Samba 3.0.14a with AD Support

[Ash]

Timothy Radigan wrote:
> I am in the process of building another Samba server as we speak.  I will
> try to get it functioning without installing the MIT krb5 package and see if
> I can't get the machine to join the domain without it.  Thanks for the
> input, I'll give it a try.
> 
> -----Original Message-----
> From: owner-freebsd-questions at freebsd.org
> [mailto:owner-freebsd-questions at freebsd.org] On Behalf Of Kevin Kobb
> Sent: Friday, April 22, 2005 12:42 PM
> To: freebsd-questions at freebsd.org
> Subject: Re: Samba 3.0.14a with AD Support
> 
> Timothy Radigan wrote:
> 
>>Hi all,
>>
>>I've been trying to build Samba 3.0.14a for 2 days now.  I have exhausted
>>all of the resources I could find to help resolve this issue but to no
>>avail.  I am currently trying to attach my Samba server running FreeBSD
> 
> 5.3
> 
>>to a functioning Windows Server 2003 domain.  I have installed the krb5
>>package from the ports as well as the openldap-client-2.2.24 package.
>>Whenever I run a 'make install' from /usr/ports/net/samba3, it runs the
>>configure script find and starts compiling.  When it gets to compile the
>>kerebos section, I keep getting the following errors:
>>
>>Linking bin/smbd
>>/usr/local/lib/libkrb5.so: warning: warning: mktemp() possibly used
>>unsafely; co nsider using mkstemp()
>>libads/kerberos_keytab.o(.text+0x7e9): In function `ads_keytab_add_entry':
>>: undefined reference to `krb5_kt_compare'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_rd_cred2'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_crypto_destroy'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_ret_address'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_ret_data'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_ret_keyblock'
>>/usr/lib/libgssapi.so: undefined reference to
>>`krb5_auth_con_setremotesubkey'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_data_free'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_config_get_strings'
>>/usr/lib/libgssapi.so: undefined reference to
> 
> `krb5_auth_con_setlocalsubkey'
> 
>>/usr/lib/libgssapi.so: undefined reference to
>>`krb5_auth_con_generatelocalsubkey
>>'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_sockaddr2address'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_cc_get_ops'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_get_default_principal'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_cc_copy_cache'
>>/usr/lib/libasn1.so: undefined reference to `init_error_table'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setkey'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_get_forwarded_creds'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_get_err_text'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_ret_int32'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_h_addr2sockaddr'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_build_authenticator'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_build_ap_req'
>>/usr/lib/libgssapi.so: undefined reference to
> 
> `krb5_auth_getremoteseqnumber'
> 
>>/usr/lib/libgssapi.so: undefined reference to `krb5_data_zero'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_storage_free'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_config_free_strings'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_create_checksum'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_generate_random_block'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_crypto_init'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_enctype_to_keytype'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_free_creds_contents'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_storage_from_mem'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_store_address'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_decrypt_ivec'
>>/usr/lib/libasn1.so: undefined reference to `initialize_error_table_r'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_store_int16'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_ret_int16'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_get_error_string'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_principal_match'
>>/usr/lib/libgssapi.so: undefined reference to
>>`krb5_auth_con_setlocalseqnumber'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_storage_to_data'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_decrypt_ivec'
>>/usr/lib/libasn1.so: undefined reference to `initialize_error_table_r'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_store_int16'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_ret_int16'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_get_error_string'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_principal_match'
>>/usr/lib/libgssapi.so: undefined reference to
>>`krb5_auth_con_setlocalseqnumber'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_storage_to_data'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_store_int32'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_encrypt_ivec'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_storage_emem'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_store_data'
>>/usr/lib/libgssapi.so: undefined reference to
>>`krb5_auth_con_setremoteseqnumber'
>>
>>/usr/lib/libgssapi.so: undefined reference to `krb5_principal_get_realm'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_set_error_string'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_make_principal'
>>/usr/lib/libgssapi.so: undefined reference to `krb5_store_keyblock'
>>*** Error code 1
>>
>>Stop in /usr/ports/net/samba3/work/samba-3.0.14a/source.
>>*** Error code 1
>>
>>**********************************************************************
>>
>>
>>Has anyone experienced this problem when compiling Samba 3.0.14a?
>>
>>
>>_______________________________________________
>>freebsd-questions at freebsd.org mailing list
>>http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>>To unsubscribe, send any mail to
> 
> "freebsd-questions-unsubscribe at freebsd.org"
> 
> 
> I could be wrong, but I think the base system has all the kerberos
> software you need to build samba already installed. I have a few 5.3
> systems, and all of them built samba and joined an AD Windows 2000
> domain no problem.
> 
> If you don't need MIT kerberos or something else I am missing, I would
> try uninstalling the ports and try it again.
> 
> 
> 


I've just configured d a 5.4-RC3 machine as a file server that is 
authenticating against 2003 AD. I installed net/nss_ldap (which in turn 
insalled open-ldap), security/pam_ldap and of course net/samba3.

Heimdal Kerberos is included in the base system (unless you have 
NO_KERBEROS=true in /etc/make.conf). Check out the kerberos(8) manpage 
for more details.

-Ash