OS2World OLD-STATIC-BACKUP Forum

OS/2 - Technical => Networking => Topic started by: Blonde Guy on 2007.07.16, 19:42:11

Title: SAMBA and Active Directory
Post by: Blonde Guy on 2007.07.16, 19:42:11
I have inserted an eCS 1.2 R virtual machine into an Active Directory network. I've installed the latest SAMBA client, but I'm not sure how to use it.

I tried the obvious, specifying server, share, user and password, but it doesn't seem to work.

I can use the IBM requestor, where I can use limited browsing, but I can't authenticate.

A Windows 2000 virtual machine in the same network has complete access, so my credentials are OK.

smbcfs beeps all the time, but I have no idea why.

Is anyone else working with Active Directory?
Title: Re: SAMBA and Active Directory
Post by: cyberspittle on 2007.07.18, 04:55:17
Hi BG,

My guess is that there needs to be an OU (Organizational Unit) in Active Directory for the eComStation system. OUs are not only for user accounts, but also for equipment (printers, etc.). Can the Active Directory (Win2K3) see you? Start from the server and work down to the client. I'm no Wingeek, but that's my guess.
Title: Re: SAMBA and Active Directory
Post by: Blonde Guy on 2007.09.21, 18:16:30
Even with the old OS/2 file and print client, a Windows machine in Active Directory can see the OS/2 virtual machine. But it cannot see the shares of the OS/2 virtual machine.

The OS/2 machine can see only the domain controller and one other machine. It cannot see shares on any machine.

Neil
Title: Re: SAMBA and Active Directory
Post by: Simpson_2 on 2007.09.21, 21:34:56
Hi,

I'm not completely sure what the problem is from the email,

but you might run into the problem where you need Kerberos to use the windows server.
please verify that, and if so, help me nag paul to implement kerberos in samba client ;)

and while he is at it, openldap would be nice as well, then the active directory stuff should work as well
( active directroy is microsofts implementation of LDAP )

Bart

Title: Re: SAMBA and Active Directory
Post by: Paul Smedley on 2007.09.23, 13:00:08
Quote from: Simpson_2 on 2007.09.21, 21:34:56
and while he is at it, openldap would be nice as well, then the active directory stuff should work as well
( active directroy is microsofts implementation of LDAP )

Well I built latest openldap yesterday - no time today for debugging and testing - will try get to it this week sometime.....
Title: Re: SAMBA and Active Directory
Post by: Blonde Guy on 2007.10.20, 06:02:34
I'm thinking from the replies thus far that no one has yet tried SAMBA on active directory.

So I'm curious, what are you using SAMBA for?

Neil
Title: Re: SAMBA and Active Directory
Post by: Paul Smedley on 2007.11.20, 04:24:07
Quote from: Blonde Guy on 2007.10.20, 06:02:34
I'm thinking from the replies thus far that no one has yet tried SAMBA on active directory.

So I'm curious, what are you using SAMBA for?

See my reply in the other thread on AD and samba, but....

1) Kerberos is built for OS/2 - but kinit needs to be debugged - hope to have that fixed this week
2) A samba built with kerberos is available - and Bart has successfully browsed a share on an AD server using a java kerberos client, with smbclient.exe (which offers a FTP type interface to a remote share).

Next steps are to debug kinit - then add functionality to the Netdrive plugin to enable kerberos authentication to be used - and I guess ideally to automatically launch kinit to do the authentication.

Cheers,

Paul.
Title: Re: SAMBA and Active Directory
Post by: RobertM on 2007.11.20, 08:37:58
Hey gang, the other thread Paul is referring to is here: http://www.os2world.com/component/option,com_smf/Itemid,63/topic,380.msg2556/#msg2556

And Thanks for the hard work Paul!  :)
Title: Re: SAMBA and Active Directory
Post by: Paul Smedley on 2007.11.27, 00:42:24
Quote from: Paul Smedley on 2007.11.20, 04:24:07
Quote from: Blonde Guy on 2007.10.20, 06:02:34
I'm thinking from the replies thus far that no one has yet tried SAMBA on active directory.

So I'm curious, what are you using SAMBA for?

See my reply in the other thread on AD and samba, but....

1) Kerberos is built for OS/2 - but kinit needs to be debugged - hope to have that fixed this week
2) A samba built with kerberos is available - and Bart has successfully browsed a share on an AD server using a java kerberos client, with smbclient.exe (which offers a FTP type interface to a remote share).

Next steps are to debug kinit - then add functionality to the Netdrive plugin to enable kerberos authentication to be used - and I guess ideally to automatically launch kinit to do the authentication.

Update: I hacked the source for smbcd.exe and once you're authenticated with kinit (the Java version) I've successfully browsed a share on a Windows 2003 server.

Still working on debugging the C version of kinit - looks like a select() call is the problem, but if anyone wants to play around - please contact me for a kerberos enabled smbcd.exe and a mudmap of how to set it up - paul at smedley dot id dot au.

Cheers,

Paul.
Title: Re: SAMBA and Active Directory
Post by: cytan on 2007.11.27, 16:38:11
Quote from: Paul Smedley on 2007.11.27, 00:42:24
Quote from: Paul Smedley on 2007.11.20, 04:24:07
Quote from: Blonde Guy on 2007.10.20, 06:02:34
I'm thinking from the replies thus far that no one has yet tried SAMBA on active directory.

So I'm curious, what are you using SAMBA for?

See my reply in the other thread on AD and samba, but....

1) Kerberos is built for OS/2 - but kinit needs to be debugged - hope to have that fixed this week
2) A samba built with kerberos is available - and Bart has successfully browsed a share on an AD server using a java kerberos client, with smbclient.exe (which offers a FTP type interface to a remote share).

Next steps are to debug kinit - then add functionality to the Netdrive plugin to enable kerberos authentication to be used - and I guess ideally to automatically launch kinit to do the authentication.

Update: I hacked the source for smbcd.exe and once you're authenticated with kinit (the Java version) I've successfully browsed a share on a Windows 2003 server.

Still working on debugging the C version of kinit - looks like a select() call is the problem, but if anyone wants to play around - please contact me for a kerberos enabled smbcd.exe and a mudmap of how to set it up - paul at smedley dot id dot au.

Cheers,

Paul.

Hi Paul,
   Which debugger are you using? I assume that you are using gcc 3.x which is incompatible with emx gdb. One reason why I don't use gcc 3.x is because I don't know of a debugger which works with it.

cytan
Title: Re: SAMBA and Active Directory
Post by: Paul Smedley on 2007.11.27, 21:39:24
Quote from: cytan on 2007.11.27, 16:38:11
Hi Paul,
   Which debugger are you using? I assume that you are using gcc 3.x which is incompatible with emx gdb. One reason why I don't use gcc 3.x is because I don't know of a debugger which works with it.

I use the IBM VAC debugger - which works with gcc provided the app is linked with -Zomf

Cheers,

Paul.
Title: Re: SAMBA and Active Directory
Post by: cytan on 2007.11.27, 23:46:24
Quote from: Paul Smedley on 2007.11.27, 21:39:24
Quote from: cytan on 2007.11.27, 16:38:11
Hi Paul,
   Which debugger are you using? I assume that you are using gcc 3.x which is incompatible with emx gdb. One reason why I don't use gcc 3.x is because I don't know of a debugger which works with it.

I use the IBM VAC debugger - which works with gcc provided the app is linked with -Zomf

Cheers,

Paul.

Do you know why gdb was never ported to gcc 3.x?

cytan
Title: Re: SAMBA and Active Directory
Post by: rudi on 2008.01.17, 10:36:58
Quote from: Paul Smedley on 2007.11.27, 00:42:24

Update: I hacked the source for smbcd.exe and once you're authenticated with kinit (the Java version) I've successfully browsed a share on a Windows 2003 server.

Still working on debugging the C version of kinit - looks like a select() call is the problem, but if anyone wants to play around - please contact me for a kerberos enabled smbcd.exe and a mudmap of how to set it up - paul at smedley dot id dot au.

Cheers,

Paul.


Any progress here ?  We are currently restructuring our company network and it depends on this whether we need to resurrect our dying Novell server or if we can attach the OS/2 clients to an AD network with multiple Windows Servers 2003 that are present anyway...

Title: Re: SAMBA and Active Directory
Post by: bottomtop on 2012.07.19, 09:00:23
Sorry to bring up this old chestnut but I am wondering if we ever got any further on this?