[WBEL-users] updating krb5 to 1.3.1

[Roy Vestal]

Oops, sorry about that William.

Yes, I was able to get krb5 installed from FC1, though it required MANY
other packages to be upgraded. Once I did, I'm able to 'chgrp "domain\group"
share' and test against the domain fully.

The Samba docs really don't dive into it until you get into the version of
kerberos you need in the ADS section. They recommend 1.3.0 or higher, and we
tried krb5 1.3.1 on a test box (FC1) and it worked out of the box. I used it
since most rpms from FC1 are somewhat *drop ins* into WBEL. Samba was a
straight drop in. openssl/openssh were not, hence the  problems with krb5
from WBEL vs. FC1.

Simplest terms of what I did:
Mirrored FC1 to my WBEL box, then ran rpm -Uvh krb5* and manually fix the
dependancies from the Fedora/RPMS directory. Then went to the FC1 updates
and installed SAMBA 3.0.2. Works like a champ.

Oh yeah, gotta make sure winbind is running, otherwise you'll never test
against the domain.

FWIW, we now have 4 Linux boxes (1 is WBEL, 1FC1, 2 RH 7.3) and 15 Solaris
boxes testing against the domain with this same setup.

HTH

----- Original Message ----- 
From: "William Hooper" <whooperhsd2@earthlink.net>
To: <whitebox-users@beau.org>
Sent: Tuesday, April 27, 2004 11:03 AM
Subject: Re: [WBEL-users] updating krb5 to 1.3.1


> Please send replies to the list.
>
> Roy Vestal said:
> > This box is authenticating against Windows AD . krb5 1.3.1 is required
for
> > 3.0.2 to do that. 1.2.7 does NOT play happy with Windows AD
> > authentication.
>
> Links please.  The version of Samba in WBEL is 3.0.2 already.  A (quick, I
> admit) look at samba.org doesn't turn up any discussion of krb5 versions.
>
> Since you are using the FC version of Samba I would suggest trying the FC
> version of krb5.
>
> -- 
> William Hooper
>
> _______________________________________________
> Whitebox-users mailing list
> Whitebox-users@beau.org
> http://beau.org/mailman/listinfo/whitebox-users
>
>