similar to: problems compiling samba3.0alpha20 on SOLARIS 7

Hello, I've the following problem. I tried to compile samba3.0alpha20 with the ads support option. Before that I have installed kerberos5v1.2.6! What is wrong! Have anyone an answer, thanks! Compiling libsmb/trust_passwd.c Compiling libads/ldap.c Compiling libads/ldap_printer.c Compiling libads/sasl.c Compiling libads/krb5_setpw.c Compiling libads/kerberos.c libads/kerberos.c: In function

Hey, I am just wondering how you enforce security (such as permissions) on local workstations while running Samba 2.2.x as a PDC with 2K/XP workstations? As some of us don't have or want 2000 Server to enforce things like policies etc... how do you all do it. E.g. If we want 'Administrator' to have access to all start menu etc... yet standard users to have only programs, no settings

Hi, I'm trying to get Samba-2.1.0-prealpha compiled but I always get stuck at the following error message: root@pc2:/usr/src/samba-2.1.0-prealpha/source > make Using LIBS = -lcrypt Linking bin/rpcclient rpcclient/rpcclient.o: In function `process': rpcclient/rpcclient.o(.text+0x4c3): undefined reference to `wait_keyboard' collect2: ld returned 1 exit status make: ***

Hi I try to compile samba-3.0-alpha19 on my Linux-Box (SuSE 8.0, Kernel 2.4.18, cc 2.95.3, make 3.79.1). After "make" I got this errors: Linking bin/smbd /usr/src/krb5-1.2.5/src/lib/libgssapi_krb5.a(accept_sec_context.o): In function `rd_and_store_for_creds': accept_sec_context.o(.text+0x7b): undefined reference to `krb5_rd_cred' accept_sec_context.o(.text+0xdb): undefined

First I compiled kerberos 5-1.2.5. Ater that I configured samba: ./configure --with-smbwrapper --with-krb5 --with-automount --with-smbmount. So far all goes well. After that I 'make' in the samba/source dir. An error pops up, displayed below. Does anyone know of either a workaround or solution? I can't install samba now!! :( Mark -- This is the error: Linking bin/smbd

Hi there, Greetings from Vienna :) About 2 weeks ago I tried - waiting anxiously for group mapping support which isn't available yet on the 2.2.x versions and won't ever be - the 3.0a20 version. Everything fine, I could join the domain as non-root member of the windows "domain admins" group, could assign local power user privilege to domain users as expected (with

Hi, I used Samba 4.0.5 in Wheezy. Here is that I have done: --------------------------------------------------------------- samba-tool domain provision --realm=CHEZMOI.PRIV --domain=CHEZMOI \ --server-role=dc --dns-backend=SAMBA_INTERNAL --adminpass='+toto123' echo "nameserver 192.168.0.21" > /etc/resolv.conf samba ln -s /usr/local/samba/lib/libnss_winbind.so

Recently i've moved to samba 3.0 beta1 and noticed, that drivers for shared printers couldn't be uploaded from WindowsXP GUI any more. After copying files to \\smbserver\print$\W32X86 folders it says something like "Unable to install HP LaserJet 2100 PCL6, Windows2000 or XP, Intel driver. Operation could not be completed". It works OK on samba3.0alpha20, but doesn't work

Hi, Andrew, Thank you very much for your answer. Now our case is as below: 1, our client machine is the windows 2000 2, We want our Kerberos run in the Unix box. 3, We also want the samba as PDC for all windows user and machine. 4, We want integrate the Kerberos Authentication with samba authentication. So in this situation, can we get the kerberos login from the windows

Why wasn't there a FreeBSD security alert for Kerberos 5? Does FreeBSD use the MIT implementation? I got an email from CERT about this. See the attached message below. -- Daniel Rudy >From - Sat Sep 04 03:22:15 2004 X-UIDL: a8f31551eb03ca144862bddc8ccce266 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 X-Apparently-To: dcrudy@pacbell.net via 206.190.37.79; Fri, 03 Sep 2004

Release Announcements --------------------- This is the latest stable release of the Samba 4.20 release series. LDAP TLS/SASL channel binding support ------------------------------------- The ldap server supports SASL binds with kerberos or NTLMSSP over TLS connections now (either ldaps or starttls). Setups where 'ldap server require strong auth = allow_sasl_over_tls' was required

Release Announcements --------------------- This is the latest stable release of the Samba 4.20 release series. LDAP TLS/SASL channel binding support ------------------------------------- The ldap server supports SASL binds with kerberos or NTLMSSP over TLS connections now (either ldaps or starttls). Setups where 'ldap server require strong auth = allow_sasl_over_tls' was required

Hi, We were unable to use nsupdate-gss to a Windows 2003 Active Directory. I modified the nsupdate-gss script to use the local Domain Controller to do the DNS update and then it works (albeit giving a TKEY integrity error). The patch attached adds a 5th argument to the command line to specify the local Domain Controller to send the DNS update to. Usage: nsupdate-gss.pl HOST DOMAIN IP TTL

Hi, Thank you very much for you reply. Some people think storing the sensitive information in the LDAP is not very secure.They think the sensitive information and the public information should be stored in seperate place.So we want the samba PDC authentication can integrete the Kerberos authentication directly. John ---- Original Message ---- From: Yura Pismerov Date: Thu 10/31/02 18:39

Hi, Andrew, Thank you very much. I have read some information about the samba PDC kerberos authentication as below. >> Anyone worked with a combination of Samba (TNG, or 2.x) running as a PDC for >> a network of primarily NT workstations, with the passwords being >> authenticated back into a Kerberos IV database? or a Kerberos V? > >> I'm trying to get this

A few more questions and comments... related to this topic If Kerberos is the back-end to LDAP.. there is no need to synchronize or store a password in the LDAP tree.. just the principal for the user in the userpassword attribute: userpassword = {kerberos}name@domain in the smb.conf file do I need stuff like this? Unix password sync = yes passwd program =

please test Olaf Kirch's patch. it looks fine to me, but i don't to K5. i'd like to see this in the next release. thx -m -------------- next part -------------- --- openssh-3.4p1/auth-krb5.c.krb Sun Jun 9 21:41:48 2002 +++ openssh-3.4p1/auth-krb5.c Tue Jul 23 15:15:43 2002 @@ -73,18 +73,17 @@ * from the ticket */ int -auth_krb5(Authctxt *authctxt, krb5_data *auth, char

Jonathan Higgins wrote: > > A few more questions and comments... related to this topic > > If Kerberos is the back-end to LDAP.. there is no need to synchronize or store a >password in the LDAP tree.. just the principal for the user in the userpassword >attribute: userpassword = {kerberos}name@domain That is correct. I did not mean sync between Kerberos and LDAP, I mean sync

this is the proposed gssapi diff against OpenSSH-current (non-portable). note: if this goes in, the old krb5 auth (ssh.com compatible) will be removed. please comment. jakob Index: auth.h =================================================================== RCS file: /home/hack/jakob/mycvs/sshgss/auth.h,v retrieving revision 1.1.1.2 retrieving revision 1.3 diff -u -r1.1.1.2 -r1.3 --- auth.h

Hello - make fails to build the latest git of samba4 - erroring on drsblobs.so. Below is a full log from autogen.sh to the make. Would you have any suggestions on proceeding? Thank you, Ryan ryan at test1:~/samba-master/source4$ sudo ./autogen.sh ./autogen.sh: running script/mkversion.sh ./script/mkversion.sh: 'version.h' created for Samba("4.0.0alpha12-GIT-d83850a")