[WHATSNEW] Samba AD with MIT Kerberos + Version change

[Andreas Schneider]

On Tuesday, 9 May 2017 13:34:48 CEST Rowland Penny wrote:
> On Tue, 09 May 2017 13:15:59 +0200
> 
> Andreas Schneider <asn at samba.org> wrote:
> > On Tuesday, 9 May 2017 12:38:08 CEST Rowland Penny wrote:
> > > On Tue, 9 May 2017 10:40:30 +0100
> > > Rowland Penny via samba-technical <samba-technical at lists.samba.org>
> > > 
> > > wrote:
> > > > On Tue, 09 May 2017 11:32:07 +0200
> > > > 
> > > > Andreas Schneider <asn at samba.org> wrote:
> > > > > On Thursday, 4 May 2017 18:11:55 CEST Rowland Penny via
> > > > > 
> > > > > samba-technical wrote:
> > > > > > On Thu, 4 May 2017 17:49:14 +0200
> > > > > > "L.P.H. van Belle via samba-technical"
> > > > > > 
> > > > > > <samba-technical at lists.samba.org> wrote:
> > > > > > > Hai,
> > > > > > > 
> > > > > > > Now, prepair yourself im no coder.. but.. looks to me it
> > > > > > > imports only a directory Or sets it back to None. Im trying
> > > > > > > to read and follow the variables in the code.
> > > > > > > 
> > > > > > > If i grep through the source and look for :
> > > > > > > samba.provision.kerberos
> > > > > > 
> > > > > > I think the problem is here in
> > > > > > samba-master/python/samba/provision/kerberos.py:
> > > > > > 
> > > > > > def make_kdcconf(realm, domain, kdcconfdir, logdir):
> > > > > >     if _glue.is_heimdal_built:
> > > > > >         return
> > > > > > 
> > > > > > Which I changed to:
> > > > > >     if is_heimdal_built:
> > > > > >         return
> > > > > 
> > > > > Which is wrong too, it needs to be:
> > > > >  if is_heimdal_build():
> > > > Yes, we have already had this pointed out to us :)
> > > > 
> > > > > :)
> > > > > 
> > > > > However, can you test the following branch?
> > > > > 
> > > > > 
> > > > > https://git.samba.org/?p=asn/samba.git;a=shortlog;h=refs/heads/maste
> > > > > r-mi
> > > > > t-kdc>
> > > > 
> > > > Will do.
> > > > 
> > > > Rowland
> > > 
> > > Sorry, but it fails on 'make'
> > > 
> > > [2450/2839] Linking default/source4/cluster/libcluster.so
> > > [2451/2839] Linking default/lib/libsamba-sockets.so
> > > [2452/2839] Linking default/source4/auth/kerberos/libauthkrb5.so
> > > default/source4/lib/tls/tls_1.o: In function `tls_init_client':
> > > tls.c:(.text+0x164f): undefined reference to
> > > `gnutls_certificate_type_set_priority'
> > > default/source4/lib/tls/tls_tstream_1.o: In function
> > > `_tstream_tls_connect_send': tls_tstream.c:(.text+0x1ff1): undefined
> > > reference to `gnutls_certificate_type_set_priority' collect2:
> > > error: ld returned 1 exit status
> > > Waf: Leaving directory `/usr/src/git/samba-asn/bin'
> > > 
> > > Build failed:  -> task failed (err #1):
> > > 	{task: cc_link
> > > 
> > > packet_1.o,tls_1.o,tlscert_1.o,tls_tstream_1.o,kerberos_pac_2.o,gssapi_p
> > > ac_
> > > 1.o,kerberos_pac_1.o,krb5_init_context_1.o -> libauthkrb5.so}
> > > Makefile:8: recipe for target 'all' failed
> > > make: *** [all] Error 1
> > > 
> > > This on a VM that was compiled using samba-master and did work if
> > 
> > > you:
> > The use of gnutls_certificate_type_set_priority has been removed in
> > 2015 from this file. Something is wrong with your build or repo. Did
> > you try to build an older version?
> > 
> > 	Andreas
> 
> Hi Andreas, I will do some checks, but I am doing this on a VM and I
> did a git-pull from samba.git into 'samba-master' changed the 'glue'
> line by adding the braces '()' and compiled. I then created a symlink
> for 'samba.so' into /usr/lib/x86_64-linux-gnu/krb5/plugins/kdb and it
> worked.
> 
> I just moved /usr/local/samba out of the way
> 
> ran:
> 
> git clone git://git.samba.org/asn/samba.git samba-asn
> cd into samba-asn and compiled it as before and it failed as described.

You need to do git checkout -b master-mit-kdc origin/master-mit-kdc


Or you will work on the wrong branch ...



-- 
Andreas Schneider                   GPG-ID: CC014E3D
Samba Team                             asn at samba.org
www.samba.org