[Freeipa-users] Ubuntu Samba Server Auth against IPA

Lukas Slebodnik lslebodn at redhat.com
Fri Jul 31 15:21:38 UTC 2015


On (31/07/15 16:03), Matt . wrote:
>Hi Guys,
>
>I'm really struggeling getting a NON AD Samba server authing against a
>FreeIPA server:
>
>Ubuntu 14.04 -> Samba (no AD) / SSD 1.12.5
>CentOS 7.1 -> FreeIPA 4.1
>
>Now this seems to be the way:
>
>https://www.freeipa.org/page/Howto/Integrating_a_Samba_File_Server_With_IPA
>
As you can see this howto is mainly written for rpm based distributions.
The most important difference between sssd 1.12.5 for ubuntu[1]
and sssd >= 1.12 in fedora[2] is packaging of sssd-libwbclient.

sssd-libwbclient and libwbclient(from samba) use alternatives
to switch between these libraries.


Ubuntu 14.04
root at 48c613c6a3fc:/# ls -l /usr/lib/x86_64-linux-gnu/libwbclient*
lrwxrwxrwx. 1 root root    19 Jul  1 15:38
/usr/lib/x86_64-linux-gnu/libwbclient.so.0 -> libwbclient.so.0.11
-rw-r--r--. 1 root root 43216 Jul  1 15:38
/usr/lib/x86_64-linux-gnu/libwbclient.so.0.11

root at 48c613c6a3fc:/# ls -l /usr/lib/x86_64-linux-gnu/sssd/modules/libwbclient*
lrwxrwxrwx. 1 root root    21 Jun 15 18:14
/usr/lib/x86_64-linux-gnu/sssd/modules/libwbclient.so.0 ->
libwbclient.so.0.12.0
-rw-r--r--. 1 root root 30800 Jun 15 18:14
/usr/lib/x86_64-linux-gnu/sssd/modules/libwbclient.so.0.12.0


Fedora 21
bash-4.3# alternatives --display libwbclient.so.0.11-64
libwbclient.so.0.11-64 - status is auto.
 link currently points to /usr/lib64/samba/wbclient/libwbclient.so.0.11
/usr/lib64/samba/wbclient/libwbclient.so.0.11 - priority 10
/usr/lib64/sssd/modules/libwbclient.so.0.12.0 - priority 5
Current `best' version is /usr/lib64/samba/wbclient/libwbclient.so.0.11.


So if you want to use this howto on ubuntu then you need to create
symbolic links on your own.


Feel free to update Howto page with additional information
if you manage solve it on ubuntu.

LS

[1] https://launchpad.net/~sssd/+archive/ubuntu/updates
[2] https://admin.fedoraproject.org/updates/sssd




More information about the Freeipa-users mailing list