# cd /usr/ports/net/samba
# ftp https://www.tiifp.org/quentin/samba_winbind.patch
Trying 212.112.249.34...
Requesting https://www.tiifp.org/quentin/samba_winbind.patch
100% |**************************************************| 2208 00:00
Successfully retrieved file.
# patch -p1 < samba_winbind.patch
Hmm... Looks like a unified diff to me...
The text leading up to this was:
--------------------------
|diff -r -u -N samba/Makefile samba_winbind/Makefile
|--- samba/Makefile Tue Oct 3 16:07:10 2006
|+++ samba_winbind/Makefile Tue Sep 26 05:51:14 2006
--------------------------
Patching file Makefile using Plan A...
Hunk #1 succeeded at 63 with fuzz 1 (offset 2 lines).
Hunk #2 failed at 82.
Hunk #3 succeeded at 105 (offset -3 lines).
1 out of 3 hunks failed--saving rejects to Makefile.rej
Hmm... The next patch looks like a unified diff to me...
The text leading up to this was:
--------------------------
|diff -r -u -N samba/files/krb5-config samba_winbind/files/krb5-config
|--- samba/files/krb5-config Thu Jan 1 01:00:00 1970
|+++ samba_winbind/files/krb5-config Tue Sep 26 02:08:42 2006
--------------------------
(Creating file files/krb5-config...)
Patching file files/krb5-config using Plan A...
Empty context always matches.
Hunk #1 succeeded at 1.
Hmm... The next patch looks like a unified diff to me...
The text leading up to this was:
--------------------------
|diff -r -u -N samba/files/krb5-config.orig samba_winbind/files/krb5-config.orig
|diff -r -u -N samba/pkg/PFRAG.winbind samba_winbind/pkg/PFRAG.winbind
|--- samba/pkg/PFRAG.winbind Thu Jan 1 01:00:00 1970
|+++ samba_winbind/pkg/PFRAG.winbind Tue Sep 26 06:47:56 2006
--------------------------
(Creating file pkg/PFRAG.winbind...)
Patching file pkg/PFRAG.winbind using Plan A...
Empty context always matches.
Hunk #1 succeeded at 1.
Hmm... The next patch looks like a unified diff to me...
The text leading up to this was:
--------------------------
|diff -r -u -N samba/pkg/PLIST samba_winbind/pkg/PLIST
|--- samba/pkg/PLIST Tue Oct 3 16:07:10 2006
|+++ samba_winbind/pkg/PLIST Tue Sep 26 07:29:33 2006
--------------------------
File to patch: pkg/PLIST-main
Patching file pkg/PLIST-main using Plan A...
Hunk #1 succeeded at 105 (offset 1 line).
done
#

Тут я начал компиляцию и ничего не получил в результате(не было бинарников wbinfo и winbindd). После недолгих поисков я добавил в Makefile следующие строки:

.if ${FLAVOR:L:Mwinbind} CONFIGURE_ARGS+= --with-ldap --with-ads --with-winbind LIB_DEPENDS+= ldap,lber::databases/openldap \ utf8::misc/libutf8 WANTLIB+= gssapi krb5 .else CONFIGURE_ARGS+= --without-ldap --without-ads --without-winbind .endif

После чего все стало немного лучше, но сборка пакета вылетала с ошибкой, от которой я спасся так:

# cp /usr/ports/net/samba/pkg/PFRAG.winbind \ /usr/ports/net/samba/pkg/PFRAG.winbind-main

После этого все почистил и запустил сборку пакета заново. Все собралось успешно. Теперь добавляем:

# pkg_add /usr/ports/packages/i386/all/samba-3.0.24-main-winbind.tgz samba-3.0.24-main-winbind: complete --- samba-3.0.24-main-winbind ------------------- To start the Samba server and naming service enter the following commands: $ sudo /usr/local/libexec/smbd # Start the Samba server component $ sudo /usr/local/libexec/nmbd # Start the Samba naming service The configuration file, found at /etc/samba/smb.conf can be used right away for simple configurations. Local users must be added to the Samba user database using the smbpasswd utility in order to use the Samba server. $ sudo smbpasswd -a To have Samba start whenever the machine boots, add the following lines to the /etc/rc.local script: if [ -x /usr/local/libexec/smbd ]; then /usr/local/libexec/smbd fi if [ -x /usr/local/libexec/nmbd ]; then /usr/local/libexec/nmbd fi For more information and complete documentation, install the samba-docs package and check the /usr/local/share/doc/samba directory. #

Ну теперь проверяем, есть ли у нас в системе winbindd:

# ls -la /usr/local/libexec/winbindd -rwxr-xr-x 1 root wheel 2038782 Nov 7 02:38 /usr/local/libexec/winbindd #

Отлично - все на месте. Теперь идем рихтовать /etc/samba/smb.conf:

# # /usr/local/etc/smb.conf # #======================= Global Settings ======================= [global] # netbios имя домена workgroup = TEACHERS # Строка комментария server string = Teachers Proxy Server # Режим безопасности security = ads # Права доступа hosts allow = 192.168. 127. # расположение лог файла и его размер log file = /var/log/samba/samba.log max log size = 500 # Указываем, откуда пароли брать. ) password server = spider.teachers. # Контроллер домена realm = spider.teachers. # Храним все в файлах passdb backend = tdbsam # Сетевые настройки socket options = TCP_NODELAY # Самба не является PDC local master = no domain master = no preferred master = no domain logons = no os level = 0 # Русский язык display charset = koi8-r unix charset = koi8-r dos charset = cp866 # Шифрованные пароли encrypt passwords = yes # Настройки winbind winbind use default domain = yes winbind uid = 1-65535 winbind gid = 1-65535 winbind enum users = yes winbind enum groups = yes

Добавляем компутер в домен и запускаем winbindd:

# net rpc join -U admin Password: Joined domain TEACHERS. # /usr/local/libexec/winbindd -d 3 #

Теперь тестируем:

# wbinfo -g computers ... skipped ... # wbinfo -u fr33man ... skipped ... #

Все работает, добавляем winbindd в автозагрузку, редактируя /etc/rc.local:

# Starting winbindd if [ -x /usr/local/libexec/winbindd ]; then echo -n ' winbindd' /usr/local/libexec/winbindd -d 3 fi

Теперь устанавливаем squid... С ним возникли тоже некоторые трудности: он не поддерживал ntlm аутентификацию... Он честно писал, что не знает, что такое ntlm.. Пришлось идти в порты и править Makefile изменяя:

--enable-auth="basic digest"

на

--enable-auth="basic ntlm"

После этого все собралось и установилось на ура.

Рихтуем конфиг squid'а. Я туда ничего не добавлял, кроме параметров аутентификации и acl'ов:

auth_param ntlm program /usr/local/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp auth_param ntlm children 5 auth_param basic program /usr/local/bin/ntlm_auth --helper-protocol=squid-2.5-basic auth_param basic children 5 auth_param basic realm Squid proxy-caching web server auth_param basic credentialsttl 2 hours acl USERS proxy_auth REQUIRED http_access allow USERS

Теперь создаем директории для кэша:

# squid -z 2007/11/07 20:07:32| Creating Swap Directories #

И даем сквиду право писать в сокет winbindd:

# chown :_squid /var/spool/samba/winbindd_privileged/

Все, добавляем squid в автозагрузку и запускаем его:

# cat >> /etc/rc.local # Starting squid if [ -x /usr/local/sbin/squid ]; then echo -n ' squid' /usr/local/sbin/squid fi ^D # /usr/local/sbin/squid

Проверяем запустился ли он:

# tail /var/squid/logs/cache.log 2007/11/07 20:12:47| Store logging disabled 2007/11/07 20:12:47| Rebuilding storage in /var/squid/cache (DIRTY) 2007/11/07 20:12:47| Using Least Load store dir selection 2007/11/07 20:12:47| Set Current Directory to /var/squid/cache 2007/11/07 20:12:47| Loaded Icons. 2007/11/07 20:12:47| Accepting proxy HTTP connections at 0.0.0.0, port 3128, FD 44. 2007/11/07 20:12:47| Accepting ICP messages at 0.0.0.0, port 3130, FD 46. 2007/11/07 20:12:47| Accepting SNMP messages on port 3401, FD 47. 2007/11/07 20:12:47| WCCP Disabled. 2007/11/07 20:12:47| Ready to serve requests. #