[Samba] samba3.0.4 with FreeBSD

tms3 tms3 at fsklaw.net
Tue May 18 23:10:52 GMT 2004


I'm having the exact same problem Skif.  It has to do with a conflict 
between Heimdal Kerberos (installed by default for ssh etcetera) and MIT 
Kerberos.  If you don't install krb5, then samba-devel port will install 
with ads, but it will error out when joining ads.  If you don't need to 
use ads then get rid of krb5 and remake samba-devel, and it should work.

TMS III


Skif wrote:

> Здравствуйте samba,
>
>  I compile kerberos5
>root at romanof2 :  cd /usr/ports/security/krb5/
>root at romanof2 :  make && make install && make clean && rehash
>------------------------------------------------------
>This port of MIT Kerberos 5 includes remote login
>daemons (telnetd and klogind).  These daemons default
>to using the system login program (/usr/bin/login).
>Please see the file
>/usr/local/share/doc/krb5/README.FreeBSD
>for more information.
>------------------------------------------------------
>===>   Compressing manual pages for krb5-1.3.3
>/sbin/ldconfig -m /usr/local/lib
>===>   Registering installation for krb5-1.3.3
>...
>      This port has installed the following files which may act as network
>      servers and may therefore pose a remote security risk to the system.
>/usr/local/bin/ftp (USES POSSIBLY INSECURE FUNCTIONS: mktemp)
>/usr/local/bin/rcp
>/usr/local/bin/rlogin
>/usr/local/bin/rsh
>/usr/local/lib/libgssrpc.so.3
>/usr/local/lib/libkrb5.so.3 (USES POSSIBLY INSECURE FUNCTIONS: mktemp)
>/usr/local/sbin/ftpd
>/usr/local/sbin/gss-server
>/usr/local/sbin/kadmind
>/usr/local/sbin/klogind
>/usr/local/sbin/kpropd
>/usr/local/sbin/krb5kdc
>/usr/local/sbin/kshd
>/usr/local/sbin/sim_server
>/usr/local/sbin/sserver
>/usr/local/sbin/telnetd
>/usr/local/sbin/uuserver
>/usr/local/sbin/v5passwdd
>
>      If there are vulnerabilities in these programs there may be a security
>      risk to the system. FreeBSD makes no guarantee about the security of
>      ports included in the Ports Collection. Please type 'make deinstall'
>      to deinstall the port if this is a concern.
>
>      For more information, and contact details about the security
>      status of this software, see the following webpage:
>http://web.mit.edu/kerberos/www/
>root at romanof2 :
>
>  My next step
>  
>root at romanof2 :cd /usr/ports/net/samba3.0.4/
>root at romanof2 :make && make install
>===>  -------------------------------------------
>===>  Run 'make config' to (re)configure the port
>===>  -------------------------------------------
>===>  Extracting for samba-3.0.4,1
>  
>
>>>Checksum OK for samba-3.0.4.tar.gz.
>>>      
>>>
>===>  Patching for samba-3.0.4,1
>===>  Applying FreeBSD patches for samba-3.0.4,1
>===>   samba-3.0.4,1 depends on shared library: popt.0 - found
>===>   samba-3.0.4,1 depends on shared library: ldap.2 - found
>
>....
>...
>....
>checking for AP_OPTS_USE_SUBKEY... yes
>checking for the krb5_princ_component macro... no
>checking for key in krb5_keytab_entry... yes
>checking for keyblock in krb5_keytab_entry... no
>configure: error: libkrb5 is needed for Active Directory support
>===>  Script "configure" failed unexpectedly.
>      Please report the problem to timur at gnu.org [maintainer] and attach the
>      "/usr/ports/net/samba3.0.4/work/samba-3.0.4/source/config.log" including
>      the output of the failure of your make command. Also, it might be a
>      good idea to provide an overview of all packages installed on your
>      system (e.g. an `ls /var/db/pkg`).
>*** Error code 1
>
>Stop in /usr/ports/net/samba3.0.4.
>root at romanof2 :
>root at romanof2 :ls /var/db/pkg | grep krb
>krb5-1.3.3
>root at romanof2 :
>root at romanof2 :uname -a
>FreeBSD romanof2.owe 5.2.1-RELEASE FreeBSD 5.2.1-RELEASE #0: Mon Feb 23 20:45:55 GMT 2004
>Makefile:
>CONFIGURE_ARGS+=        --exec-prefix=${PREFIX} \
>                        --localstatedir=${VARDIR} \
>                        --with-configdir=${SAMBA_CONFDIR} \
>                        --with-libdir=${SAMBA_LIBDIR}/samba \
>                        --with-swatdir=${SAMBA_SWATDIR} \
>                        --with-piddir=${SAMBA_RUNDIR} \
>                        --with-lockdir=${SAMBA_LOCKDIR} \
>                        --with-privatedir=${SAMBA_PRIVATE} \
>                        --with-logfilebase=${SAMBA_LOGDIR} \
>                        --with-manpages-langs=en
>
>CONFIGURE_ARGS+=        --with-libiconv=${LOCALBASE}
>CONFIGURE_ARGS+=        --with-pam --with-readline --with-sendfile-support \
>                        --with-winbind --without-libsmbclient --without-python
>
>What'm I doing wrong?
>
>
>
>  
>


More information about the samba mailing list