On Sat, 2003-10-11 at 11:29, Joe Samba wrote:
> Hi All-
> 
> I have SuSE 8.2 installed on two different Intel machines, with (as far as 
> I can determine) all required packages for doing what I'm trying to do 
> here.  Both machines suffer the same problems.
> 
> I didn't find any SuSE 8.2 rpms, so I'm trying to build Samba 3.0 (stable) 
> (24th Sep, 2003) on either of these machines but am having problems with 
> it.
> 
> As root, I did a "./configure --with-afs" (several other options too---see 
> below) and it finished without complaints.  If someone thinks it would 
> help, just say so and I'll post it (or a portion of it) in a follow-up.
> 
> Actual configure command:
> ========================================================
> ./configure --prefix=/usr --with-fhs --sysconfdir=/etc/samba 
> --localstatedir=/var --infodir=/usr/share/info --mandir=/usr/share/man 
> --enable-cups --with-privatedir=/etc/samba --with-lockdir=/var/lock 
> --with-piddir=/var/run/samba --with-swatdir=/usr/share/samba/swat 
> --with-configdir=/etc/samba --with-logfilebase=/var/log/samba 
> --with-smbwrapper --with-afs --with-dce-dfs  --with-ldap  --with-ads  
> --with-automount --with-smbmount --with-pam  --with-pam_smbpass   
> --with-ldapsam  --with-quotas  --with-acl-support  --with-winbind 
> --with-krb5=/usr/local --with-mysql-prefix=/usr 
> --with-mysql-exec-prefix=/usr/bin
> ========================================================
> 
> I did a "make" and quite alot compiles ok, but when I get to 
> source/auth/pass_check.c, it fails with the messages below:
> 
> ========================================================
> athena:/home/adam/smb/samba-3.0.0/source # make
> Using FLAGS =  -g -O2 -I/usr/local/include  -Iinclude 
> -I/home/adam/smb/samba-3.0.0/source/include 
> -I/home/adam/smb/samba-3.0.0/source/ubiqx 
> -I/home/adam/smb/samba-3.0.0/source/smbwrapper  -I. -D_LARGEFILE64_SOURCE 
> -D_FILE_OFFSET_BITS=64 -D_GNU_SOURCE -I/usr/local/include 
> -I/home/adam/smb/samba-3.0.0/source
>       LIBS = -lcrypt -lresolv -lnsl -ldl
>       LDSHFLAGS = -shared
>       LDFLAGS =
> Compiling auth/pass_check.c
> auth/pass_check.c:38:22: afs/stds.h: No such file or directory
> auth/pass_check.c:39:25: afs/kautils.h: No such file or directory
> auth/pass_check.c: In function `afs_auth':
> auth/pass_check.c:53: error: `KA_USERAUTH_VERSION' undeclared (first use 
> in this function)
> auth/pass_check.c:53: error: (Each undeclared identifier is reported only 
> once
> auth/pass_check.c:53: error: for each function it appears in.)
> auth/pass_check.c:53: error: `KA_USERAUTH_DOSETPAG' undeclared (first use 
> in this function)
> make: *** [auth/pass_check.o] Error 1
> athena:/home/adam/smb/samba-3.0.0/source #

While there is some ongoing work to properly implement AFS support, this
isn't it.  This is 'AFS cleartext authentication support'.   That means
that you *must* give samba the password, at login time, in plain text. 
This means that the windows client must have it's registry hacked to
support this.  This is no longer supported by microsoft, and has nasty,
nasty bugs.

> If I remove the "--with-afs" option in the ./configure command, and then 
> try to make again, then the make finishes with no complaints, so that 
> should help explain something.
> 
> I could possibly use samba 3.0 without afs support, but I'd really like to 
> have it as I expect to be using afs very soon, so I'd like to build in 
> whatever support for it samba has.

The best bet is to wait until this can be done properly with the krb5
login ticket.  Then we can use that, with 'proxy' permissions (or
whatever they are called) to authenticated to the AFS server.

There is ongoing work to make Samba a proper AFS gateway, using this.

Andrew Bartlett

-- 
Andrew Bartlett                                 [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org     http://build.samba.org     http://hawkerc.net

Attachment: signature.asc
Description: This is a digitally signed message part

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Reply via email to