36:amd64 libpsl5:amd64 librtmp1:amd64 libsasl2-2:amd64 libsasl2-modules-db:amd64 libssh2-1:amd64 perl perl-modules-5.36 wget.

Answered by Urryy

Mar 14, 2024

RUN apt-get update \ && apt-get install --upgrade -y libldap-2.5.0 \ && ln -s /usr/lib/x86_64-linux-gnu/libldap.so.2 /usr/lib/libldap-2.5.so.0
Use this code in your dockerfile.

View full answer

hez2010 · 2024-02-27T17:08:53Z

hez2010
Feb 27, 2024

It may be caused by one of the dependencies of libldap-2.5-0 missing.
You may try using LD_DEBUG environment variable to see which one are still missing.

1 reply

pellea Feb 28, 2024
Author

I used LD_DEBUG with "all" but couldn't find any missing dependencies while we clearly see that it's searching for the ldap lib.

        57:	file=libldap-2.5.so.0 [0];  dynamically loaded by /usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/libcoreclr.so [0]
        57:	find library=libldap-2.5.so.0 [0]; searching
        57:	 search cache=/etc/ld.so.cache
        57:	 search path=/lib/x86_64-linux-gnu:/usr/lib/x86_64-linux-gnu:/lib:/usr/lib		(system search path)
        57:	  trying file=/lib/x86_64-linux-gnu/libldap-2.5.so.0
        57:	  trying file=/usr/lib/x86_64-linux-gnu/libldap-2.5.so.0
        57:	  trying file=/lib/libldap-2.5.so.0
        57:	  trying file=/usr/lib/libldap-2.5.so.0

The lib is in /usr/lib/x86_64-linux-gnu/libldap-2.5.so.0:

app@7fc90697a326:/app$ ls -lap /usr/lib/x86_64-linux-gnu | grep ldap
lrwxrwxrwx  1 root root       42 Feb 28 07:18 libldap-2.4.so.2 -> /usr/lib/x86_64-linux-gnu/libldap-2.5.so.0
lrwxrwxrwx  1 root root       20 Feb  8  2023 libldap-2.5.so.0 -> libldap-2.5.so.0.1.8
-rw-r--r--  1 root root   380432 Feb  8  2023 libldap-2.5.so.0.1.8
app@7fc90697a326:/app$

Complete logs:

        57:	symbol=SystemNative_FcntlSetIsNonBlocking;  lookup in file=/usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/libSystem.Native.so [0]
        57:	binding file /usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/libSystem.Native.so [0] to /usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/libSystem.Native.so [0]: normal symbol `SystemNative_FcntlSetIsNonBlocking'
        57:	symbol=SystemNative_ReceiveMessage;  lookup in file=/usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/libSystem.Native.so [0]
        57:	binding file /usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/libSystem.Native.so [0] to /usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/libSystem.Native.so [0]: normal symbol `SystemNative_ReceiveMessage'
        57:	symbol=SystemNative_TryChangeSocketEventRegistration;  lookup in file=/usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/libSystem.Native.so [0]
        57:	binding file /usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/libSystem.Native.so [0] to /usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/libSystem.Native.so [0]: normal symbol `SystemNative_TryChangeSocketEventRegistration'
        57:	
        57:	file=/usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/libldap-2.5.so.0 [0];  dynamically loaded by /usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/libcoreclr.so [0]
        57:	
        57:	file=/app/bin/Debug/net8.0/runtimes/linux/lib/net8.0/libldap-2.5.so.0 [0];  dynamically loaded by /usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/libcoreclr.so [0]
        57:	
        57:	file=libldap-2.5.so.0 [0];  dynamically loaded by /usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/libcoreclr.so [0]
        57:	find library=libldap-2.5.so.0 [0]; searching
        57:	 search cache=/etc/ld.so.cache
        57:	 search path=/lib/x86_64-linux-gnu:/usr/lib/x86_64-linux-gnu:/lib:/usr/lib		(system search path)
        57:	  trying file=/lib/x86_64-linux-gnu/libldap-2.5.so.0
        57:	  trying file=/usr/lib/x86_64-linux-gnu/libldap-2.5.so.0
        57:	  trying file=/lib/libldap-2.5.so.0
        57:	  trying file=/usr/lib/libldap-2.5.so.0
        57:	
        57:	
        57:	file=/usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/liblibldap-2.5.so.0 [0];  dynamically loaded by /usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/libcoreclr.so [0]
        57:	
        57:	file=/app/bin/Debug/net8.0/runtimes/linux/lib/net8.0/liblibldap-2.5.so.0 [0];  dynamically loaded by /usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/libcoreclr.so [0]
        57:	
        57:	file=liblibldap-2.5.so.0 [0];  dynamically loaded by /usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/libcoreclr.so [0]
        57:	find library=liblibldap-2.5.so.0 [0]; searching
        57:	 search cache=/etc/ld.so.cache
        57:	 search path=/lib/x86_64-linux-gnu:/usr/lib/x86_64-linux-gnu:/lib:/usr/lib		(system search path)
        57:	  trying file=/lib/x86_64-linux-gnu/liblibldap-2.5.so.0
        57:	  trying file=/usr/lib/x86_64-linux-gnu/liblibldap-2.5.so.0
        57:	  trying file=/lib/liblibldap-2.5.so.0
        57:	  trying file=/usr/lib/liblibldap-2.5.so.0
        57:	
        57:	
        57:	file=/usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/libldap-2.5.so.0.so [0];  dynamically loaded by /usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/libcoreclr.so [0]
        57:	
        57:	file=/app/bin/Debug/net8.0/runtimes/linux/lib/net8.0/libldap-2.5.so.0.so [0];  dynamically loaded by /usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/libcoreclr.so [0]
        57:	
        57:	file=libldap-2.5.so.0.so [0];  dynamically loaded by /usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/libcoreclr.so [0]
        57:	find library=libldap-2.5.so.0.so [0]; searching
        57:	 search cache=/etc/ld.so.cache
        57:	 search path=/lib/x86_64-linux-gnu:/usr/lib/x86_64-linux-gnu:/lib:/usr/lib		(system search path)
        57:	  trying file=/lib/x86_64-linux-gnu/libldap-2.5.so.0.so
        57:	  trying file=/usr/lib/x86_64-linux-gnu/libldap-2.5.so.0.so
        57:	  trying file=/lib/libldap-2.5.so.0.so
        57:	  trying file=/usr/lib/libldap-2.5.so.0.so
        57:	
        57:	
        57:	file=/usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/liblibldap-2.5.so.0.so [0];  dynamically loaded by /usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/libcoreclr.so [0]
        57:	
        57:	file=/app/bin/Debug/net8.0/runtimes/linux/lib/net8.0/liblibldap-2.5.so.0.so [0];  dynamically loaded by /usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/libcoreclr.so [0]
        57:	
        57:	file=liblibldap-2.5.so.0.so [0];  dynamically loaded by /usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/libcoreclr.so [0]
        57:	find library=liblibldap-2.5.so.0.so [0]; searching
        57:	 search cache=/etc/ld.so.cache
        57:	 search path=/lib/x86_64-linux-gnu:/usr/lib/x86_64-linux-gnu:/lib:/usr/lib		(system search path)
        57:	  trying file=/lib/x86_64-linux-gnu/liblibldap-2.5.so.0.so
        57:	  trying file=/usr/lib/x86_64-linux-gnu/liblibldap-2.5.so.0.so
        57:	  trying file=/lib/liblibldap-2.5.so.0.so
        57:	  trying file=/usr/lib/liblibldap-2.5.so.0.so
        57:	
        57:	
        57:	file=libldap-2.6.so.0 [0];  dynamically loaded by /usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/libcoreclr.so [0]
        57:	find library=libldap-2.6.so.0 [0]; searching
        57:	 search cache=/etc/ld.so.cache
        57:	 search path=/lib/x86_64-linux-gnu:/usr/lib/x86_64-linux-gnu:/lib:/usr/lib		(system search path)
        57:	  trying file=/lib/x86_64-linux-gnu/libldap-2.6.so.0
        57:	  trying file=/usr/lib/x86_64-linux-gnu/libldap-2.6.so.0
        57:	  trying file=/lib/libldap-2.6.so.0
        57:	  trying file=/usr/lib/libldap-2.6.so.0
        57:	
        57:	
        57:	file=libldap-2.4.so.2 [0];  dynamically loaded by /usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.2/libcoreclr.so [0]
        57:	find library=libldap-2.4.so.2 [0]; searching
        57:	 search cache=/etc/ld.so.cache
        57:	 search path=/lib/x86_64-linux-gnu:/usr/lib/x86_64-linux-gnu:/lib:/usr/lib		(system search path)
        57:	  trying file=/lib/x86_64-linux-gnu/libldap-2.4.so.2
        57:	  trying file=/usr/lib/x86_64-linux-gnu/libldap-2.4.so.2
        57:	  trying file=/lib/libldap-2.4.so.2
        57:	  trying file=/usr/lib/libldap-2.4.so.2
        57:

Urryy · 2024-03-14T05:34:51Z

Urryy
Mar 14, 2024

RUN apt-get update \ && apt-get install --upgrade -y libldap-2.5.0 \ && ln -s /usr/lib/x86_64-linux-gnu/libldap.so.2 /usr/lib/libldap-2.5.so.0
Use this code in your dockerfile.

8 replies

Urryy Mar 15, 2024

Could you drop the Libldap sentence in dockerfile?

RUN apt update
&& apt install -qqy --no-install-recommends libldap.so.2 curl git git-man libatomic1:amd64 libbrotli1:amd64 libcurl3-gnutls:amd64 libcurl4:amd64 liberror-perl libexpat1:amd64 libgdbm-compat4:amd64 libgdbm6:amd64 libgssapi-krb5-2:amd64 libk5crypto3:amd64 libkeyutils1:amd64 libkrb5-3:amd64 libkrb5support0:amd64 libldap-2.5-0:amd64 libnghttp2-14:amd64 libperl5.36:amd64 libpsl5:amd64 librtmp1:amd64 libsasl2-2:amd64 libsasl2-modules-db:amd64 libssh2-1:amd64 perl perl-modules-5.36 wget
&& ln -s /usr/lib/x86_64-linux-gnu/libldap-2.5.so.0 /usr/lib/x86_64-linux-gnu/libldap-2.4.so.2
&& apt clean
&& rm -rf /var/lib/apt/lists/*

Is such a string obtained or not?

pellea Mar 15, 2024
Author

With the SDK image, it's working also without these line.

The libldap is indeed installed correctly.

root@8ad763e2b510:/app# apt list --installed | grep ldap

WARNING: apt does not have a stable CLI interface. Use with caution in scripts.

libldap-2.5-0/now 2.5.13+dfsg-5 amd64 [installed,local]

or

root@8ad763e2b510:/app# dpkg --status libldap-2.5-0 
Package: libldap-2.5-0
Status: install ok installed
Priority: optional
Section: libs
Installed-Size: 553
Maintainer: Debian OpenLDAP Maintainers <[email protected]>
Architecture: amd64
Multi-Arch: same
Source: openldap
Version: 2.5.13+dfsg-5
Replaces: libldap-2.3-0, libldap2
Depends: libc6 (>= 2.34), libgnutls30 (>= 3.7.5), libsasl2-2 (>= 2.1.28+dfsg)
Recommends: libldap-common
Conflicts: ldap-utils (<= 2.1.23-1)
Description: OpenLDAP libraries
 These are the run-time libraries for the OpenLDAP (Lightweight Directory
 Access Protocol) servers and clients.
Homepage: https://www.openldap.org/

But the libldap.so.2 is nowhere to be found:

root@8ad763e2b510:/app# dpkg --listfiles libldap-2.5-0
/.
/usr
/usr/lib
/usr/lib/x86_64-linux-gnu
/usr/lib/x86_64-linux-gnu/liblber-2.5.so.0.1.8
/usr/lib/x86_64-linux-gnu/libldap-2.5.so.0.1.8
/usr/share
/usr/share/doc
/usr/share/doc/libldap-2.5-0
/usr/share/doc/libldap-2.5-0/README.Debian
/usr/share/doc/libldap-2.5-0/changelog.Debian.gz
/usr/share/doc/libldap-2.5-0/changelog.gz
/usr/share/doc/libldap-2.5-0/copyright
/usr/share/lintian
/usr/share/lintian/overrides
/usr/share/lintian/overrides/libldap-2.5-0
/usr/lib/x86_64-linux-gnu/liblber-2.5.so.0
/usr/lib/x86_64-linux-gnu/libldap-2.5.so.0

here is the ls :

root@8ad763e2b510:/app# ls -lap /usr/lib/x86_64-linux-gnu/ | grep libldap
lrwxrwxrwx  1 root root       20 Feb  8  2023 libldap-2.5.so.0 -> libldap-2.5.so.0.1.8
-rw-r--r--  1 root root   380432 Feb  8  2023 libldap-2.5.so.0.1.8

Urryy Mar 15, 2024

Sdk image is an image from microsoft?
And i don't need to download any libraries in the dockerfile?

pellea Mar 15, 2024
Author

FROM mcr.microsoft.com/dotnet/sdk:8.0

Urryy Mar 15, 2024

Understood, thanks, I used image from bookworm

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

LDAP error with .NET 8 on docker: sdk:8.0 vs runtime:8.0 ? #98990

{{title}}

{{editor}}'s edit

{{editor}}'s edit

Replies: 2 comments 9 replies

{{title}}

{{title}}

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{title}}

Select a reply

LDAP error with .NET 8 on docker: sdk:8.0 vs runtime:8.0 ? #98990

pellea Feb 27, 2024

Replies: 2 comments · 9 replies

hez2010 Feb 27, 2024

pellea Feb 28, 2024 Author

Urryy Mar 14, 2024

Urryy Mar 15, 2024

pellea Mar 15, 2024 Author

Urryy Mar 15, 2024

pellea Mar 15, 2024 Author

Urryy Mar 15, 2024

pellea
Feb 27, 2024

Replies: 2 comments 9 replies

hez2010
Feb 27, 2024

pellea Feb 28, 2024
Author

Urryy
Mar 14, 2024

pellea Mar 15, 2024
Author

pellea Mar 15, 2024
Author