CentOS 7.1503 installed. Installed Samba 4 from sernet: Version 4.1.17-SerNet-RedHat-11.el7 (to be configured). The samba wiki Readme First page states, "Some distributions like . . . Red Hat Enterprise Linux (and clones), ship BIND9 packages with disabled GSS-SPNEGO option, which is required for signed DNS updates when using BIND as DNS backend on your Samba DC. This circumstance requires to self compile BIND9." Is there any way to use a yum command to install Bind9 with gss-spnego enabled? I'm worried about installing from source and creating future problems when trying to update other CentOS packages that may be affected by the source install of Bind9. Is it safe to obtain a bind9 source tarball for install on an rpm-based CentOS 7 server? If anyone has installed Bind for use with Samba 4 on CentOS 7, please let me know what worked. Thanks for your time and patience.
On 04/16/2015 12:53 AM, Mike wrote:> CentOS 7.1503 installed. > Installed Samba 4 from sernet: Version 4.1.17-SerNet-RedHat-11.el7 (to be > configured). > > The samba wiki Readme First page states, "Some distributions like . . . Red > Hat Enterprise Linux (and clones), ship BIND9 packages with disabled > GSS-SPNEGO option, which is required for signed DNS updates when using BIND > as DNS backend on your Samba DC. This circumstance requires to self compile > BIND9." > > Is there any way to use a yum command to install Bind9 with gss-spnego > enabled? > > I'm worried about installing from source and creating future problems when > trying to update other CentOS packages that may be affected by the source > install of Bind9. Is it safe to obtain a bind9 source tarball for install > on an rpm-based CentOS 7 server? > > If anyone has installed Bind for use with Samba 4 on CentOS 7, please let > me know what worked. > > Thanks for your time and patience.That is a bind build option, the only way to enable it is to build it. Is there some reason you don't want to use the samba-4.1 that is shipped in CentOS-7? -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 198 bytes Desc: OpenPGP digital signature URL: <http://lists.centos.org/pipermail/centos/attachments/20150416/c5ca4e28/attachment-0001.sig>
Hi Johnny, Thank you for your response. I thought to choose the sernet package because of the following stated in Samba Readme: Samba packages shipped in some distributions like e. g. Fedora, RHEL may not be able to be used as Samba AD DC, because the distribution relies on MIT Kerberos which isn't supported by Samba yet. In this case build Samba yourself or use the packages from SerNet or other reliable sources. I do want to use samba as an AD DC. Does the above not apply to CentOS distro? Thanks for reading. On Apr 16, 2015 4:35 AM, "Johnny Hughes" <johnny at centos.org> wrote:> On 04/16/2015 12:53 AM, Mike wrote: > > CentOS 7.1503 installed. > > Installed Samba 4 from sernet: Version 4.1.17-SerNet-RedHat-11.el7 (to be > > configured). > > > > The samba wiki Readme First page states, "Some distributions like . . . > Red > > Hat Enterprise Linux (and clones), ship BIND9 packages with disabled > > GSS-SPNEGO option, which is required for signed DNS updates when using > BIND > > as DNS backend on your Samba DC. This circumstance requires to self > compile > > BIND9." > > > > Is there any way to use a yum command to install Bind9 with gss-spnego > > enabled? > > > > I'm worried about installing from source and creating future problems > when > > trying to update other CentOS packages that may be affected by the source > > install of Bind9. Is it safe to obtain a bind9 source tarball for install > > on an rpm-based CentOS 7 server? > > > > If anyone has installed Bind for use with Samba 4 on CentOS 7, please let > > me know what worked. > > > > Thanks for your time and patience. > > That is a bind build option, the only way to enable it is to build it. > > Is there some reason you don't want to use the samba-4.1 that is shipped > in CentOS-7? > > > > _______________________________________________ > CentOS mailing list > CentOS at centos.org > http://lists.centos.org/mailman/listinfo/centos > >