samba - Mar 2006 - Adding FreeBSD Samba Server to windows 2003 ADS

Hi, I am trying to add a FreeBSD 6.0 Samba Server to a windows 2003 ADS domain
and utilize winbind/kerberos for authenticating domain users on it.
I have already done this with a Gentoo Samba server (which after I realized how,
turned out to be very easy) but it is a lot tougher to do with FreeBSD.

Has anyone on the list had any experience with it. The samba in the FreeBSD
ports is version 3.0.14a but I downloaded the source for 3.0.21c so that I can
use the latest version.

thanks, 

Guillermo Gutierrez
Development Systems Engineer
Market Scan Information Systems Inc.
(818) 575-2000 x2427
ggutierrez@marketscan.com

2006/3/29, Guillermo Gutierrez
<ggutierrez@marketscan.com>:
>
> Hi, I am trying to add a FreeBSD 6.0 Samba Server to a windows 2003 ADS
> domain and utilize winbind/kerberos for authenticating domain users on it.
> I have already done this with a Gentoo Samba server (which after I
> realized how, turned out to be very easy) but it is a lot tougher to do
with
> FreeBSD.
>
> Has anyone on the list had any experience with it. The samba in the
> FreeBSD ports is version 3.0.14a but I downloaded the source for 3.0.21cso
that I can use the latest version.
>
> thanks,
>
> Guillermo Gutierrez
> Development Systems Engineer
> Market Scan Information Systems Inc.
> (818) 575-2000 x2427
> ggutierrez@marketscan.com
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
>
HI Guillermo, im working on this, but i see that this post is from march,
just want to know if you succed with this? Did have some tips about this
situation? Is your system stable? May you show me your settings?

I already installed samba on freebsd 6-1 from ports with ADS support,
tomorrow i will try to add that machine to win2k3 AD domain, but  my doubt
is with the kerberos version that has freebsd by default, can we use that
one..?

We can enable krb5 from rc.conf, but we need all the optios there?

#
# kerberos. Do not run the admin daemons on slave servers
#

kerberos5_server_enable="NO" # Run a kerberos 5 master server (or NO).
kerberos5_server="/usr/libexec/kdc" # path to kerberos 5 KDC
kerberos5_server_flags="" # Additional flags to the kerberos 5 server
kadmind5_server_enable="NO" # Run kadmind (or NO)
kadmind5_server="/usr/libexec/kadmind" # path to kerberos 5 admin
daemon
kpasswdd_server_enable="NO" # Run kpasswdd (or NO)
kpasswdd_server="/usr/libexec/kpasswdd" # path to kerberos 5 passwd
daemon

 Which options i need for this job..?

Im really starting working with samba, but the kerberos stuff is some
confused, thanks for your time!!!



-- 
LIving the dream...

2006/10/27, Guillermo Gutierrez
<ggutierrez@marketscan.com>:
>
> Thank you for your response.
> I have not been successful in trying to do this. I have found a how-to
> doing this with winbind and ldap ut coud not get them to work.
>
> -----Original Message-----
> From: samba-bounces+ggutierrez=marketscan.com@lists.samba.org [mailto:
> samba-bounces+ggutierrez=marketscan.com@lists.samba.org] On Behalf Of
> Alberto Moreno
> Sent: Thursday, October 26, 2006 11:51 PM
> To: samba@lists.samba.org
> Subject: Re: [Samba] Adding FreeBSD Samba Server to windows 2003 ADS
>
> 2006/3/29, Guillermo Gutierrez <ggutierrez@marketscan.com>:
> >
> > Hi, I am trying to add a FreeBSD 6.0 Samba Server to a windows 2003
ADS
> > domain and utilize winbind/kerberos for authenticating domain users on
> it.
> > I have already done this with a Gentoo Samba server (which after I
> > realized how, turned out to be very easy) but it is a lot tougher to
do
> with
> > FreeBSD.
> >
> > Has anyone on the list had any experience with it. The samba in the
> > FreeBSD ports is version 3.0.14a but I downloaded the source for
> 3.0.21cso that I can use the latest version.
> >
> > thanks,
> >
> > Guillermo Gutierrez
> > Development Systems Engineer
> > Market Scan Information Systems Inc.
> > (818) 575-2000 x2427
> > ggutierrez@marketscan.com
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/listinfo/samba
> >
>
> HI Guillermo, im working on this, but i see that this post is from march,
> just want to know if you succed with this? Did have some tips about this
> situation? Is your system stable? May you show me your settings?
>
> I already installed samba on freebsd 6-1 from ports with ADS support,
> tomorrow i will try to add that machine to win2k3 AD domain, but  my doubt
> is with the kerberos version that has freebsd by default, can we use that
> one..?
>
> We can enable krb5 from rc.conf, but we need all the optios there?
>
> #
> # kerberos. Do not run the admin daemons on slave servers
> #
>
> kerberos5_server_enable="NO" # Run a kerberos 5 master server (or
NO).
> kerberos5_server="/usr/libexec/kdc" # path to kerberos 5 KDC
> kerberos5_server_flags="" # Additional flags to the kerberos 5
server
> kadmind5_server_enable="NO" # Run kadmind (or NO)
> kadmind5_server="/usr/libexec/kadmind" # path to kerberos 5 admin
daemon
> kpasswdd_server_enable="NO" # Run kpasswdd (or NO)
> kpasswdd_server="/usr/libexec/kpasswdd" # path to kerberos 5
passwd daemon
>
> Which options i need for this job..?
>
> Im really starting working with samba, but the kerberos stuff is some
> confused, thanks for your time!!!
>
>
>
> --
> LIving the dream...
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
>
> --
> No virus found in this incoming message.
> Checked by AVG Free Edition.
> Version: 7.1.408 / Virus Database: 268.13.17/505 - Release Date:
> 10/27/2006
>
>
> --
> No virus found in this outgoing message.
> Checked by AVG Free Edition.
> Version: 7.1.408 / Virus Database: 268.13.17/505 - Release Date:
> 10/27/2006
>
>
     I read some docs about the same situation with winbind+ldap but went i
try, no success, but let me try with Kerberos and see what happend, i will
inform here in the list, see you man.

LIving the dream...