[WHATSNEW] Samba AD with MIT Kerberos + Version change

[Rowland Penny]

On Tue, 09 May 2017 13:15:59 +0200
Andreas Schneider <asn at samba.org> wrote:

> On Tuesday, 9 May 2017 12:38:08 CEST Rowland Penny wrote:
> > On Tue, 9 May 2017 10:40:30 +0100
> > Rowland Penny via samba-technical <samba-technical at lists.samba.org>
> > 
> > wrote:
> > > On Tue, 09 May 2017 11:32:07 +0200
> > > 
> > > Andreas Schneider <asn at samba.org> wrote:
> > > > On Thursday, 4 May 2017 18:11:55 CEST Rowland Penny via
> > > > 
> > > > samba-technical wrote:
> > > > > On Thu, 4 May 2017 17:49:14 +0200
> > > > > "L.P.H. van Belle via samba-technical"
> > > > > 
> > > > > <samba-technical at lists.samba.org> wrote:
> > > > > > Hai,
> > > > > > 
> > > > > > Now, prepair yourself im no coder.. but.. looks to me it
> > > > > > imports only a directory Or sets it back to None. Im trying
> > > > > > to read and follow the variables in the code.
> > > > > > 
> > > > > > If i grep through the source and look for :
> > > > > > samba.provision.kerberos
> > > > > 
> > > > > I think the problem is here in
> > > > > samba-master/python/samba/provision/kerberos.py:
> > > > > 
> > > > > def make_kdcconf(realm, domain, kdcconfdir, logdir):
> > > > >     if _glue.is_heimdal_built:
> > > > >         return
> > > > > 
> > > > > Which I changed to:
> > > > >     if is_heimdal_built:
> > > > >         return
> > > > 
> > > > Which is wrong too, it needs to be:
> > > >  if is_heimdal_build():
> > > Yes, we have already had this pointed out to us :)
> > > 
> > > > :)
> > > > 
> > > > However, can you test the following branch?
> > > > 
> > > > 
> > > > https://git.samba.org/?p=asn/samba.git;a=shortlog;h=refs/heads/master-mi
> > > > t-kdc> 
> > > Will do.
> > > 
> > > Rowland
> > 
> > Sorry, but it fails on 'make'
> > 
> > [2450/2839] Linking default/source4/cluster/libcluster.so
> > [2451/2839] Linking default/lib/libsamba-sockets.so
> > [2452/2839] Linking default/source4/auth/kerberos/libauthkrb5.so
> > default/source4/lib/tls/tls_1.o: In function `tls_init_client':
> > tls.c:(.text+0x164f): undefined reference to
> > `gnutls_certificate_type_set_priority'
> > default/source4/lib/tls/tls_tstream_1.o: In function
> > `_tstream_tls_connect_send': tls_tstream.c:(.text+0x1ff1): undefined
> > reference to `gnutls_certificate_type_set_priority' collect2:
> > error: ld returned 1 exit status
> > Waf: Leaving directory `/usr/src/git/samba-asn/bin'
> > Build failed:  -> task failed (err #1):
> > 	{task: cc_link
> > packet_1.o,tls_1.o,tlscert_1.o,tls_tstream_1.o,kerberos_pac_2.o,gssapi_pac_
> > 1.o,kerberos_pac_1.o,krb5_init_context_1.o -> libauthkrb5.so}
> > Makefile:8: recipe for target 'all' failed
> > make: *** [all] Error 1
> > 
> > This on a VM that was compiled using samba-master and did work if
> > you:
> 
> The use of gnutls_certificate_type_set_priority has been removed in
> 2015 from this file. Something is wrong with your build or repo. Did
> you try to build an older version?
> 
> 
> 
> 	Andreas
> 

Hi Andreas, I will do some checks, but I am doing this on a VM and I
did a git-pull from samba.git into 'samba-master' changed the 'glue'
line by adding the braces '()' and compiled. I then created a symlink
for 'samba.so' into /usr/lib/x86_64-linux-gnu/krb5/plugins/kdb and it
worked.

I just moved /usr/local/samba out of the way

ran:

git clone git://git.samba.org/asn/samba.git samba-asn
cd into samba-asn and compiled it as before and it failed as described.

Rowland