[Samba] set up for Active Directory

[David Markey]

Solaris 10 U6 comes with a samba that is capable to joining AD out of
the box.



Bjoern Meier wrote:
> hi,
>
> 2009/4/14 McGranahan, Jamen <jamen.mcgranahan at vanderbilt.edu>:
>> OK, I've installed the MIT version of KRB5 & samba appears to have
>> installed correctly. However, it appears that I am not able to join my
>> domain.
>>
>> # ./net ads join -U mcgranj at DS.VANDERBILT.EDU
>> [2009/04/14 11:36:50,  0] param/loadparm.c:lp_set_enum_parm(7097)
>>  WARNING: Ignoring invalid value 'ADS' for parameter 'security'
>> [2009/04/14 11:36:50,  0] param/loadparm.c:lp_do_parameter(7174)
>>  Ignoring unknown parameter "realm"
>> ADS support not compiled in
>>
>> So I tried the -d3 version of ./net and got this:
>>
>> # ./net ads -d3 join -U mcgranj at VANDERBILT.EDU
>> [2009/04/14 11:17:10,  3] param/loadparm.c:lp_load_ex(8794)
>>  lp_load_ex: refreshing parameters
>> [2009/04/14 11:17:10,  3] param/loadparm.c:init_globals(4629)
>>  Initialising global parameters
>> [2009/04/14 11:17:10,  3] param/params.c:pm_process(569)
>>  params.c:pm_process() - Processing configuration file
>> "/usr/local/samba/lib/smb.conf"
>> [2009/04/14 11:17:10,  3] param/loadparm.c:do_section(7457)
>>  Processing section "[global]"
>> [2009/04/14 11:17:10,  0] param/loadparm.c:lp_set_enum_parm(7097)
>>  WARNING: Ignoring invalid value 'ADS' for parameter 'security'
>> [2009/04/14 11:17:10,  1] param/loadparm.c:map_parameter(6131)
>>  Unknown parameter encountered: "realm"
>> [2009/04/14 11:17:10,  0] param/loadparm.c:lp_do_parameter(7174)
>>  Ignoring unknown parameter "realm"
>> [2009/04/14 11:17:10,  2] lib/interface.c:add_interface(340)
>>  added interface ce1 ip=129.59.95.89 bcast=129.59.95.255
>> netmask=255.255.255.0
>> ADS support not compiled in
>> [2009/04/14 11:17:10,  2] utils/net.c:main(769)
>>  return code = -1
>>
>> I'm not sure where to check now. Please advise. Thank you!
>>
>> Jamen McGranahan
>> Systems Services Librarian
>> Vanderbilt University
>>
>>
>> -----Original Message-----
>> From: jerry [mailto:jerry at samba.org]
>> Sent: Tuesday, April 14, 2009 9:40 AM
>> To: McGranahan, Jamen
>> Cc: samba at lists.samba.org
>> Subject: Re: [Samba] set up for Active Directory
>>
> McGranahan, Jamen wrote:
>
> >>> configure:59580: checking for ldap_initialize
> >>> configure:59663: result: no
> >>> configure:59676: error: Active Directory support requires
> >>> ldap_initialize
> Did the howto that was previously posted not help?
>
> My advice is to get the latest OpenLDAP and MIT krb5
> libs and install those.  Then rebuild Samba.  Life is
> to short to spend it trying to get code compiling :-)
> But it's your call.
>
>
>
>
> cheers, jerry
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
>>

> http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/domain-member.html

> tell us:

> ADS support not compiled in

>     Samba must be reconfigured (remove config.cache) and recompiled
> (make clean all install) after the Kerberos libraries and headers
> files are installed.