[Samba] Samba 3.0 stable: make --with-afs fails on SuSE 8.2

[Andrew Bartlett]

On Sat, 2003-10-11 at 11:29, Joe Samba wrote:
> Hi All-
> 
> I have SuSE 8.2 installed on two different Intel machines, with (as far as 
> I can determine) all required packages for doing what I'm trying to do 
> here.  Both machines suffer the same problems.
> 
> I didn't find any SuSE 8.2 rpms, so I'm trying to build Samba 3.0 (stable) 
> (24th Sep, 2003) on either of these machines but am having problems with 
> it.
> 
> As root, I did a "./configure --with-afs" (several other options too---see 
> below) and it finished without complaints.  If someone thinks it would 
> help, just say so and I'll post it (or a portion of it) in a follow-up.
> 
> Actual configure command:
> ========================================================
> ./configure --prefix=/usr --with-fhs --sysconfdir=/etc/samba 
> --localstatedir=/var --infodir=/usr/share/info --mandir=/usr/share/man 
> --enable-cups --with-privatedir=/etc/samba --with-lockdir=/var/lock 
> --with-piddir=/var/run/samba --with-swatdir=/usr/share/samba/swat 
> --with-configdir=/etc/samba --with-logfilebase=/var/log/samba 
> --with-smbwrapper --with-afs --with-dce-dfs  --with-ldap  --with-ads  
> --with-automount --with-smbmount --with-pam  --with-pam_smbpass   
> --with-ldapsam  --with-quotas  --with-acl-support  --with-winbind 
> --with-krb5=/usr/local --with-mysql-prefix=/usr 
> --with-mysql-exec-prefix=/usr/bin
> ========================================================
> 
> I did a "make" and quite alot compiles ok, but when I get to 
> source/auth/pass_check.c, it fails with the messages below:
> 
> ========================================================
> athena:/home/adam/smb/samba-3.0.0/source # make
> Using FLAGS =  -g -O2 -I/usr/local/include  -Iinclude 
> -I/home/adam/smb/samba-3.0.0/source/include 
> -I/home/adam/smb/samba-3.0.0/source/ubiqx 
> -I/home/adam/smb/samba-3.0.0/source/smbwrapper  -I. -D_LARGEFILE64_SOURCE 
> -D_FILE_OFFSET_BITS=64 -D_GNU_SOURCE -I/usr/local/include 
> -I/home/adam/smb/samba-3.0.0/source
>       LIBS = -lcrypt -lresolv -lnsl -ldl
>       LDSHFLAGS = -shared
>       LDFLAGS =
> Compiling auth/pass_check.c
> auth/pass_check.c:38:22: afs/stds.h: No such file or directory
> auth/pass_check.c:39:25: afs/kautils.h: No such file or directory
> auth/pass_check.c: In function `afs_auth':
> auth/pass_check.c:53: error: `KA_USERAUTH_VERSION' undeclared (first use 
> in this function)
> auth/pass_check.c:53: error: (Each undeclared identifier is reported only 
> once
> auth/pass_check.c:53: error: for each function it appears in.)
> auth/pass_check.c:53: error: `KA_USERAUTH_DOSETPAG' undeclared (first use 
> in this function)
> make: *** [auth/pass_check.o] Error 1
> athena:/home/adam/smb/samba-3.0.0/source #

While there is some ongoing work to properly implement AFS support, this
isn't it.  This is 'AFS cleartext authentication support'.   That means
that you *must* give samba the password, at login time, in plain text. 
This means that the windows client must have it's registry hacked to
support this.  This is no longer supported by microsoft, and has nasty,
nasty bugs.

> If I remove the "--with-afs" option in the ./configure command, and then 
> try to make again, then the make finishes with no complaints, so that 
> should help explain something.
> 
> I could possibly use samba 3.0 without afs support, but I'd really like to 
> have it as I expect to be using afs very soon, so I'd like to build in 
> whatever support for it samba has.

The best bet is to wait until this can be done properly with the krb5
login ticket.  Then we can use that, with 'proxy' permissions (or
whatever they are called) to authenticated to the AFS server.

There is ongoing work to make Samba a proper AFS gateway, using this.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20031011/fd2e0682/attachment.bin