SSL!

[SELMA.TEKIR at NDSatcom.com]

Hello!

I'm still trying to configure samba with SSL. The operating system is Suse
Linux 6.4, samba version 2.0.7. Without ssl, it works well. 

I installed SSLeay and got no error messages. After installing it, I
configured samba with ssl option and no error messages. When I tried to test
my configuration file with testparm, I have the following:

Load smb config files from /usr/local/samba/lib/smb.conf
Unknown parameter encountered: "ssl"
Ignoring unknown parameter "ssl"
Unknown parameter encountered: "ssl server cert"
Ignoring unknown parameter "ssl server cert"
Unknown parameter encountered: "ssl server key"
Ignoring unknown parameter "ssl server key"
Unknown parameter encountered: "ssl CA certDir"
Ignoring unknown parameter "ssl CA certDir"
Processing section "[home]"
Processing section "[tmp]"
Processing section "[public]"
Processing section "[cdrom]"
Loaded services file OK.
Press enter to see a dump of your service definitions                 

MY CONFIGURATION FILE:

# Samba config file created using SWAT
# from localhost (127.0.0.1)
# Date: 2000/07/04 11:04:02

# Global parameters
[global]
	encrypt passwords = Yes
	lock directory = /var/lock/samba
	smb passwd file=/private/smbpasswd
	ssl=yes

	
	ssl server cert=/etc/certificates/cacert.pem
	ssl server key=/etc/certificates/private/cakey.pem
	ssl CA certDir=/etc/certificates

[home]
	comment = Home Directories
	path = /home/selma
	valid users = selma
	writeable = Yes
	create mask = 0750
	browseable = No

[tmp]
	comment = Temporary file space
	path = /tmp
	writeable = Yes
	guest ok = Yes

[public]
	comment = Public Stuff
	path = /home/public
	valid users = selma
	writeable = Yes

[cdrom]
	path = /cdrom
	guest ok = Yes

I also downloaded openssl 0.9.5 and passed the same steps and came to the
same
point. I don't know whether it's important or not but I have read the
following in the SSLeay.txt and searched Samba Makefile for the string
SSL_ROOT, couldn't find anything about it. 


Compiling samba with SSLeay
===========================
1. Get and install SSLeay. The rest of this documentation assumes that you
   have installed it at the default location, which is /usr/local/ssl/.
   I have used SSLeay 0.9.0, but samba will probably also work with other
   versions (but not with versions older than 0.6).
2. Modify the Makefile. At the end of the configurable section you can find
   the SSL definitions. You can find them quickly by searching for SSL_ROOT.
   Unremark the definitions and modify SSL_ROOT if necessary.
3. Compile and install as usual.



Do you have any idea about this problem?

Thanks!


Selma Tekir