Compiled 3.5.4 successfully, but new binaries seem to be defective or
missing something. I get errors about PKCS 11 library calls when trying
to join domain. I've seen these errors with "original" Samba 3.0.37 in
"log.winbindd" and "log.wb-DOMAIN", but besides that, 3.0.37 worked and
could join domain.
# ./net -U 'Administrator%password' ads join
[2010/07/15 16:17:48.692586, 0] libads/sasl.c:818(ads_sasl_spnego_bind)
kinit succeeded but ads_sasl_spnego_krb5_bind failed: Error in the
PKCS 11 library calls
Failed to join domain: failed to connect to AD: Error in the PKCS 11
library calls
I'm using Sun's cc for compilation and gnu make (configure didn't
generate Makefile, until gmake was not installed).
1. I installed openldap stable 20100219 with
1. ./configure --disable-slapd --prefix=/opt/samba"
2. Installed Samba with
1. export CFLAGS="-I/usr/include/kerberosv5 -I/usr/include/gssapi"
2. export LDFLAGS="-lsasl -lgss"
3. ./configure --prefix=/opt/samba --with-ads --with-krb5=/usr
--with-aio-support --with-static
modules=vfs_zfsacl,idmap_rid,idmap_hash --with-automount
Where to look next? Maybe I have compiled with wrong options? Should I
try using only gnu build tools? What about openldap compilation, I've
red somewhere that it may leave some important header files and/or
libraries and --enable-null option should be used, if I don't need
daemon. Should I try that?
I also attached "smbd -b" output differences between original 3.0.37 and
my 3.5.4 samba versions. I don't like the line which tells that new
version doesn't have "HAVE_KRB5_MIT" option.
Thanks!
MMM
On 07/15/10 12:28 AM, Jeremy Allison wrote:
On Thu, Jul 15, 2010 at 12:26:05AM +0300, Mārcis Lielturks wrote:
Thanks, machine wont provide NFS or ssh login services, so fiddling with max
groups should do no harm!
I googled a bit at found that samba should be recompiled to take advantage
of new NGROUPS_MAX. "./configure" logs also suggested that NGROUPS_MAX is
evaluated only at compile time.
Yep. Recompilation should do the trick once the kernel understands
large numbers of groups.
Can anybody share experience on compiling samba on OpenSolaris? What's the
most painless way? I'm considering to use latest 3.5.5 but maybe I should
use same version Sun (Oracle) is using - 3.0.37? I have to set up Samba on 2
servers, which already replicate storage, so ID mapping must be consistent
between both Samba servers. Servers have to provide shares also to trusted
domains, but 3.0.37 doesn't have idmap_hash and seems that idmap_rid is not
supported to provide mappings for more than one domain, so anything newer
than 3.0.37 sounds like the right choice.
The only reason they use 3.0.x is they're still unable to cope
with the GPLv3 in (Open?)Solaris. Which is ironic as Oracle
Linux has been shipping GPLv3 Samba for a while. But it's a big
company, you can't expect one part to know what another part is
up to :-).
Jeremy.
--- smbd_minus_b_3.0.37.txt Thu Jul 15 11:37:09 2010
+++ smbd_minus_b_3.5.4_build3.txt Thu Jul 15 16:10:07 2010
@@ -1,24 +1,27 @@
Build environment:
- Built by: g...@sfwnv-x
- Built on: Tue Feb 16 03:02:36 PST 2010
- Built using: /opt/SUNWspro.40/SS12/bin/cc
- Build host: SunOS sfwnv-x 5.11 snv_132 i86pc i386 i86pc
- SRCDIR: /builds2/sfwnv-gate/usr/src/cmd/samba/samba-3.0.37/source
- BUILDDIR: /builds2/sfwnv-gate/usr/src/cmd/samba/samba-3.0.37/source
+ Built by: r...@samba-dev
+ Built on: Thu Jul 15 16:01:48 EEST 2010
+ Built using: cc
+ Build host: SunOS samba-dev 5.11 snv_134 i86pc i386 i86pc
+ SRCDIR: /root/samba-3.5.4/source3
+ BUILDDIR: /root/samba-3.5.4/source3
Paths:
- SBINDIR: /usr/sfw/sbin
- BINDIR: /usr/sfw/bin
- SWATDIR: /usr/sfw/swat
- CONFIGFILE: /etc/sfw/smb.conf
- LOGFILEBASE: /var/samba/log
- LMHOSTSFILE: /etc/sfw/lmhosts
- LIBDIR: /usr/sfw/lib
+ SBINDIR: /opt/samba/sbin
+ BINDIR: /opt/samba/bin
+ SWATDIR: /opt/samba/swat
+ CONFIGFILE: /opt/samba/lib/smb.conf
+ LOGFILEBASE: /opt/samba/var
+ LMHOSTSFILE: /opt/samba/lib/lmhosts
+ LIBDIR: /opt/samba/lib
+ MODULESDIR: /opt/samba/lib
SHLIBEXT: so
- LOCKDIR: /var/samba/locks
- PIDDIR: /var/samba/locks
- SMB_PASSWD_FILE: /etc/sfw/private/smbpasswd
- PRIVATE_DIR: /etc/sfw/private
+ LOCKDIR: /opt/samba/var/locks
+ STATEDIR: /opt/samba/var/locks
+ CACHEDIR: /opt/samba/var/locks
+ PIDDIR: /opt/samba/var/locks
+ SMB_PASSWD_FILE: /opt/samba/private/smbpasswd
+ PRIVATE_DIR: /opt/samba/private
System Headers:
HAVE_SYS_ACL_H
@@ -56,22 +59,25 @@
HAVE_ALLOCA_H
HAVE_ARPA_INET_H
HAVE_COM_ERR_H
+ HAVE_CRYPT_H
HAVE_CTYPE_H
HAVE_DIRENT_H
HAVE_DLFCN_H
HAVE_EXECINFO_H
- HAVE_FAM_H
HAVE_FCNTL_H
HAVE_FLOAT_H
HAVE_FNMATCH_H
+ HAVE_GETOPT_H
HAVE_GLOB_H
HAVE_GRP_H
HAVE_GSSAPI_GSSAPI_H
+ HAVE_GSSAPI_H
HAVE_KRB5_H
HAVE_LANGINFO_H
HAVE_LASTLOG_H
HAVE_LBER_H
HAVE_LDAP_H
+ HAVE_LIBINTL_H
HAVE_LIMITS_H
HAVE_LOCALE_H
HAVE_MEMORY_H
@@ -83,7 +89,10 @@
HAVE_NET_IF_H
HAVE_NSSWITCH_H
HAVE_NSS_COMMON_H
+ HAVE_PTHREAD_H
HAVE_PWD_H
+ HAVE_READLINE_HISTORY_H
+ HAVE_READLINE_READLINE_H
HAVE_RPCSVC_NIS_H
HAVE_RPCSVC_YPCLNT_H
HAVE_RPCSVC_YP_PROT_H
@@ -107,6 +116,8 @@
HAVE_TIME_H
HAVE_UNISTD_H
HAVE_UTIME_H
+ HAVE_UUID_UUID_H
+ HAVE_ZLIB_H
UTMP Options:
HAVE_GETUTMPX
@@ -141,10 +152,14 @@
HAVE_AIO_WRITE64
HAVE_AP_OPTS_USE_SUBKEY
HAVE_ASPRINTF
- HAVE_ASPRINTF_DECL
HAVE_ATEXIT
HAVE_ATTROPEN
HAVE_BACKTRACE_SYMBOLS
+ HAVE_BER_SCANF
+ HAVE_BER_SOCKBUF_ADD_IO
+ HAVE_BINDTEXTDOMAIN
+ HAVE_BLKCNT_T
+ HAVE_BLKSIZE_T
HAVE_BOOL
HAVE_BZERO
HAVE_C99_VSNPRINTF
@@ -155,13 +170,17 @@
HAVE_CONNECT
HAVE_CREAT64
HAVE_CRYPT
- HAVE_CUPS
HAVE_DECL_ASPRINTF
+ HAVE_DECL_KRB5_AUTH_CON_SET_REQ_CKSUMTYPE
+ HAVE_DECL_KRB5_GET_CREDENTIALS_FOR_USER
HAVE_DECL_RL_EVENT_HOOK
HAVE_DECL_SNPRINTF
HAVE_DECL_VASPRINTF
HAVE_DECL_VSNPRINTF
+ HAVE_DGETTEXT
HAVE_DIRENT_D_OFF
+ HAVE_DIRFD
+ HAVE_DIRFD_DECL
HAVE_DLCLOSE
HAVE_DLERROR
HAVE_DLOPEN
@@ -171,15 +190,16 @@
HAVE_ERRNO_DECL
HAVE_EXECL
HAVE_EXPLICIT_LARGEFILE_SUPPORT
- HAVE_FAM_H_FAMCODES_TYPEDEF
HAVE_FCHMOD
HAVE_FCHOWN
HAVE_FCNTL_LOCK
HAVE_FCVT
+ HAVE_FDATASYNC
HAVE_FOPEN64
+ HAVE_FREEADDRINFO
+ HAVE_FRSIZE
HAVE_FSEEKO64
HAVE_FSID_INT
- HAVE_FSTAT
HAVE_FSTAT64
HAVE_FSYNC
HAVE_FTELLO64
@@ -186,35 +206,61 @@
HAVE_FTRUNCATE
HAVE_FTRUNCATE64
HAVE_FTRUNCATE_EXTEND
+ HAVE_FUNCTION_MACRO
+ HAVE_GAI_STRERROR
+ HAVE_GETADDRINFO
HAVE_GETCWD
HAVE_GETDENTS
HAVE_GETDENTS64
HAVE_GETGRENT
+ HAVE_GETGRENT_R
+ HAVE_GETGRENT_R_DECL
+ HAVE_GETGRGID_R
HAVE_GETGRNAM
+ HAVE_GETGRNAM_R
+ HAVE_GETHOSTBYNAME
HAVE_GETMNTENT
+ HAVE_GETNAMEINFO
HAVE_GETNETGRENT
HAVE_GETPAGESIZE
HAVE_GETPGRP
HAVE_GETPWENT_R
+ HAVE_GETPWENT_R_DECL
+ HAVE_GETPWNAM_R
+ HAVE_GETPWUID_R
HAVE_GETRLIMIT
HAVE_GETSPNAM
+ HAVE_GETTEXT
HAVE_GETTIMEOFDAY_TZ
+ HAVE_GETUTXENT
HAVE_GLOB
HAVE_GRANTPT
- HAVE_HAVE_LDAP_NSC
+ HAVE_HISTORY_LIST
HAVE_ICONV
HAVE_IFACE_IFCONF
+ HAVE_INET_ATON
+ HAVE_INET_NTOA
+ HAVE_INET_NTOP
+ HAVE_INET_PTON
HAVE_INITGROUPS
HAVE_INNETGR
- HAVE_IPRINT
+ HAVE_INTPTR_T
+ HAVE_IPV6
+ HAVE_ISATTY
HAVE_KRB5
HAVE_KRB5_AUTH_CON_SETUSERUSERKEY
HAVE_KRB5_C_ENCTYPE_COMPARE
HAVE_KRB5_C_VERIFY_CHECKSUM
+ HAVE_KRB5_DEPRECATED_WITH_IDENTIFIER
HAVE_KRB5_ENCRYPT_BLOCK
+ HAVE_KRB5_ENCTYPE_TO_STRING
+ HAVE_KRB5_ENCTYPE_TO_STRING_WITH_SIZE_T_ARG
HAVE_KRB5_FREE_DATA_CONTENTS
+ HAVE_KRB5_FREE_HOST_REALM
HAVE_KRB5_FREE_KEYTAB_ENTRY_CONTENTS
HAVE_KRB5_FREE_UNPARSED_NAME
+ HAVE_KRB5_FWD_TGT_CREDS
+ HAVE_KRB5_GET_HOST_REALM
HAVE_KRB5_GET_PERMITTED_ENCTYPES
HAVE_KRB5_GET_RENEWED_CREDS
HAVE_KRB5_KEYBLOCK_IN_CREDS
@@ -221,7 +267,6 @@
HAVE_KRB5_KEYTAB_ENTRY_KEY
HAVE_KRB5_KEYUSAGE_APP_DATA_CKSUM
HAVE_KRB5_KT_FREE_ENTRY
- HAVE_KRB5_MIT
HAVE_KRB5_MK_REQ_EXTENDED
HAVE_KRB5_PRINCIPAL2SALT
HAVE_KRB5_PRINC_COMPONENT
@@ -233,15 +278,22 @@
HAVE_KRB5_TKT_ENC_PART2
HAVE_KRB5_USE_ENCTYPE
HAVE_KV5M_KEYTAB
+ HAVE_LCHOWN
HAVE_LDAP
HAVE_LDAP_ADD_RESULT_ENTRY
HAVE_LDAP_INIT
+ HAVE_LDAP_INITIALIZE
HAVE_LDAP_SET_REBIND_PROC
HAVE_LIBKRB5
+ HAVE_LIBLBER
HAVE_LIBLDAP
+ HAVE_LIBNSL
HAVE_LIBPAM
+ HAVE_LIBREADLINE
HAVE_LIBRESOLV
HAVE_LIBSENDFILE
+ HAVE_LIBSOCKET
+ HAVE_LIBZ
HAVE_LINK
HAVE_LLSEEK
HAVE_LONGLONG
@@ -264,7 +316,7 @@
HAVE_MUNLOCK
HAVE_MUNLOCKALL
HAVE_NANOSLEEP
- HAVE_NATIVE_ICONV
+ HAVE_NEW_LIBREADLINE
HAVE_NL_LANGINFO
HAVE_NSS_XBYY_KEY_IPNODE
HAVE_OPEN64
@@ -275,15 +327,21 @@
HAVE_PIPE
HAVE_POLL
HAVE_POSIX_FADVISE
+ HAVE_POSIX_FALLOCATE
+ HAVE_POSIX_FALLOCATE64
HAVE_POSIX_MEMALIGN
HAVE_PRCTL
HAVE_PREAD
HAVE_PREAD64
+ HAVE_PREAD_DECL
HAVE_PRINTF
+ HAVE_PTHREAD
+ HAVE_PTRDIFF_T
HAVE_PUTUTLINE
HAVE_PUTUTXLINE
HAVE_PWRITE
HAVE_PWRITE64
+ HAVE_PWRITE_DECL
HAVE_RAND
HAVE_RANDOM
HAVE_READDIR64
@@ -290,6 +348,7 @@
HAVE_READLINK
HAVE_REALPATH
HAVE_RENAME
+ HAVE_SA_FAMILY_T
HAVE_SECURE_MKSTEMP
HAVE_SELECT
HAVE_SENDFILEV
@@ -313,19 +372,17 @@
HAVE_SIGSET
HAVE_SIG_ATOMIC_T_TYPE
HAVE_SNPRINTF
- HAVE_SNPRINTF_DECL
HAVE_SOCKETPAIR
- HAVE_SOCKLEN_T_TYPE
+ HAVE_SOCKLEN_T
HAVE_SOLARIS_ACLS
HAVE_SRAND
HAVE_SRANDOM
+ HAVE_SS_FAMILY
HAVE_STAT64
+ HAVE_STATVFS_F_FLAG
HAVE_STAT_HIRES_TIMESTAMPS
- HAVE_STAT_ST_ATIM
HAVE_STAT_ST_BLKSIZE
HAVE_STAT_ST_BLOCKS
- HAVE_STAT_ST_CTIM
- HAVE_STAT_ST_MTIM
HAVE_STRCASECMP
HAVE_STRCHR
HAVE_STRDUP
@@ -339,10 +396,16 @@
HAVE_STRTOK_R
HAVE_STRTOL
HAVE_STRTOLL
- HAVE_STRTOUL
HAVE_STRTOULL
+ HAVE_STRUCT_ADDRINFO
HAVE_STRUCT_DIRENT64
HAVE_STRUCT_FLOCK64
+ HAVE_STRUCT_SIGEVENT
+ HAVE_STRUCT_SIGEVENT_SIGEV_VALUE_SIVAL_PTR
+ HAVE_STRUCT_SOCKADDR
+ HAVE_STRUCT_SOCKADDR_IN6
+ HAVE_STRUCT_SOCKADDR_STORAGE
+ HAVE_STRUCT_STAT_ST_MTIM_TV_NSEC
HAVE_STRUCT_STAT_ST_RDEV
HAVE_STRUCT_TIMESPEC
HAVE_ST_RDEV
@@ -349,7 +412,9 @@
HAVE_SYMLINK
HAVE_SYSCONF
HAVE_SYSLOG
+ HAVE_TEXTDOMAIN
HAVE_TICKET_POINTER_IN_KRB5_AP_REQ
+ HAVE_UINTPTR_T
HAVE_UNIXSOCKET
HAVE_UNSETENV
HAVE_UPDWTMP
@@ -357,19 +422,19 @@
HAVE_USLEEP
HAVE_UTIMBUF
HAVE_UTIME
+ HAVE_UTIMENSAT
HAVE_UTIMES
HAVE_UX_UT_SYSLEN
HAVE_VASPRINTF
- HAVE_VASPRINTF_DECL
HAVE_VA_COPY
HAVE_VOLATILE
HAVE_VSNPRINTF
- HAVE_VSNPRINTF_DECL
HAVE_VSYSLOG
+ HAVE_WAIT4
HAVE_WAITPID
- HAVE_WORKING_AF_LOCAL
HAVE_WRFILE_KEYTAB
HAVE_YP_GET_DEFAULT_DOMAIN
+ HAVE_ZLIBVERSION
HAVE__Bool
HAVE__CHDIR
HAVE__CLOSE
@@ -400,15 +465,14 @@
HAVE__TELLDIR
HAVE__VA_ARGS__MACRO
HAVE__WRITE
- HAVE_func_MACRO
--with Options:
WITH_ADS
WITH_AIO
WITH_AUTOMOUNT
+ WITH_DNS_UPDATES
WITH_PAM
WITH_PAM_MODULES
- WITH_SAMFS
WITH_SENDFILE
WITH_UTMP
WITH_WINBIND
@@ -425,6 +489,7 @@
KRB5_TICKET_HAS_KEYINFO
KRB5_VERIFY_CHECKSUM_ARGS
LDAP_SET_REBIND_PROC_ARGS
+ LIBREPLACE_NETWORK_CHECKS
PACKAGE_BUGREPORT
PACKAGE_NAME
PACKAGE_STRING
@@ -444,6 +509,9 @@
SIZEOF_SHORT
SIZEOF_SIZE_T
SIZEOF_SSIZE_T
+ SIZEOF_VOID_P
+ SOLARIS_GETGRENT_R
+ SOLARIS_GETPWENT_R
SOLARIS_SENDFILE_API
STAT_STATVFS64
STAT_ST_BLOCKSIZE
@@ -453,6 +521,7 @@
SYSCONF_SC_NGROUPS_MAX
SYSCONF_SC_NPROCESSORS_ONLN
SYSCONF_SC_PAGESIZE
+ SYSLOG_FACILITY
SYSV
TIME_WITH_SYS_TIME
USE_SETREUID
@@ -459,52 +528,60 @@
WITH_ADS
WITH_AIO
WITH_AUTOMOUNT
+ WITH_DNS_UPDATES
WITH_PAM
WITH_PAM_MODULES
- WITH_SAMFS
WITH_SENDFILE
WITH_WINBIND
- _ALIGNMENT_REQUIRED
_FILE_OFFSET_BITS
_GNU_SOURCE
_LARGEFILE64_SOURCE
- _MAX_ALIGNMENT
- _XOPEN_SOURCE_EXTENDED
auth_script_init
charset_CP437_init
charset_CP850_init
- idmap_ad_init
- idmap_ldap_init
- idmap_rid_init
loff_t
static_decl_auth
static_decl_charset
+ static_decl_gpext
static_decl_idmap
static_decl_nss_info
static_decl_pdb
+ static_decl_perfcount
static_decl_rpc
static_decl_vfs
static_init_auth
static_init_charset
+ static_init_gpext
static_init_idmap
static_init_nss_info
static_init_pdb
+ static_init_perfcount
static_init_rpc
static_init_vfs
+ vfs_acl_tdb_init
+ vfs_acl_xattr_init
vfs_audit_init
vfs_cap_init
+ vfs_catia_init
vfs_default_quota_init
+ vfs_dirsort_init
vfs_expand_msdfs_init
vfs_extd_audit_init
vfs_fake_perms_init
vfs_full_audit_init
vfs_netatalk_init
- vfs_notify_fam_init
+ vfs_preopen_init
vfs_readahead_init
vfs_readonly_init
vfs_recycle_init
+ vfs_scannedonly_init
+ vfs_shadow_copy2_init
vfs_shadow_copy_init
- vfs_zfsacl_init
+ vfs_smb_traffic_analyzer_init
+ vfs_streams_depot_init
+ vfs_streams_xattr_init
+ vfs_syncops_init
+ vfs_xattr_tdb_init
Type sizes:
sizeof(char): 1
@@ -522,4 +599,4 @@
sizeof(dev_t): 4
Builtin modules:
- pdb_ldap pdb_smbpasswd pdb_tdbsam rpc_lsa rpc_reg rpc_lsa_ds rpc_wkssvc
rpc_svcctl rpc_ntsvcs rpc_net rpc_netdfs rpc_srv rpc_spoolss rpc_eventlog
rpc_samr rpc_echo idmap_tdb idmap_passdb idmap_nss nss_info_template auth_sam
auth_unix auth_winbind auth_server auth_domain auth_builtin vfs_default
vfs_solarisacl
+ pdb_ldap pdb_smbpasswd pdb_tdbsam pdb_wbc_sam rpc_lsarpc rpc_winreg
rpc_initshutdown rpc_dssetup rpc_wkssvc rpc_svcctl rpc_ntsvcs rpc_netlogon
rpc_netdfs rpc_srvsvc rpc_spoolss rpc_eventlog rpc_samr idmap_ldap idmap_tdb
idmap_passdb idmap_nss idmap_rid idmap_hash nss_info_template auth_sam
auth_unix auth_winbind auth_wbc auth_server auth_domain auth_builtin
auth_netlogond vfs_default vfs_solarisacl vfs_zfsacl
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
