FreeBSD加入Win2003域的问题

Herry_DLZeng

环境：FreeBSD6.2+krb5+samba
系统安装：标准安装+所有Distributions
软件安装：krb5和samba都是通过posts安装的。
第一种情况：
1、选安装krb5,再运行"#kinit administrator@TEST.COM"后,输入密码后,出现"kinit: NOTICE: ticket renewable lifetime is 1 week"
应该表示krb5安装和配置没有问题。
2、再安装samba3是就出现如下报错，其中开起了对ADS的支持。
Linking bin/smbd
libsmb/clikrb5.o(.text+0x1060): In function `smb_krb5_get_keyinfo_from_ap_req':
: undefined reference to `krb5_decode_ap_req'
libsmb/clikrb5.o(.text+0x13d1): In function `smb_krb5_principal_compare_any_realm':
: undefined reference to `krb5_principal_compare_any_realm'
libsmb/clikrb5.o(.text+0x179a): In function `smb_krb5_free_error':
: undefined reference to `krb5_free_error_contents'
libads/kerberos_keytab.o(.text+0x1cc): In function `smb_krb5_kt_add_entry':
: undefined reference to `krb5_kt_compare'
/usr/lib/libgssapi.so: undefined reference to `krb5_rd_cred2'
/usr/lib/libgssapi.so: undefined reference to `krb5_crypto_destroy'
/usr/lib/libgssapi.so: undefined reference to `krb5_ret_address'
/usr/lib/libgssapi.so: undefined reference to `krb5_ret_data'
/usr/lib/libgssapi.so: undefined reference to `krb5_ret_keyblock'
/usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setremotesubkey'
/usr/lib/libgssapi.so: undefined reference to `krb5_data_free'
/usr/lib/libgssapi.so: undefined reference to `krb5_config_get_strings'
/usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setlocalsubkey'
/usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_generatelocalsubkey'
/usr/lib/libgssapi.so: undefined reference to `krb5_sockaddr2address'
/usr/lib/libgssapi.so: undefined reference to `krb5_cc_get_ops'
/usr/lib/libgssapi.so: undefined reference to `krb5_get_default_principal'
/usr/lib/libgssapi.so: undefined reference to `krb5_cc_copy_cache'
/usr/lib/libasn1.so: undefined reference to `init_error_table'
/usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setkey'
/usr/lib/libgssapi.so: undefined reference to `krb5_get_forwarded_creds'
/usr/lib/libgssapi.so: undefined reference to `krb5_get_err_text'
/usr/lib/libgssapi.so: undefined reference to `krb5_ret_int32'
/usr/lib/libgssapi.so: undefined reference to `krb5_h_addr2sockaddr'
/usr/lib/libgssapi.so: undefined reference to `krb5_build_authenticator'
/usr/lib/libgssapi.so: undefined reference to `krb5_build_ap_req'
/usr/lib/libgssapi.so: undefined reference to `krb5_auth_getremoteseqnumber'
/usr/lib/libgssapi.so: undefined reference to `krb5_data_zero'
/usr/lib/libgssapi.so: undefined reference to `krb5_storage_free'
/usr/lib/libgssapi.so: undefined reference to `krb5_config_free_strings'
/usr/lib/libgssapi.so: undefined reference to `krb5_create_checksum'
/usr/lib/libgssapi.so: undefined reference to `krb5_generate_random_block'
/usr/lib/libgssapi.so: undefined reference to `krb5_crypto_init'
/usr/lib/libgssapi.so: undefined reference to `krb5_enctype_to_keytype'
/usr/lib/libgssapi.so: undefined reference to `krb5_free_creds_contents'
/usr/lib/libgssapi.so: undefined reference to `krb5_storage_from_mem'
/usr/lib/libgssapi.so: undefined reference to `krb5_store_address'
/usr/lib/libgssapi.so: undefined reference to `krb5_decrypt_ivec'
/usr/lib/libasn1.so: undefined reference to `initialize_error_table_r'
/usr/lib/libgssapi.so: undefined reference to `krb5_store_int16'
/usr/lib/libgssapi.so: undefined reference to `krb5_ret_int16'
/usr/lib/libgssapi.so: undefined reference to `krb5_get_error_string'
/usr/lib/libgssapi.so: undefined reference to `krb5_principal_match'
/usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setlocalseqnumber'
/usr/lib/libgssapi.so: undefined reference to `krb5_storage_to_data'
/usr/lib/libgssapi.so: undefined reference to `krb5_store_int32'
/usr/lib/libgssapi.so: undefined reference to `krb5_encrypt_ivec'
/usr/lib/libgssapi.so: undefined reference to `krb5_storage_emem'
/usr/lib/libgssapi.so: undefined reference to `krb5_store_data'
/usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setremoteseqnumber'
/usr/lib/libgssapi.so: undefined reference to `krb5_principal_get_realm'
/usr/lib/libgssapi.so: undefined reference to `krb5_set_error_string'
/usr/lib/libgssapi.so: undefined reference to `krb5_make_principal'
/usr/lib/libgssapi.so: undefined reference to `krb5_store_keyblock'
*** Error code 1

Stop in /usr/ports/net/samba3/work/samba-3.0.23c/source.
*** Error code 1
第二种情况：
1、先安装samba，同样开起了ADS的支持。安装完成后再在/etc/rc.conf中添加samba_enable="YES"和winbind_enable="YES"后启动samba，并在windows中可以看到samba服务器。 netstat -an 也可以看137 138 139端口开起了。
2、再安装krb5,运行#kinit administrator@TEST.COM，同样可以看到"kinit: NOTICE: ticket renewable lifetime is 1 week"
3、再运#net ads join administrator@TEST.COM 时就如现如下报错
Failed to join domain: Operations error


请各位帮忙分析一下是问题出在那里？
谢谢！

seven007

想当年为了把FB加AD那是相当的痛苦，samba装了好多次，好来换了个版本好像才行。

Asyouwish

检查下krb5的配置

Herry_DLZeng

原帖由 seven007 于 2007-5-28 08:40 发表
想当年为了把FB加AD那是相当的痛苦，samba装了好多次，好来换了个版本好像才行。

结果如何呢？

大大狗

参考一下

http://bbs.chinaunix.net/viewthr ... &extra=page%3D3

wudming

借地方问一下，我装krb5和也是通过posts安装的，没有做krb5.conf的配置
kinit administrator@TEST.COM"后,输入密码后,出现"kinit: NOTICE: ticket renewable lifetime is 1 week"---也成功了，难道我装的这个版本不用做这些？krb5-1.6.3

ahocat

我用ports安装的samba也是不成功，后来到samba官方网站下载了一个就成功了。这是我的一个帖子：
http://bbs2.chinaunix.net/thread-1470103-1-3.html