Work – Page 20

Extending VMotion compatiblity (continued)

July 14, 2008August 16, 2014 Christian Leave a comment

Remember my last post about cpu masking ? Well, turns out that you can do it to a “template”.

The only point you don’t need to do, is to mark the VM as a “template“. You still can clone it and move it around and all that other stuff, but the good part is, that the cloned VM keeps the cpu mask set to the “template” *shrug*

I don’t know, why VMware didn’t include that feature into the templates, since it’s a real freaky way to do.

Nagios3 with Active Directory authorization on SLES10

July 14, 2008June 21, 2013 Christian Leave a comment

Well, it seems to be getting a “trend” for me, to integrate stuff into our Active Directory. Now that I know why, and how easy that is, I expect to add more stuff. The good thing about the integration is, that you only need to maintain a single source for authorization.

The bad thing about that is, that stuff becomes dependent on the Active Directory (we do have four domain controllers, so that should be fine).

Now, here’s the ssl-(only) apache2 configuration file for my vhost:

&lt;VirtualHost *:80&gt;
  ## mod_core
  DocumentRoot &quot;/usr/share/nagios&quot;

  ServerName nagios.barfoo.org
  ServerAlias nagios3.barfoo.org
  ServerAdmin nagiosadmin@barfoo.org

  ## mod_rewrite
  RewriteEngine On
  RewriteRule ^/(.*)         https://nagios.barfoo.org/$1 [L,R]

&lt;/VirtualHost&gt;

&lt;VirtualHost *:443&gt;

  ## mod_core
  DocumentRoot &quot;/usr/share/nagios&quot;

  ServerName nagios.barfoo.org
  ServerAdmin nagiosadmin@barfoo.org

  ScriptAlias /nagios/cgi-bin /usr/lib/nagios/cgi
  Alias /nagios /usr/share/nagios
  Alias /pnp /usr/share/nagios/html/pnp4nagios

  &lt;DirectoryMatch &quot;/usr/(share/nagios|lib/nagios/cgi)&quot;&gt;
    AllowOverride None
    Order deny,allow
    Deny from all
    Allow from 10.0.0.
    Options None

    # Authorization
    AuthType Basic
    AuthName &quot;Nagios Barfoo&quot;

    # The authentification provider is mod_ldap
    AuthBasicProvider ldap

    # mod_ldap is our *only* authentification provider for this!
    AuthzLDAPAuthoritative on

    # Redirect the userfile requests to /dev/null
    AuthUserFile /dev/null

    # AD requires an authentication DN to access any records
    AuthLDAPBindDN &quot;BARFOO\ldap_nagios&quot;
    AuthLDAPBindPassword &quot;somethingrandom&quot;

    # The URL to search in
    AuthLDAPURL &quot;ldap://dc0.barfoo.org dc1.barfoo.org dc2.barfoo.org dc3.barfoo.org/OU=Users,dc=barfoo,dc=org?sAMAccountName?sub?(objectClass=*)&quot;

    # Search the group membership in the specified group, otherwise it&#039;s gonna
    # get searched at the binding DN&#039;s location
    AuthLDAPGroupAttributeIsDN on
    Require ldap-group CN=gr_nagios,OU=Groups,DC=barfoo,DC=org
  &lt;/DirectoryMatch&gt;

  ## mod_log
  ErrorLog /var/log/apache2/nagios.barfoo.org.error_log
  TransferLog /var/log/apache2/nagios.barfoo.org.access_log
  CustomLog /var/log/apache2/nagios.barfoo.org.ssl_request_log   ssl_combined

  ## mod_ssl
  SSLEngine on
  SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
  SSLCertificateFile /etc/apache2/ssl.crt/nagios.barfoo.org.crt
  SSLCertificateKeyFile /etc/apache2/ssl.key/nagios.barfoo.org.key

  &lt;Files ~ &quot;.(cgi|shtml|phtml|php3|php?)$&quot;&gt;
    SSLOptions +StdEnvVars
  &lt;/Files&gt;

  SetEnvIf User-Agent &quot;.*MSIE.*&quot; 
    nokeepalive ssl-unclean-shutdown 
    downgrade-1.0 force-response-1.0

&lt;/VirtualHost&gt;

## mod_core

DocumentRoot "/usr/share/nagios"

ServerName nagios.barfoo.org

ServerAlias nagios3.barfoo.org

ServerAdmin nagiosadmin@barfoo.org

## mod_rewrite

RewriteEngine On

RewriteRule ^/(.*) https://nagios.barfoo.org/$1 [L,R]

</VirtualHost>

## mod_core

DocumentRoot "/usr/share/nagios"

ServerName nagios.barfoo.org

ServerAdmin nagiosadmin@barfoo.org

ScriptAlias /nagios/cgi-bin /usr/lib/nagios/cgi

Alias /nagios /usr/share/nagios

Alias /pnp /usr/share/nagios/html/pnp4nagios

AllowOverride None

Order deny,allow

Deny from all

Allow from 10.0.0.

Options None

# Authorization

AuthType Basic

AuthName "Nagios Barfoo"

# The authentification provider is mod_ldap

AuthBasicProvider ldap

# mod_ldap is our *only* authentification provider for this!

AuthzLDAPAuthoritative on

# Redirect the userfile requests to /dev/null

AuthUserFile /dev/null

# AD requires an authentication DN to access any records

AuthLDAPBindDN "BARFOO\ldap_nagios"

AuthLDAPBindPassword "somethingrandom"

# The URL to search in

AuthLDAPURL "ldap://dc0.barfoo.org dc1.barfoo.org dc2.barfoo.org dc3.barfoo.org/OU=Users,dc=barfoo,dc=org?sAMAccountName?sub?(objectClass=*)"

# Search the group membership in the specified group, otherwise it's gonna

# get searched at the binding DN's location

AuthLDAPGroupAttributeIsDN on

Require ldap-group CN=gr_nagios,OU=Groups,DC=barfoo,DC=org

</DirectoryMatch>

## mod_log

ErrorLog /var/log/apache2/nagios.barfoo.org.error_log

TransferLog /var/log/apache2/nagios.barfoo.org.access_log

CustomLog /var/log/apache2/nagios.barfoo.org.ssl_request_log ssl_combined

## mod_ssl

SSLEngine on

SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL

SSLCertificateFile /etc/apache2/ssl.crt/nagios.barfoo.org.crt

SSLCertificateKeyFile /etc/apache2/ssl.key/nagios.barfoo.org.key

SSLOptions +StdEnvVars

</Files>

SetEnvIf User-Agent ".*MSIE.*"

nokeepalive ssl-unclean-shutdown

downgrade-1.0 force-response-1.0

</VirtualHost>

As you can see, AuthLDAPUrl holds the four LDAP servers separated by spaces (that’s what the Apache2 documentation says about that), and that actually works.

The only additional thing I had to change from the nagios part is in /etc/nagios/cgi.cfg to allow everyone to issue system commands. Also, if you ever stumble upon extraneous chars in the check_nrpe output, update to a newer NRPE version, that fixed it for me (that is on the receiver side – as in the box running the NRPE agent).

Extending vMotion compatiblity

July 4, 2008June 21, 2013 Christian 1 Comment

Today I did something horrible. I yet again noticed that I bought the wrong CPU’s (basically I bought Xeon DP’s with four cores). Those have apparently a feature called SSSE3, which makes vMotion with our old Xeon DP’s (dual cores) fail before even trying.

But as we had a cooling outage today (basically ’cause it broke), I needed to turn off some ESX servers. Thus leaving me with the new ones and one of the old ones. *yuck*

So after a bit of googling, I found this VMware KB entry, which luckily lists the registers (on level 1) you need to zero out.

ecx ---- ---- ---- -0-- ---- --0- ---0 -0--
edx ---- ---- ---- --0- ---- ---- ---- ----

1 2	ecx ---- ---- ---- -0-- ---- --0- ---0 -0-- edx ---- ---- ---- --0- ---- ---- ---- ----

Only problem after that was that it still wasn’t enough. So back to the drawing board. The final solution came rather quick and looks like this:

eax ---- ---- ---- ---- ---- 0--0 ---- ----
ecx ---- ---- ---- -0-- ---- --0- ---0 -0--
edx ---- ---- ---- --0- ---- ---- ---- ----

eax ---- ---- ---- ---- ---- 0--0 ---- ----

ecx ---- ---- ---- -0-- ---- --0- ---0 -0--

edx ---- ---- ---- --0- ---- ---- ---- ----

The only stupid thing about this is, that

it ain’t supported by VMware (as in if you’re having trouble with your ESX/VC and you have a VM running with this, you’re shit outta luck!)
you have to define this on a *per VM basis*, which really is a pain in the ass for larger installations

True, I just should’ve bought vMotion compatible CPU’s, that would have spared me the hassle … but it’s too late now, I have to live with those ones.

Managing unixODBC connections on SLES10

July 3, 2008June 21, 2013 Christian Leave a comment

Recently I got the task, to implement unixODBC/freetds on one (well, it’s really three) of our web servers, as someone wanted to use Microsoft SQL Server 2005 with PHP (without using the MSSQL functions, which PHP provides soo nicely; don’t ask me why).

With that I also got a set of “instructions” on how to install freetds from source (remember, I was a Gentoo dev, so I know my way around, when it comes to building from source), as well as a small set of instructions on how to create the connection.

Well, after trying to figure out why the hell the connection ain’t working with unixODBC’s tsql and PHP’s odbc functions, and yet the plain connection using telnet works … *shrug* turns out it was a simple mistake …

The “howto” said something like this:

; html-script: false ][FreeTDS]
Description  = FreeTDS unixODBC Driver
Driver       = /usr/lib64/libtdsodbc.so
Setup        = /usr/lib64/libtdsodbc.so

[ODBC Data Sources]
mssql        = Microsoft SQL Server 2005

[mssql]
Driver       = /usr/lib64/libtdsodbc.so
Description  = MSSQLServer
Trace        = No
Database     = Database
TraceFile    = /var/log/freetdssql-foobar.log
Servername   = sql.foobar.org
Port         = 2433
TDS_Version  = 8.0

[Default]
Driver       = /usr/lib64/libtdsodbc.so

; html-script: false ][FreeTDS]

Description = FreeTDS unixODBC Driver

Driver = /usr/lib64/libtdsodbc.so

Setup = /usr/lib64/libtdsodbc.so

[ODBC Data Sources]

mssql = Microsoft SQL Server 2005

[mssql]

Driver = /usr/lib64/libtdsodbc.so

Description = MSSQLServer

Trace = No

Database = Database

TraceFile = /var/log/freetdssql-foobar.log

Servername = sql.foobar.org

Port = 2433

TDS_Version = 8.0

[Default]

Driver = /usr/lib64/libtdsodbc.so

; html-script: false ][FreeTDS]
Description  = FreeTDS unixODBC Driver
Driver       = /usr/lib64/libtdsodbc.so
Setup        = /usr/lib64/libtdsodbc.so

[ODBC Data Sources]
mssql        = Microsoft SQL Server 2005

[mssql]
Driver       = /usr/lib64/libtdsodbc.so
Description  = MSSQLServer
Trace        = No
Database     = Database
TraceFile    = /var/log/freetdssql-foobar.log
Server       = sql.foobar.org
Port         = 2433
TDS_Version  = 8.0

[Default]
Driver       = /usr/lib64/libtdsodbc.so

; html-script: false ][FreeTDS]

Description = FreeTDS unixODBC Driver

Driver = /usr/lib64/libtdsodbc.so

Setup = /usr/lib64/libtdsodbc.so

[ODBC Data Sources]

mssql = Microsoft SQL Server 2005

[mssql]

Driver = /usr/lib64/libtdsodbc.so

Description = MSSQLServer

Trace = No

Database = Database

TraceFile = /var/log/freetdssql-foobar.log

Server = sql.foobar.org

Port = 2433

TDS_Version = 8.0

[Default]

Driver = /usr/lib64/libtdsodbc.so

See the difference ? If not, I’ll show you a diff:

; html-script: false ]--- odbc.ini.orig
+++ odbc.ini
@@ -12,7 +12,7 @@
 Trace        = No
 Database     = Database
 TraceFile    = /var/log/freetdssql-foobar.log
-Servername   = sql.barfoo.org
+Server       = sql.barfoo.org
 Port         = 2433
 TDS_Version  = 8.0

; html-script: false ]--- odbc.ini.orig

+++ odbc.ini

@@ -12,7 +12,7 @@

Trace = No

Database = Database

TraceFile = /var/log/freetdssql-foobar.log

-Servername = sql.barfoo.org

+Server = sql.barfoo.org

Port = 2433

TDS_Version = 8.0

Something as simple as adding another part of a word (as in “name“) to Server, makes the whole thing go wonko. Well, it ain’t going wonko per se, as Servername is different from the meaning of Server, at least when it comes to freetds.

Servername is the SQL-Server Instance name, while Server is the DNS name .. figures.

subversion on WebDAV with Active Directory authorization on SLES10

June 29, 2008June 21, 2013 Christian Leave a comment

Okay, so I ended up toying with subversion via WebDAV on SLES today (I know, I know .. it’s bloody Sunday). It wasn’t much of a hassle though, after reading this. Sure, I made a few errors at first (simply confused the logic behind “Location” and “Directory“), but after that plain subversion commits via WebDAV (thus utilizing Apache) worked fine.

For POC or as a hint to myself, here’s where and what I needed to add/change:

Add the following modules to APACHE_MODULES in /etc/sysconfig/apache2:

dav_svn (dav_svn needs dav, thus the need to add it too)
dav
authnz_ldap (authnz_ldap needs ldap, so again we need that too!)
ldap

After that, we can add our repository (or our multi-repository folder) to /etc/apache2/conf.d/subversion.conf:

&lt;IfModule mod_dav_svn.c&gt;

&lt;Location /svn&gt;
  DAV svn
  SVNParentPath /srv/svn

  # Limit write permission to list of valid users.
  &lt;LimitExcept GET PROPFIND OPTIONS REPORT&gt;
    # Require SSL connection for password protection.
    # SSLRequireSSL

    AuthType Basic
    AuthName &quot;Subversion repositories (Domänenzugangsdaten)&quot;

    # The authentification provider is mod_ldap
    AuthBasicProvider ldap

    # mod_ldap is our *only* authentification provider for this!
    AuthzLDAPAuthoritative on

    # AD requires an authentication DN to access any records
    AuthLDAPBindDN &quot;CN=LDAP Subversion,OU=anon_accounts,OU=Users,DC=foobar,DC=org&quot;
    AuthLDAPBindPassword &quot;somethingrandom&quot;

    # The URL to search in
    AuthLDAPURL &quot;ldap://dc0.foobar.org/ou=Users,dc=foobar,dc=org?sAMAccountName?sub?(objectClass=*)&quot;

    # Search the group membership in the specified group, otherwise it&#039;s gonna
    # get searched at the binding DN&#039;s location
    AuthLDAPGroupAttributeIsDN on
    Require ldap-group CN=gr_subversion,OU=Groups,DC=foobar,DC=org

  &lt;/LimitExcept&gt;
&lt;/Location&gt;

DAV svn

SVNParentPath /srv/svn

# Limit write permission to list of valid users.

# Require SSL connection for password protection.

# SSLRequireSSL

AuthType Basic

AuthName "Subversion repositories (Domänenzugangsdaten)"

# The authentification provider is mod_ldap

AuthBasicProvider ldap

# mod_ldap is our *only* authentification provider for this!

AuthzLDAPAuthoritative on

# AD requires an authentication DN to access any records

AuthLDAPBindDN "CN=LDAP Subversion,OU=anon_accounts,OU=Users,DC=foobar,DC=org"

AuthLDAPBindPassword "somethingrandom"

# The URL to search in

AuthLDAPURL "ldap://dc0.foobar.org/ou=Users,dc=foobar,dc=org?sAMAccountName?sub?(objectClass=*)"

# Search the group membership in the specified group, otherwise it's gonna

# get searched at the binding DN's location

AuthLDAPGroupAttributeIsDN on

Require ldap-group CN=gr_subversion,OU=Groups,DC=foobar,DC=org

</LimitExcept>

</Location>

Now, as you can see, my goal was to not rely on a separate authorization database, but to use our already existing Active Directory at work. Generally this works just fine, but it didn’t. I tried various things, like trying another user, changing the group (as in the “require ldap-group“) as well as changing my own password. Zip.

All I got was this line in the error_log of Apache:

[warn] [client 10.0.0.148] [9486] auth_ldap authenticate: user foo authentication failed; URI /svn/admin-scripts/!svn/act/71f2b65f-d050-0410-b33c-3b31fbb94a00 [ldap_search_ext_s() for user failed][Operations error]

1	[warn] [client 10.0.0.148] [9486] auth_ldap authenticate: user foo authentication failed; URI /svn/admin-scripts/!svn/act/71f2b65f-d050-0410-b33c-3b31fbb94a00 [ldap_search_ext_s() for user failed][Operations error]

Now, that itself does tell you what is happening, but not why. So again, I ended up googling till I found this:

The suggested step was to add “REFERRALS off” to /etc/ldap/ldap.conf. Surprise, the file don’t exist. Heck, there’s that one in /etc/ldap.conf. I did that, still zip.

Did I get the wrong file ? Absolutely.

/etc/ldap.conf is used by nsswitch and pam_ldap, but not by openldap2 (which is what Apache is using). So reading this comment, adding the line to /etc/openldap2/ldap.conf, and *kaching*! Works.

Now I just need to install redmine (already installed ruby, rubygems and rubygem-rails from the SDK Addon), but I’ll leave that for tomorrow, today I’m gonna watch Band of Brothers.

The clue to build ppc64 RPM’s

June 26, 2008August 16, 2014 Christian Leave a comment

Remember, I talked about building RPM’s on SLES10SP2 on ppc64 ? Well, turns out I was rather stupid .. and it was rather simple (don’t ask me why I didn’t think of that). I tried asking solar, I used Google (apparently with the wrong search parameters), nothing though. Not a clue.

Today it bugged me again, so I used Google again. This time with “ppc64 suse rpmbuild“, and guess what I saw within the preview of the second hit ..

rpmbuild -ba --target ppc64 myfile.spec

1	rpmbuild -ba --target ppc64 myfile.spec

And here I thought I was missing something, turns out I was really stupid though .. *shrug* Building stuff like nagios works with that just fine ..

Update: or not. It worked only a single time and is broken ever since again. Guess I’m gonna reload the box on Tuesday.

VMware design rules

June 20, 2008August 16, 2014 Christian 3 Comments

I’m just got back from four days in Rostock over at S&N, where I was attending a VMware design course and here’s a list of questions I did ask the trainer:

What’s the disadvantage of having a 1016 ported vSwitch ?
Any clues on how to exchange the default certificate of the Virtual Center ?
Are there any tools to stress test the virtual system ?
Are there any performance impacts of having more than 10 users in Virtual Center ?
Any clues and/or guides on how to do time synchronization in VMware guests, especially Linux guests ?
What’s the preferred NIC type for Linux guests ?
Any clues to using Raw Device Mappings with VMotion ?
Is there a way of defining CPU masks on a global level ?

Answers:

There might be a small overhead, though that’s limited to a really, non-measureable amount
Hasn’t done it yet.
Yes, there are free stress test tools like cpubusy.vbs, cpubusy.pl, iometer.exe, ..
Nope, you should only experienece load problems starting at 25 or so users
Select *one* variant, either time synchronization by use of the VMware tools or ntpupdate; if ntpupdate, select a single time source for your whole environment
For ESX 3.5.0 that would be “Flexible” (as per VMware Knowledgebase), as the vmxnet type is a leftover from ESX 3.0
Raw device mappings are *absolutely* supported by VMware, and also work without any troubles (when mapping/zonig is correctly configured)
Currently there’s no known way of doing this

When adjusting the CPU afinity of a VM, *always* completely stop the virtual machine afterwards
When trying to figure out CPU bottlenecks, check whether or not hyperthreading is enabled. The hyperthreaded (second) core is only giving you a CPU with 15% of the first.

Also, here are some guidelines on how the trainer extended the defaults:

ESX Server:

Extend the “/” size to 10GiB
Extend the “swap” partition to about 1GiB
Extend the “/var/log” partition to about 4 GiB
don’t mess around with creating too many vSwitches; just keep it simple
set the duplex mode manually if the ESX is giving you any trouble
disable the Traffic Shaping, unless you *really* need it

VirtualCenter:

There’s two options when installing VirtualCenter: either install it on a physical box or simply put it into a virtual machine itself
A problem with putting it into a virtual machine is, when the VM is shutting down or powered off due to isolation of the ESX running it, any ESX Server powering up isn’t going to start any virtual machines as that in return requires the License Server (as Michael pointed out in #c1, the VM is still gonna start as the HA agent is able to start virtual machines on the basis of the 14-day grace period)
Only use the SQL Server Express variant if you really have to. It’s limited to 4GB database size, so if your installation grows above say 50 hosts and 2000 VM’s, this is gonna break the limits of SQL Server Express

Updated `check_ram’ plugin

June 17, 2008August 16, 2014 Christian Leave a comment

As I was building the updated RPMs for SLES10, though needed to refresh my old patch. Also, I was getting strange messages from autotools and fixed these quirks, Now, I prepped a patch for it, and finished building new RPMs for i586 and x86_64.

Building RPMs on SLES10SP2-ppc64

June 14, 2008June 21, 2013 Christian 1 Comment

Well, it turns out that building stuff on ppc64 is a *real* pain in the ass, at least on anything SUSE related. I do have to tweak every damn spec to include this:

%ifarch ppc64
export LDFLAGS=&quot;$LDFLAGS -m64&quot;
%endif

%ifarch ppc64

export LDFLAGS="$LDFLAGS -m64"

%endif

Otherwise, ld is gonna fail when linking, as it’s gonna try linking the generated 64bit code (-m64 is passed on via RPM_OPT_FLAGS to CFLAGS) as 32bit code, which ain’t gonna work at all …

On top of that, stuff ain’t building due to multiple problems (for example nagios and vim, cause ld is unable to find the fitting -lperl (for nagios) and -lXt (for vim)) as well as source errors …

gcc -DHAVE_CONFIG_H -I. -I. -I../../include -I../../include -I/usr/include -D_FREETDS_LIBRARY_SOURCE -DUNIXODBC -DHAVE_UNISTD_H -DHAVE_PWD_H -DHAVE_SYS_TYPES_H -DHAVE_LONG_LONG -DSIZEOF_LONG=4 -D_REENTRANT -D_THREAD_SAFE -DDEBUG=1 -Wall -Wstrict-prototypes -Wmissing-prototypes -Wno-long-long -pthread -O2 -g -m64 -fmessage-length=0 -D_FORTIFY_SOURCE=2 -Wdeclaration-after-statement -MT connectparams.lo -MD -MP -MF .deps/connectparams.Tpo -c connectparams.c  -fPIC -DPIC -o .libs/connectparams.o
In file included from connectparams.c:22:
../../include/config.h:375:1: warning: &quot;SIZEOF_LONG&quot; redefined
&lt;command line&gt;:1:1: warning: this is the location of the previous definition
connectparams.c:90: error: static declaration of `SQLGetPrivateProfileString&#039; follows non-static declaration
/usr/include/odbcinst.h:170: error: previous declaration of `SQLGetPrivateProfileString&#039; was here
make[3]: *** [connectparams.lo] Error 1
make[3]: Leaving directory `/srv/BUILD/freetds-0.82/src/odbc&#039;
make[2]: *** [all-recursive] Error 1
make[2]: Leaving directory `/srv/BUILD/freetds-0.82/src/odbc&#039;
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/srv/BUILD/freetds-0.82/src&#039;
make: *** [all-recursive] Error 1

gcc -DHAVE_CONFIG_H -I. -I. -I../../include -I../../include -I/usr/include -D_FREETDS_LIBRARY_SOURCE -DUNIXODBC -DHAVE_UNISTD_H -DHAVE_PWD_H -DHAVE_SYS_TYPES_H -DHAVE_LONG_LONG -DSIZEOF_LONG=4 -D_REENTRANT -D_THREAD_SAFE -DDEBUG=1 -Wall -Wstrict-prototypes -Wmissing-prototypes -Wno-long-long -pthread -O2 -g -m64 -fmessage-length=0 -D_FORTIFY_SOURCE=2 -Wdeclaration-after-statement -MT connectparams.lo -MD -MP -MF .deps/connectparams.Tpo -c connectparams.c -fPIC -DPIC -o .libs/connectparams.o

In file included from connectparams.c:22:

../../include/config.h:375:1: warning: "SIZEOF_LONG" redefined

<command line>:1:1: warning: this is the location of the previous definition

connectparams.c:90: error: static declaration of `SQLGetPrivateProfileString' follows non-static declaration

/usr/include/odbcinst.h:170: error: previous declaration of `SQLGetPrivateProfileString' was here

make[3]: *** [connectparams.lo] Error 1

make[3]: Leaving directory `/srv/BUILD/freetds-0.82/src/odbc'

make[2]: *** [all-recursive] Error 1

make[2]: Leaving directory `/srv/BUILD/freetds-0.82/src/odbc'

make[1]: *** [all-recursive] Error 1

make[1]: Leaving directory `/srv/BUILD/freetds-0.82/src'

make: *** [all-recursive] Error 1