Re: [CentOS] Install Bind with gss-spnego enabled

2015-04-17 Thread Mike
K, clear. Still very much appreciative of your experience and insight. I'm a wannabe who never has enough time amongst my duties to get my sys-admin skills tight. Cheers, Mike On Fri, Apr 17, 2015 at 9:36 AM, James Hogarth wrote: > On 17 Apr 2015 13:04, "Mike" <1100...@gmail.com> wrote: > > >

Re: [CentOS] Install Bind with gss-spnego enabled

2015-04-17 Thread James Hogarth
On 17 Apr 2015 13:04, "Mike" <1100...@gmail.com> wrote: > > On Fri, Apr 17, 2015 at 7:46 AM, James Hogarth > wrote: > > > It wasn't the bind package directly but rather an issue with the libkrb5 > > libraries. > > > > This is the specific bug that fixed the issue: > > > > https://bugzilla.redhat.c

Re: [CentOS] Install Bind with gss-spnego enabled

2015-04-17 Thread Mike
On Fri, Apr 17, 2015 at 7:46 AM, James Hogarth wrote: > It wasn't the bind package directly but rather an issue with the libkrb5 > libraries. > > This is the specific bug that fixed the issue: > > https://bugzilla.redhat.com/show_bug.cgi?id=1087068 > > I'll get the samba wiki updated to make this

Re: [CentOS] Install Bind with gss-spnego enabled

2015-04-17 Thread James Hogarth
On 17 Apr 2015 00:42, "Mike" <1100...@gmail.com> wrote: > > On Thu, Apr 16, 2015 at 6:03 PM, James Hogarth > wrote: > > > This was required for kerberos secured updates prior to el7.1 and el6.6 ... > > > > The problem in the underlying kerberos libraries was resolved so that > > kerberos based upd

Re: [CentOS] Install Bind with gss-spnego enabled

2015-04-16 Thread Mike
On Thu, Apr 16, 2015 at 6:03 PM, James Hogarth wrote: > This was required for kerberos secured updates prior to el7.1 and el6.6 ... > > The problem in the underlying kerberos libraries was resolved so that > kerberos based updates worked with gss again and spnego doesn't need to be > compiled in.

Re: [CentOS] Install Bind with gss-spnego enabled

2015-04-16 Thread James Hogarth
On 16 Apr 2015 14:29, "Johnny Hughes" wrote: > > On 04/16/2015 06:33 AM, Mike wrote: > > Hi Johnny, > > > > Thank you for your response. I thought to choose the sernet package > > because of the following stated in Samba Readme: > > > > Samba packages shipped in some distributions like e. g. Fedo

Re: [CentOS] Install Bind with gss-spnego enabled

2015-04-16 Thread Mike
On Thu, Apr 16, 2015 at 9:29 AM, Johnny Hughes wrote: > On 04/16/2015 06:33 AM, Mike wrote: > > > BUT .. If I was going to solve this problem, I would do so asking the > sernet guys and I would rebuild the "bind" sources in CentOS with the > proper configure switches so it would likely still meet

Re: [CentOS] Install Bind with gss-spnego enabled

2015-04-16 Thread Johnny Hughes
On 04/16/2015 06:33 AM, Mike wrote: > Hi Johnny, > > Thank you for your response. I thought to choose the sernet package > because of the following stated in Samba Readme: > > Samba packages shipped in some distributions like e. g. Fedora, RHEL may > not be able to be used as Samba AD DC, becaus

Re: [CentOS] Install Bind with gss-spnego enabled

2015-04-16 Thread Mike
Hi Johnny, Thank you for your response. I thought to choose the sernet package because of the following stated in Samba Readme: Samba packages shipped in some distributions like e. g. Fedora, RHEL may not be able to be used as Samba AD DC, because the distribution relies on MIT Kerberos which is

Re: [CentOS] Install Bind with gss-spnego enabled

2015-04-16 Thread Johnny Hughes
On 04/16/2015 12:53 AM, Mike wrote: > CentOS 7.1503 installed. > Installed Samba 4 from sernet: Version 4.1.17-SerNet-RedHat-11.el7 (to be > configured). > > The samba wiki Readme First page states, "Some distributions like . . . Red > Hat Enterprise Linux (and clones), ship BIND9 packages with di

[CentOS] Install Bind with gss-spnego enabled

2015-04-15 Thread Mike
CentOS 7.1503 installed. Installed Samba 4 from sernet: Version 4.1.17-SerNet-RedHat-11.el7 (to be configured). The samba wiki Readme First page states, "Some distributions like . . . Red Hat Enterprise Linux (and clones), ship BIND9 packages with disabled GSS-SPNEGO option, which is required for