From 90736eb8be3db3fd889e9cea4a4a1714fc8574dd Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Wed, 28 Nov 2001 05:13:12 +0000 Subject: Some random updates for the ADS-HOWTO (This used to be commit c39bf5ba05d04cbc6dd0a328ee43193588ea5134) --- docs/textdocs/ADS-HOWTO.txt | 33 +++++++++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) (limited to 'docs/textdocs') diff --git a/docs/textdocs/ADS-HOWTO.txt b/docs/textdocs/ADS-HOWTO.txt index 303ba13f98..a8992f5d90 100644 --- a/docs/textdocs/ADS-HOWTO.txt +++ b/docs/textdocs/ADS-HOWTO.txt @@ -17,9 +17,25 @@ Pieces you need before you begin: - the MIT kerberos development libraries (either install from the above sources or use a package). Under debian you need "libkrb5-dev" and "krb5-user". The heimdal libraries will not work. +- Cyrys SASL, including the gssapi mechanism. - the OpenLDAP development libraries. These must be compiled with Cyrus SASL enabled. +On RedHat this means you should have at least: + +krb5-workstation (for kinit) +krb5-libs (for linking with) +krb5-devel (because you are compiling from source) +cyrus +cyrus-sasl +cyrus-sasl-devel +cyrus-sasl-gssapi + +in addition to the standard development environment. + +Note that these are not standard on a RedHat install, and you may need +to get them off CD2. + Also check that you have the latest copy of this HOWTO. It is available from http://samba.org/ftp/tridge/kerberos/HOWTO @@ -90,6 +106,23 @@ Step 3: Create the computer account net ads join + Possible errors: + - "bash: kinit: command not found": + - kinit is in the krb5-workstation RPM on RedHat systems, and is + in /usr/kerberos/bin, so it won't be in the path until + you log in again (or open a new terminal) + - "ADS support not compiled in" + - Samba must be reconfigured (remove config.cache) and + recompiled (make clean all install) after the kerberos libs + and headers are installed. + - "Unknown authentication method" + - the cyrus-sasl-gssapi package is not installed. + The RPM (assuming RedHat 7.2) is on CD2 + + - "ads_add_machine_acct: Invalid DN syntax" + - The 'realm' paramater has not been added to your smb.conf + + Step 4: Test your server setup On a Windows 2000 client try "net use * \\server\share". You should -- cgit