Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 6 Apr 2017 19:38:47 +0000
From:      Doug Sampson <dougs@dawnsign.com>
To:        "freebsd-ports@freebsd.org" <freebsd-ports@freebsd.org>
Subject:   RE: net/samba46
Message-ID:  <f990c856d2eb444987ceb03ddaefda28@dawnsign.com>
In-Reply-To: <8c7c77cdd530414381326359af7bdb82@dawnsign.com>
References:  <8c7c77cdd530414381326359af7bdb82@dawnsign.com>

next in thread | previous in thread | raw e-mail | index | archive | help
> When I try to join a domain after building samba46, I get this error
> message:
>=20
> root@aries:/usr/local/etc # net ads join -U dspadmin%<password>
> Failed to join domain: failed to create kerberos keytab
> root@aries:/usr/local/etc #
>=20
>=20
> I cannot find anything in any of the samba4 logs.
>=20
> root@aries:/usr/ports/net/samba46 # make showconfig
> =3D=3D=3D> The following configuration options are available for samba46-
> 4.6.1_2:
>      ADS=3Don: Active Directory client support(implies LDAP)
>      AD_DC=3Don: Active Directory Domain Controller support
>      CUPS=3Doff: CUPS printing system support
>      DEBUG=3Don: Build with debugging support
>      DEVELOPER=3Doff: With development support(implies NTVFS)
>      DOCS=3Don: Build and/or install documentation
>      EXP_MODULES=3Doff: Experimental modules(WANT_EXP_MODULES)
>      FAM=3Don: File Alteration Monitor support
>      LDAP=3Don: LDAP client support
>      MANPAGES=3Doff: Build manpages from DOCBOOK templates
>      NTVFS=3Doff: Build *DEPRECATED* NTVFS file server
>      QUOTAS=3Don: Disk quota support
>      SYSLOG=3Don: Syslog logging support
>      UTMP=3Don: UTMP accounting support
> =3D=3D=3D=3D> Options available for the radio DNS: you can only select no=
ne or
> one of them
>      NSUPDATE=3Doff: Use samba NSUPDATE utility for AD DC
>      BIND99=3Doff: Use Bind 9.9 as AD DC DNS server frontend
>      BIND910=3Doff: Use Bind 9.10 as AD DC DNS server frontend
>      BIND911=3Doff: Use Bind 9.11 as AD DC DNS server frontend
> =3D=3D=3D=3D> Options available for the radio ZEROCONF: you can only sele=
ct none
> or one of them
>      AVAHI=3Doff: Zeroconf support via Avahi
>      MDNSRESPONDER=3Doff: Zeroconf support via mDNSResponder
> =3D=3D=3D> Use 'make config' to modify these settings
>=20
> Testparm reveals the following:
>=20
> [global]
>         realm =3D DOMAIN.TLD
>         server string =3D
>         workgroup =3D DOMAIN
>         domain master =3D No
>         local master =3D No
>         preferred master =3D No
>         client ldap sasl wrapping =3D seal
>         log file =3D /var/log/samba4/log.%m
>         disable spoolss =3D Yes
>         load printers =3D No
>         printcap name =3D /dev/null
>         disable netbios =3D Yes
>         max xmit =3D 65535
>         min receivefile size =3D 16384
>         name resolve order =3D lmhosts hosts bcast
>         smb ports =3D 445
>         kerberos method =3D system keytab
>         security =3D ADS
>         server signing =3D if_required
>         deadtime =3D 15
>         max open files =3D 65535
>         socket options =3D TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE
>         template shell =3D /bin/bash
>         winbind cache time =3D 10
>         winbind enum groups =3D Yes
>         winbind enum users =3D Yes
>         winbind nss info =3D rfc2307
>         winbind offline logon =3D Yes
>         winbind refresh tickets =3D Yes
>         winbind separator =3D -
>         nfs4:chown =3D yes
>         nfs4:acedup =3D merge
>         nfs4:mode =3D special
>         idmap config *:range =3D 1000-50000
>         idmap config dsp:backend =3D rid
>         idmap config dsp:default =3D yes
>         idmap config dsp:range =3D 50001-60000
>         idmap config * : backend =3D tdb
>         map readonly =3D no
>         store dos attributes =3D Yes
>         strict locking =3D No
>         directory name cache size =3D 0
>         map acl inherit =3D Yes
>         admin users =3D DOMAIN-doug
>         hosts allow =3D 192.168.xxx. 192.168.xxx. 127. 10.8.
>         inherit owner =3D Yes
>         inherit permissions =3D Yes
>         read only =3D No
>         aio read size =3D 16384
>         aio write size =3D 16384
>         max connections =3D 65535
>         use sendfile =3D Yes
>         vfs objects =3D zfsacl acl_xattr audit netatalk
>=20
> Using the same make configure options and the same smb4.conf on
> net/samba45 allows me to join a domain successfully.
>=20
Is anyone running www/samba46 on a FreeBSD 11.0-RELEASE system utilizing wi=
nbindd? If you're not utilizing winbindd, what are you using for your authe=
ntication? LDAP?

~Doug



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?f990c856d2eb444987ceb03ddaefda28>