Quantcast

[WHATSNEW] Samba AD with MIT Kerberos + Version change

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

[WHATSNEW] Samba AD with MIT Kerberos + Version change

Samba - samba-technical mailing list

On Fri, 5 May 2017 13:39:11 +0200
L.P.H. van Belle <[hidden email]> wrote:

> Now based on this below.
>
> I already created this patch for the debian samba 470 packages.
> This works as long as the code can detect : /etc/krb5kdc correctly
> without --kdc-config-dir= in provisioning, because most people will
> us the --kdc-config-dir .
>
> krb5kdc.patch
> --- samba-4.7.0.orig/python/samba/provision/kerberos_implementation.py
> +++ samba-4.7.0/python/samba/provision/kerberos_implementation.py
> @@ -14,5 +14,5 @@
>  # You should have received a copy of the GNU General Public License
>  # along with this program.  If not, see
> <http://www.gnu.org/licenses/>. #
> -kdb_modules_dir = "/usr/local/samba/lib/krb5/plugins/kdb"
> +kdb_modules_dir = "/usr/lib/x86_64-linux-gnu/krb5/plugins/kdb"
>  kdc_default_config_dir = "None"
> +kdc_default_config_dir = "/etc/krb5kdc"
>
>
> Only this need the correct fix, for that we need the devs..  
>
> > Did you also modify python/samba/provision/kerberos.py:29:
> >   if _glue.is_heimdal_built:
> > to
> >   if _glue.is_heimdal_built():
>

Following Louis's changes to where to put samba.so, it now works for
me as well, but something else will need fixing. the file
'kerberos_implementation.py' is autocreated and doesn't exist in git,
so I don't see how you can patch it ;-)

Rowland

Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: [WHATSNEW] Samba AD with MIT Kerberos + Version change

Samba - samba-technical mailing list
On Friday, 5 May 2017 14:18:16 CEST Rowland Penny via samba-technical wrote:

> On Fri, 5 May 2017 13:39:11 +0200
>
> L.P.H. van Belle <[hidden email]> wrote:
> > Now based on this below.
> >
> > I already created this patch for the debian samba 470 packages.
> > This works as long as the code can detect : /etc/krb5kdc correctly
> > without --kdc-config-dir= in provisioning, because most people will
> > us the --kdc-config-dir .
> >
> > krb5kdc.patch
> > --- samba-4.7.0.orig/python/samba/provision/kerberos_implementation.py
> > +++ samba-4.7.0/python/samba/provision/kerberos_implementation.py
> > @@ -14,5 +14,5 @@
> >
> >  # You should have received a copy of the GNU General Public License
> >  # along with this program.  If not, see
> >
> > <http://www.gnu.org/licenses/>. #
> > -kdb_modules_dir = "/usr/local/samba/lib/krb5/plugins/kdb"
> > +kdb_modules_dir = "/usr/lib/x86_64-linux-gnu/krb5/plugins/kdb"
> >
> >  kdc_default_config_dir = "None"
> >
> > +kdc_default_config_dir = "/etc/krb5kdc"
> >
> >
> > Only this need the correct fix, for that we need the devs..
> >
> > > Did you also modify python/samba/provision/kerberos.py:29:
> > >   if _glue.is_heimdal_built:
> > > to
> > >
> > >   if _glue.is_heimdal_built():
> Following Louis's changes to where to put samba.so, it now works for
> me as well, but something else will need fixing. the file
> 'kerberos_implementation.py' is autocreated and doesn't exist in git,
> so I don't see how you can patch it ;-)

I'm reworking this part of the code. We will put the kdc.conf in the private
dir and use that one by default. This will create less confusion and issues.

Loading...