SSSD 1.11 for Ubuntu Lucid

[Jay McCanta]

My apologies if this isn't the right place for this request.

I'm looking for sssd ad backend that supports AD domain trusts (within the same
forest) and user filtering.  As I understand things, that would be 1.11.  Has anyone been
able to build 1.11 for Ubuntu Lucid?  I don't mind having to build some of the extra
libraries.  I'm just hoping it's been either done or at the very least doable.  

Thanks to all involved.
Jay McCanta
F5 Networks, Inc.
Seattle, WA 

There are two kinds of people in the world, those with cleaver signature lines, and me.

[Jakub Hrozek]

On 24 Jun 2014, at 22:52, Jay McCanta <J.McCanta(a)F5.com&gt; wrote:

>  My apologies if this isn't the right place for this request.
>   
It is!

>  I'm looking for sssd ad backend that supports AD domain trusts
> (within the same forest) and user filtering. 
Yes, I would recommend running the latest 1.11 release.

>   As I understand things, that would be 1.11.  Has anyone been able to
> build 1.11 for Ubuntu Lucid? 
I’m mostly a Fedora person myself, so I’m not quite sure what is the state of support of
Ubuntu Lucid. But in general, Timo Aaltonnen has been very helpful in providing PPAs for
Ubuntu even for newer packages. You might want to search his PPA archive:
	https://launchpad.net/~tjaalton/+ppa-packages

>  I don't mind having to build some of the extra libraries. 
> I'm just hoping it's been either done or at the very least doable. 
As I said earlier, I’m not completely sure about Ubuntu, but as far as RH-centric distros
go, we support RHEL-6 and with some customisations, even RHEL-5 builds are possible.

If you have trouble, please let us know on this list.

>   
>  
>  Thanks to all involved.
>  Jay McCanta
>  F5 Networks, Inc.
>  Seattle, WA 
>  
>  There are two kinds of people in the world, those with cleaver signature lines, and me.
>  
>  
>  _______________________________________________
>  sssd-users mailing list
>  sssd-users(a)lists.fedorahosted.org
>  https://lists.fedorahosted.org/mailman/listinfo/sssd-users

[Lukas Slebodnik]

On (24/06/14 20:52), Jay McCanta wrote:
> My apologies if this isn't the right place for this request.
>
> I'm looking for sssd ad backend that supports AD domain trusts (within the
> same forest) and user filtering.  As I understand things, that would be 1.11.
> Has anyone been able to build 1.11 for Ubuntu Lucid?  I don't mind having 
Ubuntu
Lucid (10.04) is quite old.
So Good luck :-)

> to build some of the extra libraries.  I'm just hoping it's
> been either done
> or at the very least doable. 
Ubuntu 10.04 has old version of libkrb5 (1.8). You will at least 1.9
(or better1.10) The crucial dependency for AD provider in 1.11 is samba4.
It is only in ubuntu >= trusty.

It is possible you will need to backport also another packages.
If you need to use LTS version of ubuntu it will be easier to backport into
Precise(12.04).

LS

[Longina Przybyszewska]

I work with sssd & ubuntu & AD trust.
If you don't have to stack for some reason to Ubuntu  Lucid distribution - upgrade
today to 14.04 LTS (with sssd-1.11.5 )
 

Best,
Longina


-----Original Message-----
From: sssd-users-bounces(a)lists.fedorahosted.org
[mailto:[e-mail]] On Behalf Of Lukas Slebodnik
Sent: 24. juni 2014 23:18
To: End-user discussions about the System Security Services Daemon
Subject: Re: [SSSD-users] SSSD 1.11 for Ubuntu Lucid

On (24/06/14 20:52), Jay McCanta wrote:
> My apologies if this isn't the right place for this request.
>
> I'm looking for sssd ad backend that supports AD domain trusts (within 
> the same forest) and user filtering.  As I understand things, that would be 1.11.
> Has anyone been able to build 1.11 for Ubuntu Lucid?  I don't mind 
> having
>  
Ubuntu Lucid (10.04) is quite old.
So Good luck :-)

> to build some of the extra libraries.  I'm just hoping it's
> been either 
> done or at the very least doable.
>  
Ubuntu 10.04 has old version of libkrb5 (1.8). You will at least 1.9 (or better1.10) The
crucial dependency for AD provider in 1.11 is samba4.
It is only in ubuntu >= trusty.

It is possible you will need to backport also another packages.
If you need to use LTS version of ubuntu it will be easier to backport into
Precise(12.04).

LS
_______________________________________________
sssd-users mailing list
sssd-users(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users

[steve]

On Tue, 2014-06-24 at 20:52 +0000, Jay McCanta wrote:
>  My apologies if this isn't the right place for this request.
>  
>  I'm looking for sssd ad backend that supports AD domain trusts (within the same
> forest) and user filtering.  As I understand things, that would be 1.11.  Has anyone been
> able to build 1.11 for Ubuntu Lucid?  I don't mind having to build some of the extra
> libraries.  I'm just hoping it's been either done or at the very least doable.  
Hi
The problem with old Ubuntu is that you need the samba4 dev packages for
AD support. The best (only?) way to do this on 10.04 is to build and
install samba4.

The build dependencies are here:
https://wiki.samba.org/index.php/OS_Requirements#Debian_.2F_Ubuntu

then follow this:
https://wiki.samba.org/index.php/Samba4/HOWTO

Then ldconfig the libraries.

After much trial and error we managed a full ad build of 1.11.5 here:
http://linuxcostablanca.blogspot.com.es/2014/05/sssd-1115-on-ubuntu-1404-...

It's on 14.04 but it should get you started as the Samba4 build will
have pulled in a lot of the stuff already. It's then a case of
running ./configure and installing what you're missing until it's clean.

Otherwise, as 14.04 has 1.11.5 out of the box, you may be lucky if you
asking for a backport.
Good luck!
Steve