proposed diffs for HPUX packaging, building winbindd by defau
lt o n HPUX 11.x and adding HPUX tips to winbindd.html
MCCALL,DON (HP-USA,ex1)
don_mccall at hp.com
Wed Feb 6 12:43:02 GMT 2002
Hi Jerry,
Here you go.
Please look it over, as I don't have any sgml editor, so I can't
generate the html from this to check that it looks ok...
Any hints on sgml processor packages that (are free) and
run on linux or HPUX, for future efforts?
Thanks,
don
-----Original Message-----
From: Gerald Carter [mailto:jerry at samba.org]
Sent: Wednesday, February 06, 2002 3:28 PM
To: MCCALL,DON (HP-USA,ex1)
Cc: 'samba-technical at lists.samba.org'
Subject: Re: proposed diffs for HPUX packaging, building winbindd by
default o n HPUX 11.x and adding HPUX tips to winbindd.html
On Tue, 5 Feb 2002, MCCALL,DON (HP-USA,ex1) wrote:
> Hi Jeremy;
> Enclosed are diffs to ..samba/docs/htmldocs/winbind.html (to add
> configuration hints for HP-UX to the mix), a tiny change to the HPUX
> packaging scripts so that we use the correct OS_VERSION,
> and finally, if you like, a change to configure so that winbind builds by
> default if the os revision of HPUX is 11.0 or greater.
Don, can you send me a diff against the SGML/DocBook file?
Thanks, jerry
---------------------------------------------------------------------
Hewlett-Packard http://www.hp.com
SAMBA Team http://www.samba.org
-- http://www.plainjoe.org
"Sam's Teach Yourself Samba in 24 Hours" 2ed. ISBN 0-672-32269-2
--"I never saved anything for the swim back." Ethan Hawk in Gattaca--
-------------- next part --------------
Index: winbind.sgml
===================================================================
RCS file: /cvsroot/samba/docs/docbook/projdoc/winbind.sgml,v
retrieving revision 1.1.2.8
diff -u -r1.1.2.8 winbind.sgml
--- winbind.sgml 27 Jan 2002 05:25:17 -0000 1.1.2.8
+++ winbind.sgml 6 Feb 2002 15:42:39 -0000
@@ -230,6 +230,11 @@
then add "winbind" into <filename>/etc/nsswitch.conf</filename> at
the appropriate place. The C library will then call Winbind to
resolve user and group names.</para>
+ <para>HP-UX NOTE: nss libraries are kept in <filename>/usr/lib</filename>.
+ The <filename>libnss_winbind.so</filename> should
+ be renamed <filename>libnss_winbind.1</filename> and copied into <filename>/usr/lib</filename> for HP-UX.
+ IMPORTANT - using winbind as a method in <filename>/etc/nsswitch</filename>
+ will cause the HP-UX passwd program to fail to change passwords for HP-UX users.</para>
</sect2>
<sect2>
@@ -265,6 +270,10 @@
control files for relevant services are updated to allow
authentication via winbind. See the PAM documentation
for more details.</para>
+ <para>HP-UX NOTE: the main configuration file for pam is <filename>/etc/pam.conf</filename>.
+ In addition the <filename>pam_winbind.so</filename> module for HP-UX should be renamed
+ <filename>libpam_winbind.1</filename> and copied into <filename>/usr/lib/security/</filename>
+ instead of the directory mentioned above.</para>
</sect2>
@@ -339,7 +348,9 @@
<para>
This HOWTO has been written from a 'RedHat-centric' perspective, so if
you are using another distribution, you may have to modify the instructions
-somewhat to fit the way your distribution works.
+somewhat to fit the way your distribution works. Additional configuration
+notes have been added (marked by HP-UX NOTE:) to extend this document for
+configuring winbind on HP-UX 11.0 and above.
</para>
@@ -381,7 +392,8 @@
If you have a samba configuration file that you are currently
using... <emphasis>BACK IT UP!</emphasis> If your system already uses PAM,
<emphasis>back up the <filename>/etc/pam.d</filename> directory
-contents!</emphasis> If you haven't already made a boot disk,
+ (HP-UX NOTE: <filename>/etc/pam.conf</filename> for HP-UX) contents!</emphasis>
+ If you haven't already made a boot disk,
<emphasis>MAKE ONE NOW!</emphasis>
</para>
@@ -389,7 +401,7 @@
Messing with the pam configuration files can make it nearly impossible
to log in to yourmachine. That's why you want to be able to boot back
into your machine in single user mode and restore your
-<filename>/etc/pam.d</filename> back to the original state they were in if
+<filename>/etc/pam.d</filename> (HP-UX NOTE: <filename>/etc/pam.conf</filename> for HP-UX) back to the original state they were in if
you get frustrated with the way things are going. ;-)
</para>
@@ -411,6 +423,9 @@
means <filename>pam-0.74-22</filename>. For best results, it is helpful to also
install the development packages in <filename>pam-devel-0.74-22</filename>.
</para>
+<para>HP-UX NOTE: That means you must be on version 11.0 of the operating system
+or higher, as this was when PAM was introduced for the HP-UX os.
+</para>
</sect2>
@@ -432,7 +447,11 @@
my RedHat system has both <filename>pam-0.74-22</filename> and
<filename>pam-devel-0.74-22</filename> RPMs installed.
</para>
-
+<para>HP-UX NOTE: At 11.0 and above, PAM is the underlying authentication engine
+and nothing additional need be installed. Also note, the main configuration file
+ for PAM on HP-UX is <filename>/etc/pam.conf</filename>.
+See man page on <filename>pam.conf</filename> for configuration details.
+</para>
<sect3>
<title>Configure and compile SAMBA</title>
@@ -480,6 +499,9 @@
<para>
<prompt>root#</prompt> <command>ln -s /lib/libnss_winbind.so /lib/libnss_winbind.so.2</command>
</para>
+<para>HP-UX NOTE: nsswitch on HP-UX expects the library names to end in .1
+ (the number one). So replace above three lines with</para>
+<para><prompt>root#</prompt> <command>cp ../samba/source/nsswitch/libnss_winbind.so /usr/lib/libnss_winbind.1</command></para>
<para>
Now, as root you need to edit <filename>/etc/nsswitch.conf</filename> to
@@ -509,7 +531,9 @@
This makes <filename>libnss_winbind</filename> available to winbindd
and echos back a check to you.
</para>
-
+<para>HP-UX NOTE: the 'shadow' entry is not necessary; in addition, changes
+ to <filename>/etc/nsswitch.conf</filename> are recognized without resort to
+ additional loading programs.</para>
</sect3>
More information about the samba-technical
mailing list