Hello, I'm having problems configuring Samba to work using ADS. I've successfully compiled LDAP. When I try ./configure --with-pam --with-winbind --with-ads --with-krb5 --with-ldap It says "Active Directory support requires LDAP support" Are there any variables that need to be set? I've done --with-ldap=/usr/local/openldap (This the prefix for openldap). I'm installing this on a Solaris 9 machine. Has anyone been successful with this, and if so, please let me know what you had to do. Thanks in Advance!! Rick Mattier Systems Analyst II Windriver Systems 120 Royall St Canton, Ma 02021 ricardo.mattier@windriver.com Canton: 781 364-2002 Nashua: 603 897-2084
On 06/06/2005 03:19 PM, Mattier, Ricardo wrote:> Hello, > I'm having problems configuring Samba to work using ADS. I've > successfully compiled LDAP. When I try ./configure --with-pam > --with-winbind --with-ads --with-krb5 --with-ldap It says "Active > Directory support requires LDAP support" Are there any variables that > need to be set? I've done --with-ldap=/usr/local/openldap (This the > prefix for openldap). I'm installing this on a Solaris 9 machine. Has > anyone been successful with > this, and if so, please let me know what you had to do. Thanks in > Advance!!Rick, I am working on this right now. I found the following document helpful for getting myself going on solaris: http://www.samag.com/documents/s=9427/sam0414e/0414e.htm . If you've not looked at the Samba docs, be sure to check them out: http://us4.samba.org/samba/docs/man/Samba-Guide/unixclients.html http://us1.samba.org/samba/docs/man/Samba-Guide/unixclients.html#adssdm http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/winbind.html#id25 Are you using the "stock" Solaris kerberos? I have read that there are issues with it. I built my own copy of MIT kerberos and installed into /opt/local/kerberos5 so that part of my samba configure looks like: ./configure --prefix=/opt/local/samba --with-automount \ --with-profile --with-acl-support --with-utmp \ --with-winbind --with-ads --with-ldap \ --with-krb5=/opt/local/kerberos5 --with-pam I do not yet have a working build on Solaris (it wants "_pam_macros.h" which I cannot find), I did build a working version using many of the same parts on SuSE Linux 9.2 to prove to myself that I could do it. -Bob Martel -- *********************************************************************** Bob Martel,System Administrator I met someone who looks a lot like you Levin College of Urban Affairs She does the things you do Cleveland State University But she is an IBM (216) 687-2214 bob@urban.csuohio.edu -Jeff Lynne ***********************************************************************
On Monday 06 June 2005 13:19, Mattier, Ricardo wrote:> Hello, > I'm having problems configuring Samba to work using ADS. I've > successfully compiled LDAP. When I try ./configure --with-pam > --with-winbind --with-ads --with-krb5 --with-ldap It says "Active > Directory support requires LDAP support" Are there any variables that > need to be set? I've done --with-ldap=/usr/local/openldap (This the > prefix for openldap). I'm installing this on a Solaris 9 machine. Has > anyone been successful with > this, and if so, please let me know what you had to do. Thanks in > Advance!! > Rick Mattier > Systems Analyst II > Windriver Systems > 120 Royall St > Canton, Ma 02021 > ricardo.mattier@windriver.com > Canton: 781 364-2002 > Nashua: 603 897-2084You may find the following information of assistance: http://samba.org/~jht/Notes/Samba-Install-Solaris9.txt - John T. -- John H Terpstra Samba-Team Member Phone: +1 (650) 580-8668 Author: The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556 Samba-3 by Example, ISBN: 0131472216 Hardening Linux, ISBN: 0072254971 Other books in production.
On 06/20/2005 08:51 AM, Mattier, Ricardo wrote:> Hi Bob, > Thanks for the info. Are you using openldap? If so, which > switches are you using to compile openldap?Greetings, Rick, Yes, but just to build Samba - we are not using at this point for anything else. I was using http://www.samag.com/documents/s=9427/sam0414e/0414e.htm as a guide for my build and I used the same switches outlined in the article - modified for my environment - our open ssl is in /opt/local/ossl and Cyrus SASL is in /opt/local/sasl2 - YMMV. CFLAGS="-I/opt/local/ossl/include -I/opt/local/sasl2/include" CPPFLAGS="-I/opt/local/ossl/include -I/opt/local/sasl2/include" LDFLAGS="-L/opt/local/ossl/lib -R /opt/local/ossl/lib -L/opt/local/sasl2/lib -R/opt/local/sasl2/lib" ./configure --prefix=/opt/local/openldap --without-bdb --disable-bdb --enable-null The samba 3.0.14a I ended up with(AD) domain. I've been able to access it from MS Windows clients without any problems. I have not been able to get PAM working to the point where AD users can log onto the unix host. -Bob -- *********************************************************************** Bob Martel,System Administrator I met someone who looks a lot like you Levin College of Urban Affairs She does the things you do Cleveland State University But she is an IBM (216) 687-2214 bob@urban.csuohio.edu -Jeff Lynne ***********************************************************************