[Samba] If people want, this is how: samba 4.1.3 and sssd 1.11.3 for debian wheezy

L.P.H. van Belle belle at bazuin.nl
Mon Jan 13 01:04:08 MST 2014


sernet AND sssd 1.11.3 does not work, at least not on wheezy and ubuntu. 
And this isn't much hassle to make it work.
I prefer the adviced version of sssd, Steve and Rowland, on the list have 
good expericance with it, they can tell you exacly why you need to have 1.11.3 

but Look here, this is when i want to install sssd-ad from ubuntu precies ppa. 
on my last ubuntu server 12.04.3 lts.

apt-get install sssd-ad 

Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
 sssd-ad : Depends: libndr-standard0 but it is not going to be installed
           Depends: libndr0 but it is not going to be installed
           Depends: sssd-ad-common (= 1.11.1-0ubuntu1~precise1) but it is not going to be installed
 sssd-ipa : Depends: libndr-standard0 but it is not going to be installed
            Depends: libndr0 but it is not going to be installed
            Depends: sssd-ad-common (= 1.11.1-0ubuntu1~precise1) but it is not going to be installed
E: Unable to correct problems, you have held broken packages.

on wheezy :  	

sssd-ad : Depends: libndr-standard0  

libndr-standard0 is a dependcy of samba4 ( ) in debian, and this is where is goes wrong if your using sernet-samba. 
( ubuntu gets it packages from debian testing/sid )

I just gave poeple the option to choose, and i did show how and this recompile isnt hard, its what you preffer. 

But you tell me how i can use Kerberos Tickets with sssd 1.8.4 as you suggested. 
I myself dont use sssd ;-) , i dont need it. (yet) 

i dont mix windows and linux users on my server. a windows user only logs on into windows.
and a linux user only windows, and yes they can logon on both, but i restricted that. 



>-----Oorspronkelijk bericht-----
>Van: Peter Schaefer-Hutter [mailto:peter.schaefer at gmx.net] 
>Verzonden: vrijdag 10 januari 2014 18:02
>Aan: L.P.H. van Belle
>CC: samba at lists.samba.org
>Onderwerp: Aw: [Samba] If people want, this is how: samba 
>4.1.3 and sssd 1.11.3 for debian wheezy
>Again: Why the hassle?
>SerNet packages and sssd from Wheezy run fine together. Sssd 
>is version 1.8.4 and therefore needs to use the LDAP 
>id_provider as stated in the HowTo at 
>But if all you need is local user authentication from a Samba 
>4 AD DC, this works out of the box.
>Gesendet: Freitag, 10. Januar 2014 um 11:16 Uhr
>Von: "L.P.H. van Belle" <belle at bazuin.nl>
>An: "samba at lists.samba.org" <samba at lists.samba.org>
>Betreff: [Samba] If people want, this is how: samba 4.1.3 and 
>sssd 1.11.3 for debian wheezy
>And ahead a bit, its not complete but then you know how to do this.
>what do you get when your done, a stable, debian wheezy, with 
>up2date samba and sssd.
>and more if you want, its up 2 your.
>add this line to your /etc/apt/sources.list
>( or better /etc/apt/sources.list.d/debian-sid.list )
>You must watch the order of the install of the packages with dpkg -i.
>Wrong order and you can't install some packages.
>apt-get update
>get the things you need to recompile, the basics.
>apt-get build-dep samba
>apt-get build-dep sssd
>look at the missing Depends get them compile them and install them.
>apt-get source libaio-dev -b
>dpkg -i libaio1_0.3.109-4_amd64.deb libaio-dev_0.3.109-4_amd64.deb
>apt-get build-dep python-talloc-dev
>apt-get source python-talloc-dev -b
>dpkg -i libtalloc2_2.1.0-1_amd64.deb 
>python-talloc_2.1.0-1_amd64.deb python-talloc-dev_2.1.0-1_amd64.deb
>apt-get build-dep libtevent-dev
>apt-get source libtevent-dev -b
>dpkg -i libtevent0_0.9.19-1_amd64.deb libtevent-dev_0.9.19-1_amd64.deb
>apt-get source libldb-dev -b
>apt-get build-dep libldb-dev
>apt-get source python-tdb -b
>dpkg -i libtdb1_1.2.12-1_amd64.deb 
>libtdb1-dbg_1.2.12-1_amd64.deb python-tdb_1.2.12-1_amd64.deb
>dpkg -i libtdb-dev_1.2.12-1_amd64.deb
>apt-get source libldb-dev -b
>dpkg -i libldb1_1.1.16-1_amd64.deb libldb-dev_1.1.16-1_amd64.deb
>apt-get source libntdb-dev -b
>dpkg -i libntdb1_1.0-2_amd64.deb libntdb-dev_1.0-2_amd64.deb
>apt-get source python-ldb -b
>dpkg -i python-ldb_1.1.16-1_amd64.deb 
>python-ldb-dev_1.1.16-1_amd64.deb python-ntdb_1.0-2_amd64.deb
>apt-get build-dep samba .. and if correct you now get a bunch 
>of wheezy package so you wil be able to compile samba.
>apt-get source samba -b
>dpkg -i libparse-pidl-perl_4.1.3+dfsg-2_amd64.deb 
>samba-libs_4.1.3+dfsg-2_amd64.deb samba-dev_4.1.3+dfsg-2_amd64.deb
>apt-get build-dep sssd
>apt-get source dh-systemd -b
>apt-get build-dep sssd ( get the other packages of wheezy )
>move all the deb files to 1 folder.
>mkdir /home/debs
>mv *.deb /home/debs
>Add this line to /etc/apt/sources.list
>deb file:///home/debs /
>Create a Release file so you can use apt-pinning
>( http://jaqque.sbih.org/kplug/apt-pinning.html )
>vi /home/debs/Release
>Archive: Wheezy
>Origin: apt.yourdomain.tld
>Label: JustForFun Debian Wheezy repository
>Suite: stable
>Codename: wheezy
>Architectures: amd64
>Components: main
>Description: Put here a description.
>make a package file :
>dpkg-scanpackages /home/debs /dev/null | gzip -c9 > 
>If you want to enable the users of your repository to use 
>Pinning with your repository,
>you must include a Release file in every directory containing 
>an index file
>check with apt-cache policy samba which version is available.
>and install it.
>result :
>apt-cache policy samba
>Installed: (none)
>Candidate: 2:4.1.3+dfsg-2
>Version table:
>2:4.1.3+dfsg-2 0
>500 file:/home/debs/wheezy/ amd64/ Packages
>2:3.6.6-6+deb7u2 0
>500 http://security.debian.org/[http://security.debian.org/] 
>wheezy/updates/main amd64 Packages
>2:3.6.6-6+deb7u1 0
>n/] wheezy/main amd64 Packages
>apt-cache policy sssd-ad
>Installed: (none)
>Candidate: 1.11.3-1
>Version table:
>1.11.3-1 0
>500 file:/home/debs/wheezy/ amd64/ Packages
>To unsubscribe from this list go to the following URL and read the

More information about the samba mailing list