[Samba] samba and ads authentication

[Michael Wood]

Please keep the samba list in the list of recipients.

2009/11/10 Tom Montague <tom.montague at thegriffingroup.com.au>:
> > What does "which kinit" give you?
>
> /usr/bin/kinit
>
> I think Kerberos was installed in the /home1/admin directories as I have
> found a config.log in the /home1/admin/krb5-1.6/src/ directory... (I
> have attached this file)

No, that just means it was compiled there.

The log shows that "prefix" was set to /usr/local, so if Kerberos had
been installed after it was compiled it would have been installed in
/usr/local.  It looks like this last step never happened.

> At the bottom of this log there are entries running the config.status
> command which looks like it is adding .h files, there are none for krb5.
> (see extract pasted below between the --- lines ----)
>
> Do you think I could run  ./config.status include/gssrpc/krb5.h     ??

No.  It's not entirely clear what the best thing is to do.  As I said
it seems like you might have multiple instances of Kerberos installed.
 The fact that you have kinit in /usr/bin implies that you have one
instance that is in some way "official" or bundled with the OS or
something along those lines.  I haven't had anything to do with
Solaris in quite a while, (and I was never all that familiar with it
before anyway) so I can't remember the package management commands.
Maybe there's a krb5 development package you can install.

Another possible solution would be to run "make install" in the
/home/admin1/krb* directory, which should install that instance of
Kerberos to /usr/local.  This may interfere with the existing
installations of Kerberos, though (depending on your PATH etc.) so if
you're using Kerberos for anything else at the moment, I would be a
bit careful of doing this.

> There are krb5.h files in the following locations :-
>
> /home1/admin/krb5-1.6/src/include/krb5/    (this file is the largest and
> also the newest)
> /home1/admin/krb5-1.6/src/include/            (this file is small and
> older)
>
>
> I have below the files in the directory /home1/admin/krb5-1.6/src/lib
>
> apputils               libapputils.a          libk5crypto.so.3
> libkrb5.so
> comerr32.def           libcom_err.so          libk5crypto.so.3.1
> libkrb5.so.3
> crypto                 libcom_err.so.3        libkadm5clnt.so
> libkrb5.so.3.3
> des425                 libcom_err.so.3.0      libkadm5clnt.so.5
> libkrb5support.so
> glue4.c                libdes425.so           libkadm5clnt.so.5.1
> libkrb5support.so.0
> gssapi                 libdes425.so.3         libkadm5srv.so
> libkrb5support.so.0.1
> gssapi32.def           libdes425.so.3.0       libkadm5srv.so.5
> libss.a
> kadm5                  libgssapi_krb5.so      libkadm5srv.so.5.1
> Makefile
> kdb                    libgssapi_krb5.so.2    libkdb5.so
> Makefile.in
> krb4                   libgssapi_krb5.so.2.2  libkdb5.so.4           rpc
> krb4_32.def            libgssrpc.so           libkdb5.so.4.0
> win_glue.c
> krb5                   libgssrpc.so.4         libkrb4.so
> xpprof32.def
> krb5_32.def            libgssrpc.so.4.0       libkrb4.so.2
> krb5.rc                libk5crypto.so         libkrb4.so.2.0
>
>
>
> ------------------------------------------------------------------------
> -
>
> ## ---------------------- ##
> ## Running config.status. ##
> ## ---------------------- ##
>
> This file was extended by Kerberos 5 config.status 1.6, which was
> generated by GNU Autoconf 2.59.  Invocation command line was
>
>  CONFIG_FILES    =
>  CONFIG_HEADERS  =
>  CONFIG_LINKS    =
>  CONFIG_COMMANDS =
>  $ config.status include/gssrpc/types.h
>
> on gpstest
>
> config.status:854: creating include/gssrpc/types.h
>
> ------------------------------------------------------------------------

-- 
Michael Wood <esiotrot at gmail.com>