[EMAIL PROTECTED] wrote:
Hi all,
is it possible at all to get Samba 3 on AIX 5.2 to join a Win 2003
Domain natively ? All the precompiled versions do not have AD Support
and having AIX krb5 installed (let alone using --with-ads)is enough
to make a compile run fail - both 3.0.14 and 3.0.20rc2. Might Heimdal
solve this ? Has ANYONE got a working installation ?
Solving this would make quite a difference to my current life,
so any advice would be appreciated.
Yeah. Been there. Done that. AIX 5.2, samba 3.0.14
I went the route of installing the linux affinity toolkit.
Used gcc to compile. Use at least gcc 3.x
http://aixpdslib.seas.ucla.edu/index.html has a good gcc.
Compiled and installed openldap to /usr/local/openldap
just to link against samba.
Compiled and installed Kerberos to /usr/local using rpm
so if IBM ever got the development files up to speed it
would be easy to uninstall switch back. At the time, last
year, IBM Kerberos didn't support rc4-hmac either.
In configure use CPFLAGS, CPPFLAGS, LDFLAGS to insure
the paths picked the homebrew versions.
I had a special account to log in where LIBPATH and PATH
would pickup the homebrew and linux affinity directories
before the system ones.
When I was done, not only did samba work in ADS = security mode,
but I could use the kerberos utilities natively with the
MS AD as the key distribution center.
I had to turn off sendfile because, although the test machine
worked fine, the production machine ran out of file handles
about 3 hours into the workday. Couldn't even reboot cleanly.
Total lockup. That was several months ago, maybe rc20 fixes that.
I wouldn't know. Never figured how to simulate the load
on the development machine.
I set winbind trusted domains only = yes because I had NIS
and an identical user name correspondence between windows and
unix. Used idmap_ad before it was rolled into the distribution
for winbindd resolution. Didn't test other modes.
Regards, Doug
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
