Just in case this helps anyone, please find below the steps I took to compile
Samba version 356 on our Sun Solaris servers:
Setting Up A Sun Solaris Server To Integrate With Samba 356 AD
Download the latest stable SOURCE version of Kerberos from
http://web.mit.edu/kerberos/dist/
Run mkdir /usr/local/sambaAD358
krb5.1.7
cd krb5*/src
./configure --prefix=/usr/local/sambaAD358 --enable-dns-for-realm
make
make install
=====================
From http://www.openldap.org/download the latest source
Run gunzip openldap?????.tgz to uncompress
This will create a tar file
Run tar xvf openldap?????.tar to uncompress
cd openldap????
bash
CPPFLAGS="-I/usr/local/samba358/include"
export CPPFLAGS
LDFLAGS="-L/usr/local/sambaAD358/lib -R/usr/local/sambaAD358/lib"
export LDFLAGS
./configure --prefix=/usr/local/sambaAD358 --disable-slapd --disable-slurpd
--without-tls
make depend
make
make install
Install packages:
autoconf-2.68-sol10-sparc-local
perl-5.12.3-sol10-sparc-local
m4-1.4.16-sol10-sparc-local
libsigsegv-2.10-sol10-sparc-local
libiconv-1.13.1-sol10-sparc-local
gcc-3.4.6-sol10-sparc-local
make-3.82-sol10-sparc-local
libintl-3.4.0-sol10-sparc-local
Ensure libreadline is installed
/usr/local/lib/libreadline.a
/usr/local/lib/libreadline.so
/usr/local/lib/libreadline.so.4
/usr/local/lib/libreadline.so.5
set path=(/usr/sbin /bin /usr/bin /usr/ucb /etc /usr/etc /usr/local/bin
$OPENWINHOME/bin . /usr/ccs/bin /usr/sadm/bin )
setenv LD_LIBRARY_PATH
$OPENWINHOME/lib:/usr/dt/lib:/usr/local/lib:/usr/local/include:/usr/ucblib:/usr/local/sambaAD358/lib
setenv CC /usr/local/bin/gcc
bash
LDFLAGS="-L/usr/local/sambaAD358/lib -R/usr/local/sambaAD358/lib
-L/usr/local/lib -R/usr/local/lib -L/usr/local/krb5/lib
-L/usr/local/cyrus-sasl/lib -L/usr/local/libiconv/lib -R/usr/local/krb5/lib
-R/usr/local/cyrus-sasl/lib -R/usr/local/libiconv/lib"
export LDFLAGS
./autogen.sh
./configure --prefix=/usr/local/sambaAD358 --with-ads --with-ldap --with-winbind
--with-krb5=/usr/local/sambaAD358 --with-acl-support
--with-shared-modules=idmap_ad,vfs_zfsacl
/usr/local/bin/make
/usr/local/bin/make install
create the file krb5.conf under /etc and put something like this in it:
#
# Copyright 2004 Sun Microsystems, Inc. All rights reserved.
# Use is subject to license terms.
#
# ident "@(#)krb5.conf 1.3 04/03/25 SMI"
#
# krb5.conf template
# In order to complete this configuration file
# you will need to replace the __<name>__ placeholders
# with appropriate values for your network.
#
[libdefaults]
default_realm = {DOMAIN}.GOV.UK
[realms]
DARTFORD.GOV.UK = {
kdc = {server}.{domain}.gov.uk
kdc = {server}.{domin}.gov.uk
}
[domain_realm]
.{domain}.gov.uk = {DOMAIN}.GOV.UK
[logging]
default = FILE:/var/krb5/kdc.log
kdc = FILE:/var/krb5/kdc.log
kdc_rotate = {
period = 1d
versions = 10
}
[appdefaults]
kinit = {
renewable = true
forwardable= true
}
gkadmin = {
# help_url = http://docs.sun.com:80/ab2/coll.384.1/SEAM/@AB2PageVi
ew/1195
}
Run:
ln -s /etc/krb5.conf /etc/krb5/krb5.conf
Create a smb.conf file under /usr/local/samba???/lib containing something like:
[global]
workgroup = {DOMAIN}
bind interfaces only = yes
netbios name = {server_name}
security = ADS
realm = {DOMAIN}.GOV.UK
server string = Samba (%v) domain (%h)
encrypt passwords = yes
preferred master = no
pid directory = /usr/local/sambaAD358/var/locks
log level = 5
log file = /usr/local/sambaAD358/logs/log.%m
smb passwd file = /usr/local/sambaAD358/private/smbpasswd
private dir = /usr/local/sambaAD358/private
lock dir = /usr/local/sambaAD358/var/locks
winbind cache time = 300
allow trusted domains = yes
idmap backend = rid:ADS=100000-200000
idmap uid = 100000-200000
idmap gid = 100000-200000
winbind enum groups = yes
winbind enum users = yes
enhanced browsing = yes
winbind use default domain = yes
load printers = no
restrict anonymous = 1
smb ports = 445 139
client use spnego = yes
[pcclients]
browseable = yes
comment = Access to Pcclients
path = /pcclients
public = no
guest ok = no
writeable = yes
valid users = @"{DOMAIN}\everyone" {DOMAIN}\cccam
force user = nobody
force group = nobody
force create mode = 0777
create mask = 0777
Run the following command to test the smb.conf file content:
cd /usr/local/samba???/bin
testparm -s ../lib/smb.conf
mkdir /usr/local/samba????/logs
If all looks OK attach the server to the AD using:
cd /usr/local/samba????/bin
./net ads join -U Administrator
NB: this may take a number of hours to sync across the network
Create a Samba startup file to be placed in /etc/rc3.d containing something like
this:
#!/sbin/sh
#
# Copyright (c) 2001 by Sun Microsystems, Inc
# All rights reserved.
#
#ident "@(#)samba 1.1 01/09/24 SMI"
LD_LIBRARY_PATH=/usr/ucblib:/usr/dt/lib:/usr/local/include:/usr/local/lib:/usr/local/share:/usr/local/samba/lib:/usr/local/samba/include
export LD_LIBRARY_PATH
PATH=/usr/sbin:/bin:/usr/bin:/opt/SUNWspro/bin:/usr/ucb:/etc:/usr/etc:/networker:/usr/opt/SUNWmd/sbin:.:/usr/ccs/bin:/opt/SUNWss/bin:/bin/nsr:/usr/lib/nis:/usr/lib:/opt/SUNWns:/opt/Adobe/Acrobat7.0/bin:/usr/lib:/usr/local/bin:/usr/dt/appconfig/SUNWns:/opt/SUNWppro/bin:/usr/sadm/bin:/opt/sfw/bin:/usr/local/lib:/usr/local/include:/usr/sbin/nsr:/opt/rsc/bin:/usr/local/sbin:/usr/sfw/bin:/usr/ucblib
export PATH
case "$1" in
start)
[ -f /usr/local/samba???/lib/smb.conf ] || exit 0
/usr/local/samba???/sbin/smbd -D
/usr/local/samba???/sbin/nmbd -D
/usr/local/samba???/sbin/winbindd -D
;;
stop)
pkill smbd
pkill nmbd
pkill winbindd
;;
*)
echo "Usage: $0 { start | stop }"
exit 1
;;
esac
exit 0
Edit /etc/nsswitch.conf and change the following two lines to match:
passwd: files winbind
group: files winbind
Add user accounts to the /etc/passwd file for the users that need to access the
server via Samba and add any groups such as everyone to the /etc/group file,
place all the Samba users into the everyone group, for this task I use a shell
script to sync the Unix password file with AD.
--------------------------------------------------------------------------------------------------------------------
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom
they are addressed.
If you have received this email in error please notify the
originator of the message. This footer also confirms that this
email message has been scanned for the presence of computer viruses.
Any views expressed in this message are those of the individual
sender, except where the sender specifies and with authority,
states them to be the views of Dartford Borough Council.
Dartford Borough Council - Rated a good Council by the Audit Commission.
See www.dartford.gov.uk to find out more.