FWIW, instead of linking SAMBA directly to AFS libs on Solaris (for
the same reasons you cite), I've instead have been relying
successfully on SAMBA's PAM support for the last several releases of
SAMBA, and it works fine as an AFS gateway.
The only piece missing from SAMBA's PAM support is that it calls PAM
to validate credentials, but doesn't make the one additional PAM call
needed to actually have the SMBD process acquire a AFS/Kerberos token.
That is easily corrected by inserting one additional pam_setcred()
call in passdb/pass_check.c, thus:
....
pam_error = pam_acct_mgmt(pamh, PAM_SILENT);
PAM_BAIL;
> // cause PAM to acquire an AFS/Kerberos token
> pam_error = pam_setcred( pamh, PAM_ESTABLISH_CRED | PAM_SILENT );
> PAM_BAIL;
pam_end(pamh, PAM_SUCCESS);
....
The result: A binary of SAMBA that works as an AFS gateway with
nothing added but the "--with-pam" option to configure, and those two
extra lines in pass_check.c.
------------------------------------------------------------
Gary L. Dobbins -- Director, Technical Science
University of Notre Dame, Office of Information Technologies
[EMAIL PROTECTED] -- http://www.nd.edu/~dobbins
219.631.7566 -- FAX 219.631.8201
------------------------------------------------------------
"I can't understand why people are frightened by new ideas.
I'm frightened of old ones."
- John Cage (1912-1992) -
----- Original Message -----
From: Kim Jaeyoung <[EMAIL PROTECTED]>
To: Mugele, Erik <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Monday, August 23, 1999 8:57 PM
Subject: Re: Samba 2.0.5 --with-afs
> On Fri, Jul 23, 1999 at 02:52:10PM +0000, Mugele, Erik wrote:
> > That should do it under AIX. Note: I haven't actually compiled
this under
> > AIX, I did it all under Solaris but the person that helped me get
started
> > had done the above under AIX.
> >
> > For those that are interested, there are several other changes
that have to
> > be made to make this work under Solaris 2.6 or 7.
> >
> > Let me know if there are any questions. Also let me know if MS
Outlook
> > corrupts the attachments and I will resend them from a REAL
system. :) (The
> > company makes me use Outlook).
>
> Hi, I'm an AFS Sysadmin here in POSTECH, Korea.
>
> Since Samba doesn't support AFS when the version goes up, I also
> have much interests in making the latest version of Samba to be
operated
> with AFS. So, I've tested your patch in our environment, but failed.
>
> The following output error messages are produced;
>
> Linking bin/smbd
> Undefined first referenced
> symbol in file
> sigvec /usr/afsws/lib/liblwp.a(iomgr.o)
> sigsetmask
/usr/afsws/lib/liblwp.a(preempt.o)
> ld: fatal: Symbol referencing errors. No output written to bin/smbd
> make: *** [bin/smbd] Error 1
>
> It seems that AFS library includes BSD-style signal functions which
> are not supported in Solaris 2.5.1 machine. My environment is
>
> . Solaris 5.5.1
> . AFS 3.4a with Base configuration afs3.4 5.67 (January 99 release)
> . and want to compile the latest SAMBA 2.0.5a
>
>
> It will be great helpful to have any comments and advices for it.
> Thanks in advance.
>
> Sincerely,
> Jay Kim
>
> --
>
======================================================================
======
> __/\__ ** Remember Yesterday, Dream about Tomorrow, but ... LIVE
TODAY !!!
> \ /\
/ -------------------------------------------------------------------
> /_\/_\ ** [EMAIL PROTECTED]
http://www.postech.ac.kr/~jay
> \/ ** Jaeyoung Kim Dept. of Computer Science,
POSTECH, KOREA
>
