Author Topic: SAMBA and Active Directory  (Read 7966 times)

Blonde Guy

  • Sr. Member
  • ****
  • Posts: 283
    • View Profile
    • Blonde Guy
SAMBA and Active Directory
« on: 2007.07.16, 18:42:11 »
I have inserted an eCS 1.2 R virtual machine into an Active Directory network. I've installed the latest SAMBA client, but I'm not sure how to use it.

I tried the obvious, specifying server, share, user and password, but it doesn't seem to work.

I can use the IBM requestor, where I can use limited browsing, but I can't authenticate.

A Windows 2000 virtual machine in the same network has complete access, so my credentials are OK.

smbcfs beeps all the time, but I have no idea why.

Is anyone else working with Active Directory?
Expert Consulting for OS/2 and eComStation

cyberspittle

  • Jr. Member
  • **
  • Posts: 52
    • View Profile
Re: SAMBA and Active Directory
« Reply #1 on: 2007.07.18, 03:55:17 »
Hi BG,

My guess is that there needs to be an OU (Organizational Unit) in Active Directory for the eComStation system. OUs are not only for user accounts, but also for equipment (printers, etc.). Can the Active Directory (Win2K3) see you? Start from the server and work down to the client. I'm no Wingeek, but that's my guess.

Blonde Guy

  • Sr. Member
  • ****
  • Posts: 283
    • View Profile
    • Blonde Guy
Re: SAMBA and Active Directory
« Reply #2 on: 2007.09.21, 17:16:30 »
Even with the old OS/2 file and print client, a Windows machine in Active Directory can see the OS/2 virtual machine. But it cannot see the shares of the OS/2 virtual machine.

The OS/2 machine can see only the domain controller and one other machine. It cannot see shares on any machine.

Neil
Expert Consulting for OS/2 and eComStation

Simpson_2

  • Newbie
  • *
  • Posts: 3
    • View Profile
Re: SAMBA and Active Directory
« Reply #3 on: 2007.09.21, 20:34:56 »
Hi,

I'm not completely sure what the problem is from the email,

but you might run into the problem where you need Kerberos to use the windows server.
please verify that, and if so, help me nag paul to implement kerberos in samba client ;)

and while he is at it, openldap would be nice as well, then the active directory stuff should work as well
( active directroy is microsofts implementation of LDAP )

Bart


Paul Smedley

  • Sr. Member
  • ****
  • Posts: 322
    • View Profile
Re: SAMBA and Active Directory
« Reply #4 on: 2007.09.23, 12:00:08 »
and while he is at it, openldap would be nice as well, then the active directory stuff should work as well
( active directroy is microsofts implementation of LDAP )

Well I built latest openldap yesterday - no time today for debugging and testing - will try get to it this week sometime.....

Blonde Guy

  • Sr. Member
  • ****
  • Posts: 283
    • View Profile
    • Blonde Guy
Re: SAMBA and Active Directory
« Reply #5 on: 2007.10.20, 05:02:34 »
I'm thinking from the replies thus far that no one has yet tried SAMBA on active directory.

So I'm curious, what are you using SAMBA for?

Neil
Expert Consulting for OS/2 and eComStation

Paul Smedley

  • Sr. Member
  • ****
  • Posts: 322
    • View Profile
Re: SAMBA and Active Directory
« Reply #6 on: 2007.11.20, 04:24:07 »
I'm thinking from the replies thus far that no one has yet tried SAMBA on active directory.

So I'm curious, what are you using SAMBA for?

See my reply in the other thread on AD and samba, but....

1) Kerberos is built for OS/2 - but kinit needs to be debugged - hope to have that fixed this week
2) A samba built with kerberos is available - and Bart has successfully browsed a share on an AD server using a java kerberos client, with smbclient.exe (which offers a FTP type interface to a remote share).

Next steps are to debug kinit - then add functionality to the Netdrive plugin to enable kerberos authentication to be used - and I guess ideally to automatically launch kinit to do the authentication.

Cheers,

Paul.

RobertM

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 2034
    • View Profile
    • A.I.BuiltPC - using OS/2 Warp Server & eComStation for Custom Web and Database Solutions
Re: SAMBA and Active Directory
« Reply #7 on: 2007.11.20, 08:37:58 »
Hey gang, the other thread Paul is referring to is here: http://www.os2world.com/component/option,com_smf/Itemid,63/topic,380.msg2556/#msg2556

And Thanks for the hard work Paul!  :)
|
|
Kirk's 5 Year Mission Continues at:
Star Trek New Voyages
|
|


Paul Smedley

  • Sr. Member
  • ****
  • Posts: 322
    • View Profile
Re: SAMBA and Active Directory
« Reply #8 on: 2007.11.27, 00:42:24 »
I'm thinking from the replies thus far that no one has yet tried SAMBA on active directory.

So I'm curious, what are you using SAMBA for?

See my reply in the other thread on AD and samba, but....

1) Kerberos is built for OS/2 - but kinit needs to be debugged - hope to have that fixed this week
2) A samba built with kerberos is available - and Bart has successfully browsed a share on an AD server using a java kerberos client, with smbclient.exe (which offers a FTP type interface to a remote share).

Next steps are to debug kinit - then add functionality to the Netdrive plugin to enable kerberos authentication to be used - and I guess ideally to automatically launch kinit to do the authentication.

Update: I hacked the source for smbcd.exe and once you're authenticated with kinit (the Java version) I've successfully browsed a share on a Windows 2003 server.

Still working on debugging the C version of kinit - looks like a select() call is the problem, but if anyone wants to play around - please contact me for a kerberos enabled smbcd.exe and a mudmap of how to set it up - paul at smedley dot id dot au.

Cheers,

Paul.

cytan

  • Full Member
  • ***
  • Posts: 213
    • View Profile
Re: SAMBA and Active Directory
« Reply #9 on: 2007.11.27, 16:38:11 »
I'm thinking from the replies thus far that no one has yet tried SAMBA on active directory.

So I'm curious, what are you using SAMBA for?

See my reply in the other thread on AD and samba, but....

1) Kerberos is built for OS/2 - but kinit needs to be debugged - hope to have that fixed this week
2) A samba built with kerberos is available - and Bart has successfully browsed a share on an AD server using a java kerberos client, with smbclient.exe (which offers a FTP type interface to a remote share).

Next steps are to debug kinit - then add functionality to the Netdrive plugin to enable kerberos authentication to be used - and I guess ideally to automatically launch kinit to do the authentication.

Update: I hacked the source for smbcd.exe and once you're authenticated with kinit (the Java version) I've successfully browsed a share on a Windows 2003 server.

Still working on debugging the C version of kinit - looks like a select() call is the problem, but if anyone wants to play around - please contact me for a kerberos enabled smbcd.exe and a mudmap of how to set it up - paul at smedley dot id dot au.

Cheers,

Paul.

Hi Paul,
   Which debugger are you using? I assume that you are using gcc 3.x which is incompatible with emx gdb. One reason why I don't use gcc 3.x is because I don't know of a debugger which works with it.

cytan

Paul Smedley

  • Sr. Member
  • ****
  • Posts: 322
    • View Profile
Re: SAMBA and Active Directory
« Reply #10 on: 2007.11.27, 21:39:24 »
Hi Paul,
   Which debugger are you using? I assume that you are using gcc 3.x which is incompatible with emx gdb. One reason why I don't use gcc 3.x is because I don't know of a debugger which works with it.

I use the IBM VAC debugger - which works with gcc provided the app is linked with -Zomf

Cheers,

Paul.

cytan

  • Full Member
  • ***
  • Posts: 213
    • View Profile
Re: SAMBA and Active Directory
« Reply #11 on: 2007.11.27, 23:46:24 »
Hi Paul,
   Which debugger are you using? I assume that you are using gcc 3.x which is incompatible with emx gdb. One reason why I don't use gcc 3.x is because I don't know of a debugger which works with it.

I use the IBM VAC debugger - which works with gcc provided the app is linked with -Zomf

Cheers,

Paul.

Do you know why gdb was never ported to gcc 3.x?

cytan

rudi

  • Full Member
  • ***
  • Posts: 116
    • View Profile
Re: SAMBA and Active Directory
« Reply #12 on: 2008.01.17, 10:36:58 »

Update: I hacked the source for smbcd.exe and once you're authenticated with kinit (the Java version) I've successfully browsed a share on a Windows 2003 server.

Still working on debugging the C version of kinit - looks like a select() call is the problem, but if anyone wants to play around - please contact me for a kerberos enabled smbcd.exe and a mudmap of how to set it up - paul at smedley dot id dot au.

Cheers,

Paul.


Any progress here ?  We are currently restructuring our company network and it depends on this whether we need to resurrect our dying Novell server or if we can attach the OS/2 clients to an AD network with multiple Windows Servers 2003 that are present anyway...

« Last Edit: 2008.01.17, 10:41:38 by rudi »

bottomtop

  • Newbie
  • *
  • Posts: 30
    • View Profile
Re: SAMBA and Active Directory
« Reply #13 on: 2012.07.19, 08:00:23 »
Sorry to bring up this old chestnut but I am wondering if we ever got any further on this?