[WHATSNEW] Samba AD with MIT Kerberos + Version change

[Rowland Penny]

On Thu, 4 May 2017 10:44:03 +0200
L.P.H. van Belle <belle at bazuin.nl> wrote:

> Hai Rowland, 
> 
> I'll setup a jessie and try a provsioning test also. 
> I pretty new with git, so a bit of guidance maybe needed. 
> 
> I checkout, https://git.samba.org/ , lots of options.
> Just pull?  https://git.samba.org/samba.git 
> 
> 

You will have to use stretch, you need a later version of gnutls the
the one on jessie.

I installed these:

  apt-get install build-essential libacl1-dev libattr1-dev libblkid-dev
  libreadline-dev python-dev libpam0g-dev python-dnspython gdb
  pkg-config libpopt-dev libldap2-dev dnsutils libbsd-dev attr
  docbook-xsl libcups2-dev acl libssl-dev xsltproc krb5-config
  libpam-krb5 libgnutls28-dev ntp libverto1 libverto-libev1 comerr-dev
  libev4 git

Then your packages:

dpkg -i krb5-kdc_1.15.1-1+mnu1_amd64.deb
krb5-locales_1.15.1-1+mnu1_all.deb
krb5-multidev_1.15.1-1+mnu1_amd64.deb krb5-user_1.15.1-1+mnu1_amd64.deb
libgssapi-krb5-2_1.15.1-1+mnu1_amd64.deb
libkrb5-3_1.15.1-1+mnu1_amd64.deb libkrb5-dev_1.15.1-1+mnu1_amd64.deb
libk5crypto3_1.15.1-1+mnu1_amd64.deb
libkrb5support0_1.15.1-1+mnu1_amd64.deb
libgssrpc4_1.15.1-1+mnu1_amd64.deb
libkadm5srv-mit11_1.15.1-1+mnu1_amd64.deb
libkadm5clnt-mit11_1.15.1-1+mnu1_amd64.deb
krb5-admin-server_1.15.1-1+mnu1_amd64.deb
krb5-k5tls_1.15.1-1+mnu1_amd64.deb krb5-pkinit_1.15.1-1+mnu1_amd64.deb
libkdb5-8_1.15.1-1+mnu1_amd64.deb

Not sure if you need all of them, but better safe than sorry ;-)

Then pull from git:

cd /usr/src
mkdir git
cd git
git clone git://git.samba.org/samba.git samba-master
cd samba-master

Then change a couple of files:

nano python/wscript

Change (line 37):

paths = [ "/var/kerberos/krb5kdc", "/var/lib/kerberos/krb5kdc" ]

To:

paths = [ "/var/kerberos/krb5kdc", "/var/lib/kerberos/krb5kdc", "/etc/krb5kdc" ]

nano python/samba/provision/kerberos.py

Change (line 24):

from samba import _glue

To:

from samba import is_heimdal_built

Change (line 29):
if _glue.is_heimdal_built:

To:

if is_heimdal_built:

Then compile Samba:

./configure --with-system-mitkrb5
make
make install

This should give you Samba in /usr/local/samba

Rowland