AIX

AIX

Connect with fellow AIX users and experts to gain knowledge, share insights, and solve problems.


#Power
 View Only
Expand all | Collapse all

Samba 3.6.22 on AIX 7.1 with Windows AD (Kerberos and winbind)

Archive User

Archive UserThu September 18, 2014 10:50 AM

  • 1.  Samba 3.6.22 on AIX 7.1 with Windows AD (Kerberos and winbind)

    Posted Thu June 26, 2014 02:53 AM

    Originally posted by: cccvs


    Hi all,

    I have installed samba 3.6.22 on AIX 7.1 and join a windows AD with success.

    All seem to work fine, i have configured smb.conf, methods.cfg, user .... the following command work fine wbinfo -u, wbinfo -g, lsuser, id...

    The unique issue i have is that le file.txt (see below) don't display owner and group.

    -rw-r--r--    1 10042    10010             7 Jun 26 08:50 file.txt

    Can anyone help me ?

    Thank in advance.

    Philippe

     


    #AIX-Forum


  • 2.  Re: Samba 3.6.22 on AIX 7.1 with Windows AD (Kerberos and winbind)

    Posted Thu June 26, 2014 01:20 PM

    Originally posted by: YannickBergeron


    I guess you would have better chance for an answer on Samba mailing list

     

    Samba user mailing list: https://lists.samba.org/pipermail/samba/

    If you believe it might be related to a bug in samba or that a fix would be required so that this feature works on AIX, you might post on this one: https://lists.samba.org/archive/samba-technical/

    but be ready to provide some trace that show the issue and how you believe it might get fixed by applying a patch.

    samba-technical is more developer oriented mailing list


    #AIX-Forum


  • 3.  Re: Samba 3.6.22 on AIX 7.1 with Windows AD (Kerberos and winbind)

    Posted Thu June 26, 2014 01:23 PM

    Originally posted by: YannickBergeron


    Also it might only be an issue of registry. You might need to configure AIX ldap client (idsldap) against the AD and then ls or lsuser -R LDAP and lsgroup -R LDAP would work

    If that's the case, it's not related to Samba at all


    #AIX-Forum


  • 4.  Re: Samba 3.6.22 on AIX 7.1 with Windows AD (Kerberos and winbind)

    Posted Fri June 27, 2014 04:12 AM

    Originally posted by: cccvs


    Hi Yannick,

    Thank for this informations.

    I try to post my problem to the Samba user mailing list.

    For the configuration of LDAP i have tried the following command, but i have a problem "Invalid -R option "LDAP"

    lsgroup -R LDAP groupname

    with the following command the result is OK :

    lsgroup -R WINBIND groupname


    #AIX-Forum


  • 5.  Re: Samba 3.6.22 on AIX 7.1 with Windows AD (Kerberos and winbind)

    Posted Fri June 27, 2014 07:32 AM

    Originally posted by: YannickBergeron


    lsgroup -R LDAP groupname or lsgroup -R LDAP ALL will only works if you have LDAP configured, please see mksecldap command man page

     

    but if you're able to use lsgroup -R WINBIND groupname, this mean you've an AIX security module for WINBIND under /usr/lib/security

    https://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/winbind.html

    http://www-01.ibm.com/support/knowledgecenter/ssw_aix_61/com.ibm.aix.files/methods.cfg.htm?lang=en

    The example under "NSS Winbind on AIX" state the option "authonly"

    And authonly from the 2nd url state:

    authonly
    Indicates that the loadable authentication module only performs authentication operations. User and group information must be provided by a different module, specified by the db= option. If not by a module, then user and group information must be provided by the local files database.

    So what have you added in your methods.cfg file?


    #AIX-Forum


  • 6.  Re: Samba 3.6.22 on AIX 7.1 with Windows AD (Kerberos and winbind)

    Posted Fri June 27, 2014 07:53 AM

    Originally posted by: cccvs


    My methods.cfg has the following entries :

    WINBIND:
            program = /usr/lib/security/WINBIND
            options = authonly

    NIS:
            program = /usr/lib/security/NIS
            program_64 = /usr/lib/security/NIS_64

    DCE:
            program = /usr/lib/security/DCE

    KRB5A:
            program = /usr/lib/security/KRB5A
            options = authonly

    KRB5files:
            options = db=BUILTIN,auth=KRB5A
     

     


    #AIX-Forum


  • 7.  Re: Samba 3.6.22 on AIX 7.1 with Windows AD (Kerberos and winbind)

    Posted Thu September 18, 2014 10:50 AM

    Originally posted by: laxtnog


    Hi,

     

    ccvs : where did you get samba soft to install on Aix 7.1 , I have installed samba 3.6.22 rpm from http://www.perzl.org/aix/ but I cannot find WINBIND module  neither libnss_winbind.so .

    Anyone knows why?

     

     


    #AIX-Forum


  • 8.  Re: Samba 3.6.22 on AIX 7.1 with Windows AD (Kerberos and winbind)

    Posted Fri September 19, 2014 02:26 AM

    Originally posted by: cccvs


    Hi,

    When you install samba 3.6.22 the following files are installed here "/opt/freeware/lib/security/". You must copy them to /usr/lib/security or make a link :

    lrwxrwxrwx    1 root     system           41 Aug 27 19:12 pam_winbind.so -> /opt/freeware/lib/security/pam_winbind.so
    lrwxrwxrwx    1 root     system           41 Aug 27 19:12 pam_smbpass.so -> /opt/freeware/lib/security/pam_smbpass.so
    lrwxrwxrwx    1 root     system           34 Aug 27 19:49 WINBIND -> /opt/freeware/lib/security/WINBIND
    lrwxrwxrwx    1 root     system           37 Aug 27 19:49 WINBIND_64 -> /opt/freeware/lib/security/WINBIND_64
     

    On AIX 7.1 the libnss_winbind.so does not exist.

    I have also installed the package from the following location :

    http://www.perzl.org/aix/index.php?n=Main.Samba#v3.6.x

     

    Regards


    #AIX-Forum


  • 9.  Re: Samba 3.6.22 on AIX 7.1 with Windows AD (Kerberos and winbind)

    Posted Fri September 19, 2014 03:54 AM

    Originally posted by: laxtnog


    Thanks !

     

    anyway I do not understand what's going on.

    I have installed all packages :

    samba-winbind-clients-3.6.22-1
    samba-client-3.6.22-1
    samba-domainjoin-gui-3.6.22-1
    samba-winbind-devel-3.6.22-1
    samba-3.6.22-1
    samba-common-3.6.22-1
    samba-winbind-krb5-locator-3.6.22-1
    samba-doc-3.6.22-1
    samba-swat-3.6.22-1
    samba-winbind-3.6.22-1

    libsmbclient-3.6.22-1
    libsmbclient-devel-3.6.22-1
     

    but I only find this files under /opt/freeware/lib/security :

    # pwd
    /opt/freeware/lib/security
    # ls -al
    total 6624
    drwxr-xr-x    2 root     system          256 Sep 19 08:51 .
    drwxr-xr-x   15 root     system         8192 Sep 19 08:51 ..
    -rwxr-xr-x    1 root     system      3225482 Dec 10 2013  pam_smbpass.so
    -rwxr-xr-x    1 root     system       155064 Dec 10 2013  pam_winbind.so

     

    I have executed a find command for WINBIIND and is not located at any path.

    Have you installed the same packages?

     

     


    #AIX-Forum


  • 10.  Re: Samba 3.6.22 on AIX 7.1 with Windows AD (Kerberos and winbind)

    Posted Fri September 26, 2014 06:15 AM

    Originally posted by: laxtnog


    Hi,

     

    this is driving me nuts !

     

    do you have exactly the same pacakes as I have ?

     

    samba-winbind-clients-3.6.22-1
    samba-client-3.6.22-1
    samba-domainjoin-gui-3.6.22-1
    samba-winbind-devel-3.6.22-1
    samba-3.6.22-1
    samba-common-3.6.22-1
    samba-winbind-krb5-locator-3.6.22-1
    samba-doc-3.6.22-1
    samba-swat-3.6.22-1
    samba-winbind-3.6.22-1

    libsmbclient-3.6.22-1
    libsmbclient-devel-3.6.22-1

     

    I have intalled diferent versions and I am allways missing WINBIND and  WINBIND_64 module , I just get created this 2 files at /opt/freeware/lib/security
     

    -rwxr-xr-x    1 root     system      3225482 Dec 10 2013  pam_smbpass.so
    -rwxr-xr-x    1 root     system       155064 Dec 10 2013  pam_winbind.so

     

    Can you please confirm which packages do you have installed ?


    #AIX-Forum


  • 11.  Re: Samba 3.6.22 on AIX 7.1 with Windows AD (Kerberos and winbind)

    Posted Tue November 04, 2014 01:13 PM

    Originally posted by: jdvt


    I have the very same doubt... where is the file opt/freeware/lib/security/WINBIND???


    #AIX-Forum


  • 12.  Re: Samba 3.6.22 on AIX 7.1 with Windows AD (Kerberos and winbind)

    Posted Sun November 16, 2014 07:47 PM

    Originally posted by: aixunix33


    I have the same problem,i

    use samba from rpm ftp://www.oss4aix.org/everything/RPMS/

    Join ok

    wbinfo -p -u -g ok

    kinit ok

    But impossible to authenticate user on aix

    i have put pam_winbind.so in /usr/lib/security/WINBIND

    edited methods.cfg

    WINBIND:
            program = /usr/lib/security/WINBIND
            program_64 = /usr/lib/security/WINBIND

    and user

            SYSTEM = "WINBIND or compat"
     

    But id user give crash(illegal istruction) and ssh login stop to work

     


    #AIX-Forum


  • 13.  Re: Samba 3.6.22 on AIX 7.1 with Windows AD (Kerberos and winbind)

    Posted Fri January 09, 2015 09:42 AM

    Originally posted by: aixunix33


    I think the only way is to recompile by rpm source

    http://www.oss4aix.org/download/SRPMS/samba/samba-3.6.24-1.src.rpm

    And enable nss,option is configure --with-nsswrapper i think

    then install the shared library located on samba-3.6.24/nsswitch/libnss_wins.so

    and libnss_winbind.so.

    I have try it but fail with gcc and ibm CC compiler is expired on my ws.

     


    #AIX-Forum


  • 14.  Re: Samba 3.6.22 on AIX 7.1 with Windows AD (Kerberos and winbind)

    Posted Mon March 23, 2015 09:26 AM

    Originally posted by: ClaudeDube


    Hi Guys,

    I've installed Samba 3.6.24 and I'm getting the same issue, I'm not able to figure out how to go around this showstopper. I cannot find library - Name Service Switch - libnss_winbind.so in the samba filesets installed.

    Moreover, according to samba documentation - Samba3-HOWTO.pdf - at page 322 that library should be installed upon samba installation process - I've download all samba's filesets from http://www.perzl.org/aix/ - and it isn't the case.

     

    samba-common-3.6.24-1
    samba-winbind-clients-3.6.24-1
    samba-winbind-3.6.24-1
    samba-winbind-krb5-locator-3.6.24-1
    samba-client-3.6.24-1
    samba-3.6.24-1
    samba-domainjoin-gui-3.6.24-1
    samba-swat-3.6.24-1
    samba-doc-3.6.24-1
     

    Is there anyone has found a solution for kerberos-winbind authentication on AIX 7.1?

    Thanks, Claude


    #AIX-Forum


  • 15.  Re: Samba 3.6.22 on AIX 7.1 with Windows AD (Kerberos and winbind)

    Posted Mon March 23, 2015 12:17 PM

    Originally posted by: aixunix33


    I think there are only one solution: compile samba4(samba 3.6 is now deprecated and eol)

    I have tried it,but with gcc doesn't work,and my copy of ibm compiler is expired.

    If someone assist me i can try to recompile


    #AIX-Forum


  • 16.  Re: Samba 3.6.22 on AIX 7.1 with Windows AD (Kerberos and winbind)

    Posted Tue June 02, 2015 11:55 AM

    Originally posted by: AySA


    could you finally compiling or get the library? I have the same problem. Thank you, very much.


    #AIX-Forum


  • 17.  Re: Samba 3.6.22 on AIX 7.1 with Windows AD (Kerberos and winbind)

    Posted Tue June 02, 2015 01:22 PM

    Originally posted by: aixunix33


    No,i think is a little difficult but if someone want to help we can try

    I have a fresh AIX machine with XLC(trial version) not again expired,

    is usefull to use GCC,simple don't compile samba on aix giving error.

    Samba3 is not more supported,so is useful to compile it(but give error if try to compile)

    We can try samba 4.0,4.1,4.2

    I put the error compiling here,maybe someone can help

    Let start with 4.0.26,the latest 4.0 release from samba

    I use this  configure

     

    export CC=xlc CPPFLAGS='-I/opt/freeware/include' LDFLAGS=' -L/opt/freeware/lib' ./configure  --check-c-compiler=xlc --with-ads   --prefix=/opt/samba4  --sysconfdir=/etc/samba4   --localstatedir=/var  --with-statedir=/var/lib/samba4   --with-privatedir=/var/lib/samba4/private  --with-piddir=/var/run/samba4  --with-cachedir=/var/lib/samba4/private   --with-lockdir=/var/lock/samba4 --with-logfilebase=/var/log/samba4 --with-sockets-dir=/var/run/samba4   --with-configdir=/etc/samba4 && make
    

    the configure start,compile ok until line n° 512,then give this error

    [ 513/3672] Compiling lib/tevent/tevent_wakeup.c
    [ 514/3672] Compiling lib/tevent/pytevent.c
    [ 515/3672] Compiling lib/addns/dnsquery.c
    "../lib/tevent/pytevent.c", line 639.62: 1506-280 (W) Function argument assignment between types "char**" and "const char* const*" is not allowed.
    [ 516/3672] Compiling lib/addns/dnsrecord.c
    [ 517/3672] Compiling lib/addns/dnsutils.c
    "../source4/heimdal/lib/gssapi/gssapi/gssapi_spnego.h", line 49.28: 1506-277 (S) Syntax error: possible missing ';' or ','?
    "../source4/heimdal/lib/gssapi/gssapi/gssapi_spnego.h", line 41.1: 1506-485 (S) Parameter declaration list is incompatible with declarator for GSSAPI_CPP_START.
    "../source4/heimdal/lib/gssapi/gssapi/gssapi_spnego.h", line 49.28: 1506-277 (S) Syntax error: possible missing ';' or ','?
    "../source4/heimdal/lib/gssapi/gssapi/gssapi_spnego.h", line 41.1: 1506-485 (S) Parameter declaration list is incompatible with declarator for GSSAPI_CPP_START.
    Waf: Leaving directory `/usr/local/src/samba-4.0.26/bin'
    Build failed:
     -> task failed (err #1): 
            {task: cc dnsrecord.c -> dnsrecord_1.o}
     -> task failed (err #1): 
            {task: cc dnsutils.c -> dnsutils_1.o}
    make: The error code from the last command is 1.
    

    Let's try without include

     LDFLAGS=' -L/opt/freeware/lib' ./configure  --check-c-compiler=xlc --with-ads   --prefix=/opt/samba4  --sysconfdir=/etc/samba4   --localstatedir=/var  --with-statedir=/var/lib/samba4   --with-privatedir=/var/lib/samba4/private  --with-piddir=/var/run/samba4  --with-cachedir=/var/lib/samba4/private   --with-lockdir=/var/lock/samba4 --with-logfilebase=/var/log/samba4 --with-sockets-dir=/var/run/samba4   --with-configdir=/etc/samba4 && make clean && make
    

    the configure give this error,in my case without ads is useless

    Checking for ldap_add_result_entry                                                              : ok 
    Checking whether ldap_set_rebind_proc takes 3 arguments                                         : ok 
    Active Directory support not available: LDAP support ist not available.
    /usr/local/src/samba-4.0.26/source3/wscript:774: error: Active Directory support not found. Use --without-ads for building without Active Directory support.
    

     

    any suggestion?

    Next is 4.1


    #AIX-Forum


  • 18.  Re: Samba 3.6.22 on AIX 7.1 with Windows AD (Kerberos and winbind)

    Posted Tue June 02, 2015 02:38 PM

    Originally posted by: aixunix33


    Let's try with 4.1.18,the latest 4.1.* release from samba

     

     CPPFLAGS='-I/opt/freeware/include' LDFLAGS=' -L/opt/freeware/lib' ./configure  --check-c-compiler=xlc --with-ads   --prefix=/opt/samba4  --sysconfdir=/etc/samba4   --localstatedir=/var  --with-statedir=/var/lib/samba4   --with-privatedir=/var/lib/samba4/private  --with-piddir=/var/run/samba4  --with-cachedir=/var/lib/samba4/private   --with-lockdir=/var/lock/samba4 --with-logfilebase=/var/log/samba4 --with-sockets-dir=/var/run/samba4   --with-configdir=/etc/samba4 && make
    

    same error

    [ 578/3725] Compiling lib/addns/dnsrecord.c
    [ 579/3725] Compiling lib/addns/dnsutils.c
    "../source4/heimdal/lib/gssapi/gssapi/gssapi_spnego.h", line 49.28: 1506-277 (S) Syntax error: possible missing ';' or ','?
    "../source4/heimdal/lib/gssapi/gssapi/gssapi_spnego.h", line 41.1: 1506-485 (S) Parameter declaration list is incompatible with declarator for GSSAPI_CPP_START.
    "../source4/heimdal/lib/gssapi/gssapi/gssapi_spnego.h", line 49.28: 1506-277 (S) Syntax error: possible missing ';' or ','?
    "../source4/heimdal/lib/gssapi/gssapi/gssapi_spnego.h", line 41.1: 1506-485 (S) Parameter declaration list is incompatible with declarator for GSSAPI_CPP_START.
    Waf: Leaving directory `/usr/local/src/samba-4.1.18/bin'
    Build failed:
     -> task failed (err #1):
            {task: cc dnsrecord.c -> dnsrecord_1.o}
     -> task failed (err #1):
            {task: cc dnsutils.c -> dnsutils_1.o}
    make: The error code from the last command is 1.
    

     


    #AIX-Forum


  • 19.  Re: Samba 3.6.22 on AIX 7.1 with Windows AD (Kerberos and winbind)

    Posted Tue June 02, 2015 02:51 PM

    Originally posted by: aixunix33


    And finally the 4.2.2,latest from 4.2.* serie

    The same configure

     CPPFLAGS='-I/opt/freeware/include' LDFLAGS=' -L/opt/freeware/lib' ./configure  --check-c-compiler=xlc --with-ads   --prefix=/opt/samba4  --sysconfdir=/etc/samba4   --localstatedir=/var  --with-statedir=/var/lib/samba4   --with-privatedir=/var/lib/samba4/private  --with-piddir=/var/run/samba4  --with-cachedir=/var/lib/samba4/private   --with-lockdir=/var/lock/samba4 --with-logfilebase=/var/log/samba4 --with-sockets-dir=/var/run/samba4   --with-configdir=/etc/samba4 && make
    

     

    a different error

     

    [ 591/3881] Compiling lib/util/pidfile.c
    [ 592/3881] Compiling lib/util/tevent_debug.c
    [ 593/3881] Compiling lib/util/util_process.c
    [ 594/3881] Compiling lib/util/memcache.c
    [ 595/3881] Compiling lib/util/tiniparser.c
    [ 596/3881] Compiling lib/util/xfile.c
    [ 597/3881] Compiling lib/util/data_blob.c
    [ 598/3881] Compiling lib/util/util_file.c
    [ 599/3881] Compiling lib/util/time.c
    "../lib/util/time.c", line 63.5: 1506-294 (S) Syntax error in expression on #if directive.
    Waf: Leaving directory `/usr/local/src/samba-4.2.2/bin'
    Build failed:  -> task failed (err #1): 
            {task: cc time.c -> time_9.o}
    make: The error code from the last command is 1.
    
    
    Stop.
    

     


    #AIX-Forum


  • 20.  Re: Samba 3.6.22 on AIX 7.1 with Windows AD (Kerberos and winbind)

    Posted Wed October 05, 2016 07:51 PM

    Originally posted by: aixunix33


    Finally on ibm web download pack

    is avaliable samba 4.3

    Next days i will try with AD


    #AIX-Forum


  • 21.  Re: Samba 3.6.22 on AIX 7.1 with Windows AD (Kerberos and winbind)

    Posted Mon June 12, 2017 08:23 PM

    Originally posted by: maxinxavier


    Were you able to compile with AD support  successfully  ? 

    Can ask the parameters used along with the configure command ? 

    I am after a samba version 3.x/4x  ,with AD support,  for AIX 6.1 .   It is not available to download from any site  , neither I could compile it successfully.

     

    ta,

    Max


    #AIX-Forum