Bug 14854 – SAMBA is compiling for some users w/ LDAP despite a lack of ldap in /etc/make.conf

• Product: Gentoo Linux
• Status: RESOLVED WORKSFORME

[Description Josiah Ritchie (flickerfly) 2003-01-31 09:32:42 UTC]

User-Agent:       
Build Identifier: 

Users are having to compile SAMBA with USE="-ldap" despite a lack of ldap in the /etc/make.conf file.  This causes authentication problems.

Reproducible: Sometimes
Steps to Reproduce:
1. remove ldap from /etc/make.conf
2. emerge samba
3. try to change passwd with smbpasswd <username>

Actual Results:  
blocks authentication and passwd changes of users

Expected Results:  
Software should not compile w/ LDAP support w/out appropriate USE=ldap

[Comment 1 SpanKY 2003-01-31 10:37:03 UTC]

imo ldap should be in use.defaults due to the fact that it is not common for ppl to auth via ldap ... (i for one have no idea how to utilize it ;D)

[Comment 2 Donny Davies (RETIRED) 2003-01-31 13:57:33 UTC]

U s e r  E r r o r.

if its in use.defaults they have to compile with either USE=-ldap
or tweak USE_ORDER in make.conf, like I've been doing for months.

[Comment 3 VT 2003-06-03 22:01:37 UTC]

Is there any way to make LDAP usage configurable via smb.conf or a flag?  Even if I add LDAP support via USE="ldap" I may or may not want to use LDAP any given time.  Why does "adding support for" have to mean "forced to use"?

[Comment 4 Josiah Ritchie (flickerfly) 2003-06-04 10:49:46 UTC]

Go to:
http://us1.samba.org/samba/docs/man/smb.conf.5.html#LDAPADMINDN
to find out what the ldap parameters are for smb.conf.  I'm pretty sure that you can comment them out and then have no LDAP interaction, but still have the capability if you decide to take advantage of it at some point. (If I'm wrong, sorry.)

I think you make a good point though.  What is the correct smb.conf configuration?  If ldap is a default USE then should SAMBA have those commented out?  I don't expect it will change, but it seems there must be a better way to handle the situation.

[Comment 5 Donny Davies (RETIRED) 2003-06-04 13:37:59 UTC]

LDA is in /etc/make.profile/use.defaults - for whatever reason. who knows.
  but i didnt put it there ;)

i do not use this facility, i prefer to precisely control the build
  options for every package on my system.

if you dont want LDAP support in SAMBA then dont compile it in!
  USE="-* pam mysql" emerge samba   <- then no LDAP
  USE="-ldap xml" emerge samba   <- again, no LDAP

i personally tweak USE_ORDER in make.conf to permanently
 remove it's irritating features.


In SAMBA_3_0 you use:
  passdb backend = smbpasswd guest
  ^^^ in your [global] section which stores the SAM info in the
  /etc/samba/private/smbpasswd file, like the old days.

  For more information, read some documentation on the new
  passdb features of SAMBA 3.