[Samba] Windows 2003 Server ADS problems, rh 3.0AS, smb 3.0

2004-01-06 Thread Brian Otto
This is a quick question.  Does anyone know if anything changed with
regard from windows 2000 ADS to windows 2003 ADS?

My configuration is such that I can do a 'getent passwd' and get back
appropriate results, and 'wbinfo -u' and get back appropriate results,
but when I try to login via windows or as DOMAIN+USER it barfs.  And I
know it's not PAM because if I point the machine back to a win2k server,
it works.

Wondering if anyone knows of any changes made to windows 2003 ADS?  Many
thanks!

-- 
Brian Otto, e-mail: [EMAIL PROTECTED]
Principal Analyst Svr Eng, DTE Energy

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba v3b3, SuSE 8.0 enterprise, heimdal 0.6,openssl ADS issues

2003-08-14 Thread Brian Otto
Hi again all,

I'm trying to get samba 3b3 working with ADS on Suse 8.0 enterprise.
I've installed heimdal kerberos 0.6 with openldap support.

Now when I did that, I used the configure options of:

./configure --with-openldap=/usr/local/bin
--with-openldap-include=/usr/local/include
--with-openldap-lib=/usr/local/lib --enable-shared=yes

there's another config option of --with-openldap-config  with a note of
ldap config utility  What the devil is that?  I can't seem to find any
info on it, so am not sure if that's my problem.

Anyway, when compiling samba v3b3 I get this error:

Compiling libsmb/clikrb5.c
libsmb/clikrb5.c: In function `krb5_princ_component':
libsmb/clikrb5.c:398: warning: assignment discards qualifiers from
pointer target type
Compiling libsmb/clispnego.c with -fPIC

looks dangerous.

Than when I try a net ads join, I get:

linux:/home/packages/samba-3.0.0beta3/source # bin/net ads join -U
[EMAIL PROTECTED]
[EMAIL PROTECTED] password:
[2003/08/13 13:04:14, 1] libsmb/clikrb5.c:ads_krb5_mk_req(267)
  krb5_cc_get_principal failed (No such file or directory)
[2003/08/13 13:04:14, 1] libsmb/clikrb5.c:ads_krb5_mk_req(274)
  krb5_get_credentials failed for [EMAIL PROTECTED] (Unknown error
-1765328343)
[2003/08/13 13:04:14, 1] utils/net_ads.c:ads_startup(176)
  ads_connect: Server is unavailable

Now, the fix for the same problem under BSD (thanks to WIll Froning) is
to compile kerberos with ldap support, which is why I'm not sure if the
kerberos is compiling ok.

Also, when I compile samba 3b1, I don't get the compile error and the
net ads error is:

suseserver2:/var/log/samba # net ads join  -U [EMAIL PROTECTED]
[EMAIL PROTECTED] password:
[2003/08/13 10:14:26, 1] libsmb/clikrb5.c:ads_krb5_mk_req(267)
  krb5_cc_get_principal failed (No such file or directory)
[2003/08/13 10:14:26, 1] libsmb/clikrb5.c:ads_krb5_mk_req(274)
  krb5_get_credentials failed for [EMAIL PROTECTED] (Unknown error
2529638927)
[2003/08/13 10:14:26, 0] libads/ldap.c:ads_join_realm(1352)
  Host account for suseserver2 already exists - deleting old account
[2003/08/13 10:14:26, 1] libads/krb5_setpw.c:ads_krb5_set_password(529)
  krb5_get_credentials failed (Unknown error 2529638927)
ads_set_machine_password: Unknown error 2529638927

Notice, it actually lets me add the machine!  Also, either machine, the
'net ads lookup' command works fine, as does klist, and kinit.

Any ideas?

Many thanks

-Brian Otto
--
The opinions expressed herein are my own and do not necessarily reflect
those of my employers



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba v3b3, SuSE 8.0 enterprise,heimdal 0.6,openssl ADS issues

2003-08-14 Thread Brian Otto
Thanks to all who pointed me in the right direction, I got this working, wooho!

--
The opinions expressed herein are my own and do not necessarily reflect those of
my employers



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba Question

2003-08-06 Thread Brian Otto
Will,

I read your post, and the error messages you were getting on the 'net
join' command are pretty much the exact thing I'm getting.

Can you please elaborate on what you did to fix it?  What version/dist.
of kerberos, what flags to compile it?

I'm using SuSE 8.2 professional, samba 3.0 b3, and have been trying the
MIT version of kerberos (1.3.1).

Many thanks,

-Brian Otto
--
The opinions expressed herein are my own and do not necessarily reflect
those of my employers



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba