Path: csiph.com!news.freedyn.net!open-news-network.org!aioe.org!bofh.it!news.nic.it!robomod
From: Andrew Bartlett via samba <samba@lists.samba.org>
Newsgroups: linux.samba
Subject: Re: [Samba] samba-tool domain classicupgrade  smb_krb5_context_init_basic failed (Invalid argument)
Date: Mon, 13 Feb 2017 00:30:02 +0100
Message-ID: <tabKG-45Z-5@gated-at.bofh.it>
References: <t86m5-6NK-3@gated-at.bofh.it> <t878t-7oH-3@gated-at.bofh.it> <t8bvs-1HE-19@gated-at.bofh.it> <t8Kjw-6RL-17@gated-at.bofh.it> <t8KCR-7dy-5@gated-at.bofh.it> <t98lP-5ij-9@gated-at.bofh.it> <t9IyZ-2R8-5@gated-at.bofh.it> <tabrj-3Zr-13@gated-at.bofh.it>
Face: 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
MIME-Version: 1.0
Reply-To: Andrew Bartlett <abartlet@samba.org>
Content-Type: multipart/mixed; boundary="===============4551826795923328690=="
Sender: robomod@news.nic.it
Approved: robomod@news.nic.it
Lines: 113
Organization: linux.* mail to news gateway
Xref: csiph.com linux.samba:59840


--===============4551826795923328690==
Content-Type: multipart/signed; micalg="pgp-sha512";
	protocol="application/pgp-signature"; boundary="=-+Cbl+5sC7bA4kmsBWLP4"


--=-+Cbl+5sC7bA4kmsBWLP4
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Mon, 2017-02-13 at 10:00 +1100, Tom Robinson via samba wrote:
> On 12/02/17 03:13, Rowland Penny via samba wrote:
> > On Fri, 10 Feb 2017 12:34:23 +1100
> > Tom Robinson via samba <samba@lists.samba.org> wrote:
> >=20
> > > I've grabbed samba 4.5.4 and customised an existing rpm spec
> > > file.
> > > Still some issues there.
> > >=20
> > > What replaces '--with-aio-support' in the configuration step now?
> > >=20
> >=20
> > As far as I can see, nothing, see the 4.4.0 release notes here:
> >=20
> > https://www.samba.org/samba/history/samba-4.4.0.html
> >=20
> > Rowland
> >=20
>=20
> Thanks Rowland.
>=20
> Working through this build a few things have come up. The next is:
>=20
> pam_smbpasswd
>=20
> which appeared in the source (samba-4.3.13/source3/pam_smbpass) until
> samba-4.3.13 but I don't see
> any recognisable notes about the change not to including it after
> that.
>=20
> Any clues?

I'm sorry about the poor notice.  It looks like I failed to ensure this
was mentioned in the WHATSNEW:

commit 3c00e8d76a2ef6194a8ce522c15853e5b8e9262b
Author: Andrew Bartlett <abartlet@samba.org>
Date:=C2=A0=C2=A0=C2=A0Sat Oct 10 08:45:41 2015 +1300

=C2=A0=C2=A0=C2=A0=C2=A0pam_smbpass: REMOVE this PAM module
=C2=A0=C2=A0=C2=A0=C2=A0
=C2=A0=C2=A0=C2=A0=C2=A0This pam module causes GPLv3, thread-unsafe Samba c=
ode to be directly loaded
=C2=A0=C2=A0=C2=A0=C2=A0into the address space of many system services.=C2=
=A0=C2=A0The code in question was not
=C2=A0=C2=A0=C2=A0=C2=A0expected to run in this context, and while using th=
e Samba, rather than the system
=C2=A0=C2=A0=C2=A0=C2=A0password file is a admirable goal, this needs to be=
 done over inter-process
=C2=A0=C2=A0=C2=A0=C2=A0communication, such as is done by pam_winbind.
=C2=A0=C2=A0=C2=A0=C2=A0
=C2=A0=C2=A0=C2=A0=C2=A0pam_winbind is not a total replacement, as the migr=
ate functionality used
=C2=A0=C2=A0=C2=A0=C2=A0to keep the Samba password up to date with the syst=
em password is not
=C2=A0=C2=A0=C2=A0=C2=A0present, but otherwise can provide essentially the =
same services.
=C2=A0=C2=A0=C2=A0=C2=A0
=C2=A0=C2=A0=C2=A0=C2=A0Andrew Bartlett
=C2=A0=C2=A0=C2=A0=C2=A0
=C2=A0=C2=A0=C2=A0=C2=A0Signed-off-by: Andrew Bartlett <abartlet@samba.org>
=C2=A0=C2=A0=C2=A0=C2=A0Reviewed-by: Jeremy Allison <jra@samba.org>

Sorry,

Andrew Bartlett
--=-+Cbl+5sC7bA4kmsBWLP4
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
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=l0g5
-----END PGP SIGNATURE-----

--=-+Cbl+5sC7bA4kmsBWLP4--



--===============4551826795923328690==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
--===============4551826795923328690==--