Samba 3.6.22 on AIX 7.1 with Windows AD (Kerberos and winbind)

Hi all,

I have installed samba 3.6.22 on AIX 7.1 and join a windows AD with success.

All seem to work fine, I have configured smb.conf, methods.cfg, kerberos, user .... the following command work fine wbinfo -u, wbinfo -g, wbinfo -i, wbinfo -s, wbinfo -S, lsuser, id...

The unique issue i have is that le file.txt (see below) don't display owner and group.

 -rw-r--r--    1 10042    10010             7 Jun 26 08:50 file.txt 

Can anyone help me ?

Thank in advance.
Philippe

Hi Philippe,

Are the UID and GID's owned by a user or group locally on the system?

Hi,

The UID and GID's are not owned by a user or group locally on the system, the UID and GID are only on my AD.

Philippe,

Could you please post your config file's contents? Specially methods.cfg and user.

Hi,

Here is the

1) /etc/methods.cfg

WINBIND:
        program = /usr/lib/security/WINBIND
        program_64 = /usr/lib/security/WINBIND_64

NIS:
        program = /usr/lib/security/NIS
        program_64 = /usr/lib/security/NIS_64

DCE:
        program = /usr/lib/security/DCE

KRB5A:
        program = /usr/lib/security/KRB5A
 options = authonly

KRB5files:
        options = db=BUILTIN,auth=KRB5A

/etc/security/user (in particular SYSTEM and registry option)

default:
        admin = false
        login = true
        su = true
        daemon = true
        rlogin = truesugroups = ALL
        admgroups =
        ttys = ALL
        auth1 = SYSTEM
        auth2 = NONE
        tpath = nosak
        umask = 022
        expires = 0
        SYSTEM = "WINBIND or compat"
        registry = WINBIND
        logintimes =
        pwdwarntime = 0
        account_locked = false
        loginretries = 0
        histexpire = 0
        histsize = 0
        minage = 0
        maxage = 0
        maxexpired = -1
        minalpha = 0
        minloweralpha = 0
        minupperalpha = 0
        minother = 0
        mindigit = 0
        minspecialchar = 0
        minlen = 0
        mindiff = 0
        maxrepeats = 8
        dictionlist =
        pwdchecks =
        default_roles =

....

Regards

Thanks for the info!

Where did you get the file /usr/lib/security/WINBIND from? I have installed Sambra from perlz.org and I cannot find it anywhere.

How did you install Samba?

Hello,

I'm not sure where i get the file WINBIND... From my documentation i have installed the following package :

  • rpm -ivh samba*.rpm
    [list]
  • samba-winbind-clients-3.6.22-1
  • samba-winbind-3.6.22-1
  • samba-swat-3.6.22-1
  • samba-common-3.6.22-1
  • samba-client-3.6.22-1
  • samba-3.6.22-1
    [/list]

It seems that my packages are a recompiled form...

Please i'm searching the winbind file too
for know which package own the file WINBIND do

rpm -qf /usr/lib/security/WINBIND 
lslpp -w /usr/lib/security/WINBIND 

Thanks

Hi,

Here is the result :

rpm -qf /opt/freeware/lib/security/WINBIND
samba-winbind-clients-3.6.22-1
1 Like

Thanks.
Please where you get it from?
I try from here
Index of /download/RPMS/samba
But there is no winbind module

drwxr-xr-x giuseppe/domain users 0 2015-03-02 14:55 ./
drwxr-xr-x giuseppe/domain users 0 2015-03-02 14:55 ./opt/
drwxr-xr-x giuseppe/domain users 0 2015-03-02 14:55 ./opt/freeware/
drwxr-xr-x giuseppe/domain users 0 2015-03-02 14:55 ./opt/freeware/lib/
drwxr-xr-x giuseppe/domain users 0 2015-03-02 14:55 ./opt/freeware/lib/security/
-rwxr-xr-x giuseppe/domain users 155064 2013-12-10 09:40 ./opt/freeware/lib/security/pam_winbind.so
lrwxrwxrwx giuseppe/domain users      0 2015-03-02 14:55 ./opt/freeware/lib/libwbclient.so -> libwbclient.so.0
-rwxr-xr-x giuseppe/domain users 164829 2013-12-10 09:40 ./opt/freeware/lib/libwbclient.so.0

Come on, really?

I typed "winbind AIX download" into google and the second hit was the already mentioned Perzl-site from where i took these links:

samba-winbind-3.6.24-1.aix5.1.ppc.rpm
samba-winbind-clients-3.6.24-1.aix5.1.ppc.rpm
samba-winbind-devel-3.6.24-1.aix5.1.ppc.rpm
samba-winbind-krb5-locator-3.6.24-1.aix5.1.ppc.rpm

Was that so hard now? It is absolutely allowed to at least try....

I hope this helps.

bakunin

In those files the WINBIND module is missing.
Try to get it and decompress.

---------- Post updated at 05:55 PM ---------- Previous update was at 05:54 PM ----------

for i in *rpm;do rpm -ql -p $i;done|grep security
/opt/freeware/lib/security/pam_winbind.so

There is only the pam_winbind.so,not the winbind nss module

I found this

https://wiki.samba.org/index.php/AIX\_building_samba

If someone want to try,my xlc is expired

Hi PhilippeA,

Could you please verify the owner and group of methods.cfg and its permission ?

Thanks and Regards
Madhav

I try to build samba on aix 7.1
give me those errors

Compiling lib/addns/dnsrecord.c
"../source4/heimdal/lib/gssapi/gssapi/gssapi_spnego.h", line 49.28: 1506-277 (S) Syntax error: possible missing ';' or ','?
"../source4/heimdal/lib/gssapi/gssapi/gssapi_spnego.h", line 41.1: 1506-485 (S) Parameter declaration list is incompatible with declarator for GSSAPI_CPP_START.
[ 579/3725] Compiling lib/addns/dnsutils.c
"../source4/heimdal/lib/gssapi/gssapi/gssapi_spnego.h", line 49.28: 1506-277 (S) Syntax error: possible missing ';' or ','?
"../source4/heimdal/lib/gssapi/gssapi/gssapi_spnego.h", line 41.1: 1506-485 (S) Parameter declaration list is incompatible with declarator for GSSAPI_CPP_START.
Waf: Leaving directory `/usr/local/src/samba-4.1.17/bin'
Build failed:
 -> task failed (err #1): 
        {task: cc dnsrecord.c -> dnsrecord_1.o}
 -> task failed (err #1): 
        {task: cc dnsutils.c -> dnsutils_1.o}
make: The error code from the last command is 1.

No way to build?

---------- Post updated at 03:11 PM ---------- Previous update was at 02:22 PM ----------

Searching on net suggest this

IBM LI75061: ISSUES WITH C++ STYLE COMMENTS AND C COMPILER - United States

"You can use -qcpluscmt to have the C compiler accept C++ style"

I made

 CFLAGS='-qcpluscmt' CXXFLAGS=$CFLAGS CPPFLAGS='-I/opt/freeware/include' LDFLAGS=' -L/opt/freeware/lib' ./configure --prefix=/opt/mg --check-c-compiler=xlc

and

 CFLAGS='-qcpluscmt' CXXFLAGS=$CFLAGS CPPFLAGS='-I/opt/freeware/include' LDFLAGS=' -L/opt/freeware/lib' make

But give me same error

did you try 4.1.16 too?

I'm tryng now,the first error is avoid without using the freeeware includes,but give another error :eek:

---------- Post updated at 05:30 PM ---------- Previous update was at 05:00 PM ----------

4.1.17
another error

ld: 0711-224 WARNING: Duplicate symbol: fc_softc
ld: 0711-345 Use the -bloadmap or -bnoquiet option to obtain more information.
[3260/3711] Linking default/lib/iniparser/src/libiniparser.so
[3261/3711] Linking default/lib/subunit/c/libsubunit.so
[3262/3711] Linking default/source4/heimdal_build/rkpty
[3263/3711] Linking default/source3/replacetort
[3264/3711] Linking default/source3/timelimit
[3265/3711] Linking default/source3/lib/pthreadpool/pthreadpooltest
[3266/3711] Linking default/source3/lib/asys/asystest
[3267/3711] Linking default/lib/tdb/tdbtool
ld: 0711-224 WARNING: Duplicate symbol: __start
ld: 0711-224 WARNING: Duplicate symbol: .__start
ld: 0711-224 WARNING: Duplicate symbol: _malloc_user_defined_name
ld: 0711-224 WARNING: Duplicate symbol: p_xargc
ld: 0711-224 WARNING: Duplicate symbol: __threads_init
ld: 0711-224 WARNING: Duplicate symbol: .__threads_init
ld: 0711-224 WARNING: Duplicate symbol: __pth_init_routine
ld: 0711-224 WARNING: Duplicate symbol: call_pth_init
ld: 0711-224 WARNING: Duplicate symbol: .call_pth_init
ld: 0711-224 WARNING: Duplicate symbol: _bsd_init_routine
ld: 0711-224 WARNING: Duplicate symbol: _xti_tli_init_routine
ld: 0711-224 WARNING: Duplicate symbol: _nsl_init_routine
ld: 0711-224 WARNING: Duplicate symbol: __dce_compat_init_routine
ld: 0711-224 WARNING: Duplicate symbol: __C_runtime_pstartup
ld: 0711-224 WARNING: Duplicate symbol: p_xargv
ld: 0711-224 WARNING: Duplicate symbol: p_xrcfg
ld: 0711-224 WARNING: Duplicate symbol: p_xrc
ld: 0711-345 Use the -bloadmap or -bnoquiet option to obtain more information.
[3268/3711] Linking default/lib/tdb/tdbdump
[3269/3711] Linking default/lib/tdb/tdbtorture
ld: 0711-224 WARNING: Duplicate symbol: __start
ld: 0711-224 WARNING: Duplicate symbol: .__start
ld: 0711-224 WARNING: Duplicate symbol: _malloc_user_defined_name
ld: 0711-224 WARNING: Duplicate symbol: p_xargc
ld: 0711-224 WARNING: Duplicate symbol: __threads_init
ld: 0711-224 WARNING: Duplicate symbol: .__threads_init
ld: 0711-224 WARNING: Duplicate symbol: __pth_init_routine
ld: 0711-224 WARNING: Duplicate symbol: call_pth_init
ld: 0711-224 WARNING: Duplicate symbol: .call_pth_init
ld: 0711-224 WARNING: Duplicate symbol: _bsd_init_routine
ld: 0711-224 WARNING: Duplicate symbol: _xti_tli_init_routine
ld: 0711-224 WARNING: Duplicate symbol: _nsl_init_routine
ld: 0711-224 WARNING: Duplicate symbol: __dce_compat_init_routine
ld: 0711-224 WARNING: Duplicate symbol: __C_runtime_pstartup
ld: 0711-224 WARNING: Duplicate symbol: p_xargv
ld: 0711-224 WARNING: Duplicate symbol: .rep_fprintf
ld: 0711-224 WARNING: Duplicate symbol: rep_fprintf
ld: 0711-224 WARNING: Duplicate symbol: p_xrcfg
ld: 0711-224 WARNING: Duplicate symbol: p_xrc
ld: 0711-345 Use the -bloadmap or -bnoquiet option to obtain more information.
ld: 0711-317 ERROR: Undefined symbol: .tdb_rescue
ld: 0711-224 WARNING: Duplicate symbol: __start
ld: 0711-224 WARNING: Duplicate symbol: .__start
ld: 0711-224 WARNING: Duplicate symbol: _malloc_user_defined_name
ld: 0711-224 WARNING: Duplicate symbol: p_xargc
ld: 0711-224 WARNING: Duplicate symbol: __threads_init
ld: 0711-224 WARNING: Duplicate symbol: .__threads_init
ld: 0711-224 WARNING: Duplicate symbol: __pth_init_routine
ld: 0711-224 WARNING: Duplicate symbol: call_pth_init
ld: 0711-224 WARNING: Duplicate symbol: .call_pth_init
ld: 0711-224 WARNING: Duplicate symbol: _bsd_init_routine
ld: 0711-224 WARNING: Duplicate symbol: _xti_tli_init_routine
ld: 0711-224 WARNING: Duplicate symbol: _nsl_init_routine
ld: 0711-224 WARNING: Duplicate symbol: __dce_compat_init_routine
ld: 0711-224 WARNING: Duplicate symbol: __C_runtime_pstartup
ld: 0711-224 WARNING: Duplicate symbol: p_xargv
ld: 0711-224 WARNING: Duplicate symbol: .rep_asprintf
ld: 0711-224 WARNING: Duplicate symbol: rep_asprintf
ld: 0711-224 WARNING: Duplicate symbol: p_xrcfg
ld: 0711-224 WARNING: Duplicate symbol: p_xrc
ld: 0711-345 Use the -bloadmap or -bnoquiet option to obtain more information.
Waf: Leaving directory `/usr/local/src/samba-4.1.17/bin'
Build failed:  -> task failed (err #8): 
        {task: cc_link tdbdump_8.o -> tdbdump}
make: The error code from the last command is 1.


---------- Post updated at 10:01 PM ---------- Previous update was at 05:30 PM ----------

4.1.17 with those flags

export CC="/opt/IBM/xlc/13.1.0/bin/xlc"
export CFLAGS="-qmaxmem=16384 -DSYSV -D_AIX -D_AIX32 -D_AIX41 -D_AIX43 -D_AIX51 -D_AIX52 -D_AIX53 -D_AIX61 -D_AIX71 \
        -D_ALL_SOURCE -DFUNCPROTO=15"
./configure --prefix=/opt/mg/samba4 

gmake give this error

[3419/3711] Linking default/source3/smbfilter
ld: 0711-224 WARNING: Duplicate symbol: __start
ld: 0711-224 WARNING: Duplicate symbol: .__start
ld: 0711-224 WARNING: Duplicate symbol: _malloc_user_defined_name
ld: 0711-224 WARNING: Duplicate symbol: p_xargc
ld: 0711-224 WARNING: Duplicate symbol: __threads_init
ld: 0711-224 WARNING: Duplicate symbol: .__threads_init
ld: 0711-224 WARNING: Duplicate symbol: __pth_init_routine
ld: 0711-224 WARNING: Duplicate symbol: call_pth_init
ld: 0711-224 WARNING: Duplicate symbol: .call_pth_init
ld: 0711-224 WARNING: Duplicate symbol: _bsd_init_routine
ld: 0711-224 WARNING: Duplicate symbol: _xti_tli_init_routine
ld: 0711-224 WARNING: Duplicate symbol: _nsl_init_routine
ld: 0711-224 WARNING: Duplicate symbol: __dce_compat_init_routine
ld: 0711-224 WARNING: Duplicate symbol: __C_runtime_pstartup
ld: 0711-224 WARNING: Duplicate symbol: p_xargv
ld: 0711-224 WARNING: Duplicate symbol: .rep_fprintf
ld: 0711-224 WARNING: Duplicate symbol: rep_fprintf
ld: 0711-224 WARNING: Duplicate symbol: .rep_strlcpy
ld: 0711-224 WARNING: Duplicate symbol: rep_strlcpy
ld: 0711-224 WARNING: Duplicate symbol: .strcmp
ld: 0711-224 WARNING: Duplicate symbol: strcmp
ld: 0711-224 WARNING: Duplicate symbol: p_xrcfg
ld: 0711-224 WARNING: Duplicate symbol: p_xrc
ld: 0711-345 Use the -bloadmap or -bnoquiet option to obtain more information.
ld: 0711-317 ERROR: Undefined symbol: ._tevent_req_oom

Hi Philip, it is possible to give more information about your rpm for sendmail-winbind. I tied to compile many version 3 and 4 and i have always an error. The rpms on perlz and other official aix site not work, because it missing a library for nss. This libray is required for auth aix and winbind.

Are-you sure if your login work with AD and Aix auth? Where you found you rpm? it is possible to share your rpm?

Regards.

JF Aubin

Samba 3.* is deprecated and no longer maintained
I have tried to compile it,but if enable nss give error.
Samba4 with xlc give those errors

[ 591/3881] Compiling lib/util/pidfile.c
[ 592/3881] Compiling lib/util/tevent_debug.c
[ 593/3881] Compiling lib/util/util_process.c
[ 594/3881] Compiling lib/util/memcache.c
[ 595/3881] Compiling lib/util/tiniparser.c
[ 596/3881] Compiling lib/util/xfile.c
[ 597/3881] Compiling lib/util/data_blob.c
[ 598/3881] Compiling lib/util/util_file.c
[ 599/3881] Compiling lib/util/time.c
"../lib/util/time.c", line 63.5: 1506-294 (S) Syntax error in expression on #if directive.
Waf: Leaving directory `/usr/local/src/samba-4.2.2/bin'
Build failed:  -> task failed (err #1): 
        {task: cc time.c -> time_9.o}
make: The error code from the last command is 1.

configure used is

 CPPFLAGS='-I/opt/freeware/include' LDFLAGS=' -L/opt/freeware/lib' ./configure  --check-c-compiler=xlc --with-ads   --prefix=/opt/samba4  --sysconfdir=/etc/samba4   --localstatedir=/var  --with-statedir=/var/lib/samba4   --with-privatedir=/var/lib/samba4/private  --with-piddir=/var/run/samba4  --with-cachedir=/var/lib/samba4/private   --with-lockdir=/var/lock/samba4 --with-logfilebase=/var/log/samba4 --with-sockets-dir=/var/run/samba4   --with-configdir=/etc/samba4 && make

the deprecated is not important for me. 3 or 4 or xxxx is not important. I would samba+winbind for connect Aix like Linux and IBM SAN to active directory.
I have tried with gcc and xlc with samba 3.X and 4.x. The configure wotk great, but the make made different error if i take xlc, gcc ... If i find good old Samba 3.xx in rpm with all library for use with nss for AIX, i'll be very very happy.