|
»
samba and ads authentication
|
View:
New views
8 Messages
—
Rating Filter:
Alert me
|
 |
samba and ads authentication
by Tom Montague
::
Rate this Message:
I am looking at setting up ADS authentication for my current samba
configuration. I am quite wary of making big changes that I do not understand as there are shares currently setup and I do not want to lose this. I have read through the "how to's" and I am at the point where I want to "Create the computer account" and running the command :- Net ads join -U administrator%password I am getting the error "ADS support not compiled in" The fix for this says... Samba must be reconfigured (remove config.cache) and recompile (make clean all install) after the Kerberos libraries and headers files are installed. How do I reconfigure samba? I have inherited this samba configuration and I am not sure how/what was configured originally and I do not want to lose the current configuration.. Can someone help me with this recompile command and what entries I should add. I have some details below of the current configuration... Samba version 3.0.23c I found the following details in the config.log configure:34026: result: no configure:34038: checking whether to use smbwrapper configure:34085: result: no configure:34093: checking whether to use AFS clear-text auth configure:34111: result: no configure:34119: checking whether to use AFS fake-kaserver configure:34137: result: no configure:34339: checking whether to use AFS fake-kaserver configure:34357: result: no configure:34376: checking whether to use DFS clear-text auth configure:34398: result: no configure:34407: checking for LDAP support configure:34421: result: no configure:35119: checking for Active Directory and krb5 support configure:35133: result: auto configure:35146: WARNING: Disabling Active Directory support (requires LDAP support) smbd -b | grep LDAP (no output) smbd -b | grep KRB (no output) smbd -b | grep ADS (no output) smbd -b | grep WINBIND WITH_WINBIND WITH_WINBIND TomMontague </pre> <br><P><HR><P> <font size="2" face="Times"> The information in this email, including any attachments, is confidential and may be subject to legal or other professional privilege. It is intended solely for the addressee and access to this email by anyone else is unauthorised. If you have received this email in error, please immediately advise the sender by return email, then delete the message from your system and destroy any copies. If you are not the intended recipient, any use, interference with, distribution, disclosure or copying of this material, or any action taken or omitted to be taken in reliance on it, is unauthorised and prohibited. The Griffin Group scans all outgoing emails for viruses, however The Griffin Group cannot guarantee that email communications are secure or error-free, as information could be intercepted, corrupted, amended, lost, destroyed, arrive late or incomplete. </font> <br></body> <pre> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba |
|
|
Re: samba and ads authentication
by Seban
::
Rate this Message:
Using the following option to configure for ADS
--with-ldap and --with-ads in configure command Also, you must have Kerberos library installed, so give --with-krb5=$(PATH_TO_KRB_LIB)/lib/ If the configure fails, check the path and version of kerberos u r using. Regards, Seban -----Original Message----- From: samba-bounces@... [mailto:samba-bounces@...] On Behalf Of Tom Montague Sent: Thursday, November 05, 2009 9:45 AM To: samba@... Subject: [Samba] samba and ads authentication I am looking at setting up ADS authentication for my current samba configuration. I am quite wary of making big changes that I do not understand as there are shares currently setup and I do not want to lose this. I have read through the "how to's" and I am at the point where I want to "Create the computer account" and running the command :- Net ads join -U administrator%password I am getting the error "ADS support not compiled in" The fix for this says... Samba must be reconfigured (remove config.cache) and recompile (make clean all install) after the Kerberos libraries and headers files are installed. How do I reconfigure samba? I have inherited this samba configuration and I am not sure how/what was configured originally and I do not want to lose the current configuration.. Can someone help me with this recompile command and what entries I should add. I have some details below of the current configuration... Samba version 3.0.23c I found the following details in the config.log configure:34026: result: no configure:34038: checking whether to use smbwrapper configure:34085: result: no configure:34093: checking whether to use AFS clear-text auth configure:34111: result: no configure:34119: checking whether to use AFS fake-kaserver configure:34137: result: no configure:34339: checking whether to use AFS fake-kaserver configure:34357: result: no configure:34376: checking whether to use DFS clear-text auth configure:34398: result: no configure:34407: checking for LDAP support configure:34421: result: no configure:35119: checking for Active Directory and krb5 support configure:35133: result: auto configure:35146: WARNING: Disabling Active Directory support (requires LDAP support) smbd -b | grep LDAP (no output) smbd -b | grep KRB (no output) smbd -b | grep ADS (no output) smbd -b | grep WINBIND WITH_WINBIND WITH_WINBIND TomMontague </pre> <br><P><HR><P> <font size="2" face="Times"> The information in this email, including any attachments, is confidential and may be subject to legal or other professional privilege. It is intended solely for the addressee and access to this email by anyone else is unauthorised. If you have received this email in error, please immediately advise the sender by return email, then delete the message from your system and destroy any copies. If you are not the intended recipient, any use, interference with, distribution, disclosure or copying of this material, or any action taken or omitted to be taken in reliance on it, is unauthorised and prohibited. The Griffin Group scans all outgoing emails for viruses, however The Griffin Group cannot guarantee that email communications are secure or error-free, as information could be intercepted, corrupted, amended, lost, destroyed, arrive late or incomplete. </font> <br></body> <pre> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba Please do not print this email unless it is absolutely necessary. The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. www.wipro.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba |
|
|
Re: samba and ads authentication
by Tom Montague
::
Rate this Message:
Thanks Seban,
I tried running the configure script with the following options... ./configure --with-ldap --with-ads --with-krb5 --with-winbind I am getting the following error:- checking for ldap_initialize... yes checking for ldap_add_result_entry... yes checking for kerberos 5 install path... no krb5-path given checking for krb5-config... no checking for working krb5-config... no. Fallback to previous krb5 detection strategy checking for /usr/include/heimdal... no checking for /usr/kerberos... no checking krb5.h usability... no checking krb5.h presence... no checking for krb5.h... no configure: error: Active Directory cannot be supported without krb5.h I do have Kerberos installed and the kinit <user>@<domain> works for me. My Kerberos krb5.conf file is located in the /etc/krb5/ directory, should I be running the configure script and telling it this location? Should I have a krb5.h file??? -----Original Message----- From: sebastian.rajan@... [mailto:sebastian.rajan@...] Sent: Friday, 6 November 2009 2:41 PM To: Tom Montague; samba@... Subject: RE: [Samba] samba and ads authentication Using the following option to configure for ADS --with-ldap and --with-ads in configure command Also, you must have Kerberos library installed, so give --with-krb5=$(PATH_TO_KRB_LIB)/lib/ If the configure fails, check the path and version of kerberos u r using. Regards, Seban -----Original Message----- From: samba-bounces@... [mailto:samba-bounces@...] On Behalf Of Tom Montague Sent: Thursday, November 05, 2009 9:45 AM To: samba@... Subject: [Samba] samba and ads authentication I am looking at setting up ADS authentication for my current samba configuration. I am quite wary of making big changes that I do not understand as there are shares currently setup and I do not want to lose this. I have read through the "how to's" and I am at the point where I want to "Create the computer account" and running the command :- Net ads join -U administrator%password I am getting the error "ADS support not compiled in" The fix for this says... Samba must be reconfigured (remove config.cache) and recompile (make clean all install) after the Kerberos libraries and headers files are installed. How do I reconfigure samba? I have inherited this samba configuration and I am not sure how/what was configured originally and I do not want to lose the current configuration.. Can someone help me with this recompile command and what entries I should add. I have some details below of the current configuration... Samba version 3.0.23c I found the following details in the config.log configure:34026: result: no configure:34038: checking whether to use smbwrapper configure:34085: result: no configure:34093: checking whether to use AFS clear-text auth configure:34111: result: no configure:34119: checking whether to use AFS fake-kaserver configure:34137: result: no configure:34339: checking whether to use AFS fake-kaserver configure:34357: result: no configure:34376: checking whether to use DFS clear-text auth configure:34398: result: no configure:34407: checking for LDAP support configure:34421: result: no configure:35119: checking for Active Directory and krb5 support configure:35133: result: auto configure:35146: WARNING: Disabling Active Directory support (requires LDAP support) smbd -b | grep LDAP (no output) smbd -b | grep KRB (no output) smbd -b | grep ADS (no output) smbd -b | grep WINBIND WITH_WINBIND WITH_WINBIND TomMontague </pre> <br><P><HR><P> <font size="2" face="Times"> The information in this email, including any attachments, is confidential and may be subject to legal or other professional privilege. It is intended solely for the addressee and access to this email by anyone else is unauthorised. If you have received this email in error, please immediately advise the sender by return email, then delete the message from your system and destroy any copies. If you are not the intended recipient, any use, interference with, distribution, disclosure or copying of this material, or any action taken or omitted to be taken in reliance on it, is unauthorised and prohibited. The Griffin Group scans all outgoing emails for viruses, however The Griffin Group cannot guarantee that email communications are secure or error-free, as information could be intercepted, corrupted, amended, lost, destroyed, arrive late or incomplete. </font> <br></body> <pre> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba Please do not print this email unless it is absolutely necessary. The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. www.wipro.com </pre> <br><P><HR><P> <font size="2" face="Times"> The information in this email, including any attachments, is confidential and may be subject to legal or other professional privilege. It is intended solely for the addressee and access to this email by anyone else is unauthorised. If you have received this email in error, please immediately advise the sender by return email, then delete the message from your system and destroy any copies. If you are not the intended recipient, any use, interference with, distribution, disclosure or copying of this material, or any action taken or omitted to be taken in reliance on it, is unauthorised and prohibited. The Griffin Group scans all outgoing emails for viruses, however The Griffin Group cannot guarantee that email communications are secure or error-free, as information could be intercepted, corrupted, amended, lost, destroyed, arrive late or incomplete. </font> <br></body> <pre> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba |
|
|
Re: samba and ads authentication
by Michael Wood-8
::
Rate this Message:
2009/11/9 Tom Montague <tom.montague@...>:
> Thanks Seban, > > I tried running the configure script with the following options... > > ./configure --with-ldap --with-ads --with-krb5 --with-winbind > > I am getting the following error:- > [...] > configure: error: Active Directory cannot be supported without krb5.h > > > I do have Kerberos installed and the kinit <user>@<domain> works for me. > > My Kerberos krb5.conf file is located in the /etc/krb5/ directory, > should I be running the configure script and telling it this location? No. > Should I have a krb5.h file??? Yes. You probably do not have the Kerberos development package installed. This would include the krb5.h file amongst other things. I did not see any mention of what operating system you're running, but e.g. Debian and Ubuntu have a package called libkrb5-dev. On an RPM-based distribution it is probably something like krb5-devel. -- Michael Wood <esiotrot@...> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba |
|
|
|
|
|
|
|
|
Re: samba and ads authentication
by Tom Montague
::
Rate this Message:
Solaris 9, samba 3.0.23c, openLDAP 2.3
I managed to run the configure script for samba successfully using the following parameters :- ./configure --with-ldap --with-ads --with-pam --with-winbind --with-krb5=/usr/local/lib Now when I am running "make" I am getting the following error... (any ideas) /home1/admin/Projects/HDR1390/samba-3.0.23c/source# make Using FLAGS = -I/usr/local/lib/include -O -D_SAMBA_BUILD_ -I/home1/admin/Projects/HDR1390/samba-3.0.23c/source/iniparser/src -Iinclude -I/home1/admin/Projects/HDR1390/samba-3.0.23c/source/include -I/home1/admin/Projects/HDR1390/samba-3.0.23c/source/tdb -I. -DHAVE_CONFIG_H -I/usr/local/lib/include -D_LARGEFILE_SOURCE -D_REENTRANT -D_FILE_OFFSET_BITS=64 -DLDAP_DEPRECATED -DSUNOS5 -I/home1/admin/Projects/HDR1390/samba-3.0.23c/source -D_SAMBA_BUILD_ LIBS = -lsendfile -lresolv -lnsl -lsocket -ldl LDSHFLAGS = -G -L/usr/local/lib/lib -lthread LDFLAGS = -L/usr/local/lib/lib -lthread PIE_CFLAGS = PIE_LDFLAGS = Compiling dynconfig.c Compiling smbd/vfs.c Compiling passdb/pdb_interface.c Compiling passdb/pdb_ldap.c passdb/pdb_ldap.c: In function `ldapsam_get_new_rid': passdb/pdb_ldap.c:4410: error: incompatible types in assignment passdb/pdb_ldap.c: In function `pdb_init_ldapsam': passdb/pdb_ldap.c:5573: error: incompatible types in assignment make: *** [passdb/pdb_ldap.o] Error 1 -----Original Message----- From: Michael Wood [mailto:esiotrot@...] Sent: Monday, 9 November 2009 7:43 PM To: Tom Montague Cc: sebastian.rajan@...; samba@... Subject: Re: [Samba] samba and ads authentication 2009/11/9 Tom Montague <tom.montague@...>: > Thanks Seban, > > I tried running the configure script with the following options... > > ./configure --with-ldap --with-ads --with-krb5 --with-winbind > > I am getting the following error:- > [...] > configure: error: Active Directory cannot be supported without krb5.h > > > I do have Kerberos installed and the kinit <user>@<domain> works for me. > > My Kerberos krb5.conf file is located in the /etc/krb5/ directory, > should I be running the configure script and telling it this location? No. > Should I have a krb5.h file??? Yes. You probably do not have the Kerberos development package installed. This would include the krb5.h file amongst other things. I did not see any mention of what operating system you're running, but e.g. Debian and Ubuntu have a package called libkrb5-dev. On an RPM-based distribution it is probably something like krb5-devel. -- Michael Wood <esiotrot@...> </pre> <br><P><HR><P> <font size="2" face="Times"> The information in this email, including any attachments, is confidential and may be subject to legal or other professional privilege. It is intended solely for the addressee and access to this email by anyone else is unauthorised. If you have received this email in error, please immediately advise the sender by return email, then delete the message from your system and destroy any copies. If you are not the intended recipient, any use, interference with, distribution, disclosure or copying of this material, or any action taken or omitted to be taken in reliance on it, is unauthorised and prohibited. The Griffin Group scans all outgoing emails for viruses, however The Griffin Group cannot guarantee that email communications are secure or error-free, as information could be intercepted, corrupted, amended, lost, destroyed, arrive late or incomplete. </font> <br></body> <pre> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba |
|
|
Re: samba and ads authentication
by Tom Montague
::
Rate this Message:
When running configure command should I be setting CFLAGS and if so which should I be using? Could this be the cause of the error when I am compiling? -----Original Message----- From: Tom Montague Sent: Wednesday, 11 November 2009 10:13 AM To: 'Michael Wood' Cc: sebastian.rajan@...; samba@... Subject: RE: [Samba] samba and ads authentication Solaris 9, samba 3.0.23c, openLDAP 2.3 I managed to run the configure script for samba successfully using the following parameters :- ./configure --with-ldap --with-ads --with-pam --with-winbind --with-krb5=/usr/local/lib Now when I am running "make" I am getting the following error... (any ideas) /home1/admin/Projects/HDR1390/samba-3.0.23c/source# make Using FLAGS = -I/usr/local/lib/include -O -D_SAMBA_BUILD_ -I/home1/admin/Projects/HDR1390/samba-3.0.23c/source/iniparser/src -Iinclude -I/home1/admin/Projects/HDR1390/samba-3.0.23c/source/include -I/home1/admin/Projects/HDR1390/samba-3.0.23c/source/tdb -I. -DHAVE_CONFIG_H -I/usr/local/lib/include -D_LARGEFILE_SOURCE -D_REENTRANT -D_FILE_OFFSET_BITS=64 -DLDAP_DEPRECATED -DSUNOS5 -I/home1/admin/Projects/HDR1390/samba-3.0.23c/source -D_SAMBA_BUILD_ LIBS = -lsendfile -lresolv -lnsl -lsocket -ldl LDSHFLAGS = -G -L/usr/local/lib/lib -lthread LDFLAGS = -L/usr/local/lib/lib -lthread PIE_CFLAGS = PIE_LDFLAGS = Compiling dynconfig.c Compiling smbd/vfs.c Compiling passdb/pdb_interface.c Compiling passdb/pdb_ldap.c passdb/pdb_ldap.c: In function `ldapsam_get_new_rid': passdb/pdb_ldap.c:4410: error: incompatible types in assignment passdb/pdb_ldap.c: In function `pdb_init_ldapsam': passdb/pdb_ldap.c:5573: error: incompatible types in assignment make: *** [passdb/pdb_ldap.o] Error 1 -----Original Message----- From: Michael Wood [mailto:esiotrot@...] Sent: Monday, 9 November 2009 7:43 PM To: Tom Montague Cc: sebastian.rajan@...; samba@... Subject: Re: [Samba] samba and ads authentication 2009/11/9 Tom Montague <tom.montague@...>: > Thanks Seban, > > I tried running the configure script with the following options... > > ./configure --with-ldap --with-ads --with-krb5 --with-winbind > > I am getting the following error:- > [...] > configure: error: Active Directory cannot be supported without krb5.h > > > I do have Kerberos installed and the kinit <user>@<domain> works for me. > > My Kerberos krb5.conf file is located in the /etc/krb5/ directory, > should I be running the configure script and telling it this location? No. > Should I have a krb5.h file??? Yes. You probably do not have the Kerberos development package installed. This would include the krb5.h file amongst other things. I did not see any mention of what operating system you're running, but e.g. Debian and Ubuntu have a package called libkrb5-dev. On an RPM-based distribution it is probably something like krb5-devel. -- Michael Wood <esiotrot@...> </pre> <br><P><HR><P> <font size="2" face="Times"> The information in this email, including any attachments, is confidential and may be subject to legal or other professional privilege. It is intended solely for the addressee and access to this email by anyone else is unauthorised. If you have received this email in error, please immediately advise the sender by return email, then delete the message from your system and destroy any copies. If you are not the intended recipient, any use, interference with, distribution, disclosure or copying of this material, or any action taken or omitted to be taken in reliance on it, is unauthorised and prohibited. The Griffin Group scans all outgoing emails for viruses, however The Griffin Group cannot guarantee that email communications are secure or error-free, as information could be intercepted, corrupted, amended, lost, destroyed, arrive late or incomplete. </font> <br></body> <pre> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba |
| Free embeddable forum powered by Nabble | Forum Help |
