Samba 3.6 on AIX 7.1 - Windows 10 Access to AIX file shares using Active Directory authentication
I am running AIX 7.1 and currently we have samba 3.6.25 installed on the server. As it stands some AIX folders are shared that can be accessed by certain Windows users.
The problem is that since Windows 10 the guest feature no longer works so users have to manually type in their Windows login/pwd before they can access the shared drives. They get a pop up box asking them to login. Previously users were able to connect to the AIX file shares with no requirement to enter username/passwords. I do not have Kerberos installed on this server.
My requirement:
I need to reconfigure samba so that a small group of Windows users in a specific group on Active Directory can access these shared folders on AIX without the requirement to enter their login and password. Samba should recognise the user they are currently logged in as on Active Directory and allow them access to the folder if they are a member of the right access group.
My current smb.conf is as follows:
I understand from my initial research that I need to change the security from user to ADS by setting security = ADS. This would then allow me to use Active Directory to authenticate the users. Unfortunately after checking the nmbd logs it seems that this setting is not recognised by this version of Samba 3.6...
Quote:
WARNING: Ignoring invalid value 'ADS' for parameter 'security'
Ignoring unknown parameter "realm"
It may be that Samba 3.6 does not support ADS. In this case do I have any other options with Samba 3.6 that would allow me to authenticate with the Windows Domain running on Windows Server 2012? I see there is also a server setting of domain - server = domain. I understand the AIX machine name would need to be added to the active directory server under machines I presume?
When looking at adding Samba to domains there was reference to a command "net ads -u Username" I get another error.
Quote:
ADS support not compiled in
So I presume this means I can't use the domain option either which would suggest I need a newer version of Samba.
I have checked many AIX forums but have not been able to find a pre-compiled version of samba 4 for AIX 7.1. This would be the safest way to upgrade.
Unfortunately this AIX machine does not have GCC, WGET, YUM installed so it would be difficult to compile from source. If this was Ubuntu I'd just run an apt-get install samba but AIX is a different beast.
Also can anyone confirm if I need to also install Kerberos for this to work?
I'd be interested to hear if anyone has this working. Any suggestions to help with this project would be appreciated. Thank you.
Last edited by linuxsnake; 10-10-2019 at 07:50 AM..
Hi. There's some useful information here but no references in the forum to the server = AD function not working on Samba 3.6
I've decided to download some pre-compiled RPM's for Samba 4 to install on my AIX server. Judging by the error message I saw it's as if my version of Samba was compiled without AD support... Strange.
I presume Kerberos will also need to be installed from my research of current forum posts. So I'll download these RPM's as well.
If I can get Samba 4 and Kerberos installed on AIX this should hopefully allow me to start communicating with Active Directory. Previously I've worked predominantly on Linux systems so this task would of been a lot quicker using yum or apt-get. I'll keep the post updated with progress, hopefully helping others who have this requirement.
Samba 4 (4.10.6-1 and pretty much any earlier version) for AIX is available from IBM / AIX toolbox. You can download it directly from there assuming you have an IBM account and it is fully supported by IBM. You might need to download the corresponding dependencies as well.
If anyone can provide any guidance of how I can proceed with this error when I run yum install would be appreciated. This appears to be for any yum install <software> attempt
Not sure if skipping these errors would be a good idea.. I'd like to get all the dependencies fixed if I can.
Last edited by vbe; 10-16-2019 at 11:49 AM..
Reason: code tags - not quotes please
Hi. Ive recently upgraded Samba on an AIX server to Samba 4. The aim is to allow a specific group of Windows AD users to access some AIX file shares (with no requirement to enter passwords) - using AD to authenticate.
Currently I have:
Samba 4 installed ( and 3 daemons running)
Installed... (1 Reply)
Hi all,
I have installed samba 3.6.22 on AIX 7.1 and join a windows AD with success.
All seem to work fine, I have configured smb.conf, methods.cfg, kerberos, user .... the following command work fine wbinfo -u, wbinfo -g, wbinfo -i, wbinfo -s, wbinfo -S, lsuser, id...
The unique... (20 Replies)
Hi All, We are using solaris samba server for our company project to provide access to code to our development team.Recently our ICT has disabled wins service on Active directory due which user are not able to connect to samba share and they are getting error "No logon server available" as samba... (2 Replies)
First, let me start off saying this is not spam. This is me trying to help out other AIX Admins with MS AD servers. If it is not applicable to you, someone else will find it useful.
As long as the "KDC" service is running on your AD server, these steps should work. There should be no... (3 Replies)
Hello,
I've configured an user authentication against Active Directory (Windows Server 2008 R2) on AIX V6 with LDAP. It works fine.
And here's my problem:
How can I control ldap user permissions on the local AIX machine?
E.g. an AD user should be able to write all files of local sys... (1 Reply)
Hello, I asked this question in the AIX subforum but never received an answer, probably because the AIX forum is not that heavily trafficked. Anyway, here it is..
I have never had any issues like this when compiling applications from source. When I try to compile samba-3.5.0pre2, configure runs... (9 Replies)
Hi all.
I'm having real trouble authenticating users against active directory for my SCO UnixWare 7.1.4 box running samba 3.0.24 (installed via Maintenance pack 4). I can list AD users/groups (after overcoming several hiccups) with wbinfo -g / wbinfo -u. I can use id to get a view an ad user ie:... (0 Replies)
Hi All,
I am basically new to this forum as well as AIX. To share some huge files between 2 servers I thought of creating a shared Directory in my AIX machine to access it in Solaris. I am very new to this AIX. Help me out how can u share a directory in AIX to access (mount) it on Solaris.
Hope... (2 Replies)
Dear All,
How to configure a Redhat 9 client to windows 2003 server. I have windows 2003 server which act has domain controller in my office. I have been asked to use redhat 9 has client. how to configure so that redhat 9 can authenticate with windows 2003 server .I have username created in... (0 Replies)