[WHATSNEW] Samba AD with MIT Kerberos + Version change

[Andreas Schneider]

On Tuesday, 9 May 2017 14:30:20 CEST Rowland Penny wrote:
> On Tue, 09 May 2017 14:00:05 +0200
> 
> Andreas Schneider <asn at samba.org> wrote:
> > On Tuesday, 9 May 2017 13:54:16 CEST Rowland Penny wrote:
> > > On Tue, 09 May 2017 13:32:50 +0200
> > > 
> > > Andreas Schneider <asn at samba.org> wrote:
> > > > On Tuesday, 9 May 2017 13:24:03 CEST L.P.H. van Belle wrote:
> > > > > Its the same for me.
> > > > > 
> > > > > Configure no problems, but make fails.
> > > > > 
> > > > > The full make log.
> > > > > http://downloads.van-belle.nl/samba4/samba-470-BUILD_SET/make-470-as
> > > > > n.lo
> > > > > g
> > > > 
> > > > How I normally do things:
> > > > 
> > > > cd samba
> > > > git remote add asn git://git.samba.org/asn/samba.git
> > > > git fetch asn
> > > > git checkout -b master-mit-kdc origin/master
> > > > git reset --hard asn/master-mit-kdc
> > > 
> > > I had to do 'git init' first because I initially got:
> > > 
> > > fatal: Not a git repository (or any of the parent directories): .git
> > > 
> > > I am now getting a different error, when I run 'git checkout -b
> > > master-mit-kdc origin/master' I get:
> > > 
> > > fatal: Cannot update paths and switch to branch 'master-mit-kdc' at
> > > the same time. Did you intend to checkout 'origin/master' which can
> > > not be resolved as commit?
> > > 
> > > I do seem to have:
> > >  * [new branch]            master-mit-kdc                ->
> > >  
> > >    asn/master-mit-kdc
> > > 
> > > Any idea what I am doing wrong ??
> > > 
> > > Rowland
> > 
> > You can also clone directly
> > 
> > git clone git://git.samba.org/asn/samba.git samba-asn
> > cd into samba-asn
> > 
> > but you need to do
> > 
> > git checkout -b master-mit-kdc origin/master-mit-kdc
> > 
> > to get the correct branch
> > 
> > 
> > check with 'git log' that you have the correct one.
> > 
> > 	Andreas
> 
> OK after doing this:
> 
> git clone git://git.samba.org/asn/samba.git samba-asn
> cd samba-asn
> git checkout -b master-mit-kdc origin/master-mit-kdc
> 
> It configured and compiled okay and provisioned and if I start Samba
> with 'samba', I get this:
> 
> 1870 ?        Ss     0:00 /usr/sbin/krb5kdc -P /var/run/krb5kdc.pid
> 1894 ?        Ss     0:00 /usr/sbin/kadmind -P /var/run/kadmind.pid
>  2099 ?        Ss     0:00 samba
>  2100 ?        S      0:00 samba
>  2101 ?        S      0:00 samba
>  2102 ?        S      0:00 samba
>  2103 ?        S      0:00 samba
>  2104 ?        S      0:02 samba
>  2105 ?        S      0:00 samba
>  2106 ?        S      0:00 samba
>  2107 ?        Rs     0:02 sshd: root at pts/0
>  2108 ?        S      0:00 samba
>  2109 ?        S      0:00 samba
>  2110 ?        S      0:00 samba
>  2111 ?        S      0:00 samba
>  2112 pts/0    Ss     0:00 -bash
>  2113 ?        S      0:00 samba
>  2114 ?        S      0:00 samba
>  2115 ?        Ss     0:00 /usr/local/samba/sbin/smbd -D --option=server
> role check:inhibit=yes --foreground 2116 ?        Ss     0:00
> /usr/local/samba/sbin/winbindd -D --option=server role check:inhibit=yes
> --foreground 2121 ?        S      0:00 /usr/local/samba/sbin/smbd -D
> --option=server role check:inhibit=yes --foreground 2122 ?        S     
> 0:00 /usr/local/samba/sbin/smbd -D --option=server role check:inhibit=yes
> --foreground 2123 ?        S      0:00 /usr/local/samba/sbin/winbindd -D
> --option=server role check:inhibit=yes --foreground 2126 ?        S     
> 0:00 /usr/local/samba/sbin/winbindd -D --option=server role
> check:inhibit=yes --foreground 2127 ?        S      0:00
> /usr/local/samba/sbin/winbindd -D --option=server role check:inhibit=yes
> --foreground 2128 ?        S      0:00 /usr/local/samba/sbin/smbd -D
> --option=server role check:inhibit=yes --foreground
> 
> and kdc.conf is created:
> 
> The Kerberos KDC configuration for Samba AD is located
> at /usr/local/samba/private/kdc.conf
> 
> Great work Andreas, I remove my nack to Samba moving to version
> 5.0.0. ;-)
> 
> Rowland

However this doesn't seem to work correctly. There should be no kadmind 
running.

Can you check /var/log/samba/log.samba for errors?

-- 
Andreas Schneider                   GPG-ID: CC014E3D
Samba Team                             asn at samba.org
www.samba.org