Netatalk - No encrypted authentication

[tjm]

Hm, I cannot get encrypted authentication into work with netatalk... Some modules seem to be missing in /usr/lib/netatalk/.

The only available ones are uams_gss.so, uams_guest.so, uams_krb4.so (does not work), uams_pam.so, uams_passwd.so.

None of them lead to encrypted authentification. So what do I do wrong?

[gruepig]

It's been a long time since I've used netatalk, but if you are just trying to set up communications between Linux and OS X (no OS 9 or earlier), you might consider using samba instead of netatalk. Both OS X and Linux have good support for samba.

[tjm]

I read about this. But the issue is that I need access over the internet to my server from Mac OS 9.1 up to X 10.4.3 from several machines.

OK, I have FTP running but it is not that comfortable. Netatalk works over TCP, but IMHO Samba does not? Do I think correctly?

[gruepig]

Originally Posted by tjm I read about this. But the issue is that I need access over the internet to my server from Mac OS 9.1 up to X 10.4.3 from several machines.

You can use samba from Mac OS 9.1. It's just awkward (and likely slow). There are a number of samba/SMB clients; I think DAVE may be one of the better ones (which isn't saying much).

I haven't set up netatalk with encrypted passwords, but maybe the info at http://www.anders.com/projects/netatalk/passwords.html is helpful? (I'm guessing you've already looked at that though.)

OK, I have FTP running but it is not that comfortable. Netatalk works over TCP, but IMHO Samba does not? Do I think correctly?

Both netatalk and samba run over TCP/IP. Netatalk and AppleTalk in OS 9 (but not 8?) can run over TCP; older AppleTalk runs over it's own protocol (AppleTalk/DDP). Windows SMB historically ran over NetBEUI and other non-TCP protocols, but Linux samba and modern Windows use TCP.

By the way, FTP is not encrypted. You might consider scp/sftp which is part of ssh and is encrypted. There are a number of GUI sftp clients for OS X (e.g., fugu). I don't know of any sftp clients for Mac classic, but NiftyTelnet SSH supports a (clunky) scp client.

If none of those methods are sufficient, another way to tranfer files might be to set up apache and webdav on your Linux box and upload/download files via web browsers on the macs.

Sorry, I don't think I'm really helping here ....

[AlexMorin]

We are having the same issues over here : http://www.ubuntuforums.org/showthre...ht=uams_dhx.so

Problem seems to be that the uam necessary for encryption (uams_dhx.so) is not included in the Ubuntu package of Netatalk.

If anyone can help us compile it from source, we'd be glad! 'Cause, clear text passwords are not my cup of tea!

[AlexMorin]

Bump... Ideas anyone?

I can't turn on a server with clear-text passwords. Can't we build the missing module from source?

[gruepig]

Crossposting.

I just installed netatalk with the following:

apt-get source netatalk
sudo apt-get build-dep netatalk
sudo apt-get install cracklib2-dev
cd netatalk-2.0.3
DEB_BUILD_OPTIONS=ssl debuild
sudo dpkg -i ../netatalk-*.deb

I think the passwords are being sent encrypted. tcpflow indicates that the password was being sent "AFP3.1.DHCAST128". It looks like directory contents (ls) is sent clear text, but file contents is sent encrypted.

[AlexMorin]

Originally Posted by gruepig Crossposting. I just installed netatalk with the following: apt-get source netatalk

That command returns an error (running edubuntu 5.10) :

sh: dpkg-source: command not found

Am I to understand that you had this error and used

sudo apt-get build-dep netatalk

to get around it?

[AlexMorin]

Originally Posted by AlexMorin Am I to understand that you had this error and used sudo apt-get build-dep netatalk to get around it?

I suppose that was the case.

apt-get source netatalk OK, I guess. dpkg command not found error
sudo apt-get build-dep netatalk OK, aside from lots of non-authenticated packages
sudo apt-get install cracklib2-dev OK, same
cd netatalk-2.0.3 What, where?
DEB_BUILD_OPTIONS=ssl debuild Where do I define this?
sudo dpkg -i ../netatalk-*.deb

The issue I now have, which is a real noob one : where is that directory? In the current directory, there are three files (netatalk_2.0.3-1ubuntu1.diff.gz, netatalk_2.0.3-1-1ubuntu1.dsc and netatalk_2.0.3.orig.tar.gz). No Netatalk directory. I know it's somewhere, but I can't remember where.

And the build options? What are they?

Thanks for your time!

[gruepig]

>apt-get source netatalk OK, I guess. dpkg command not found error

dpkg-source command not found? 'sudo apt-get install dpkg-dev'. (By the way, to find out what package dpkg-source is in, run 'dpkg -S dpkg-source'.)

If the error was that the package was not found, you'll need to add universe to your repositories. (Should have documented this for the sake of completeness.)

Add the following lines to your /etc/apt/sources.list:

deb-src http://us.archive.ubuntu.com/ubuntu breezy universe
deb-src http://security.ubuntu.com/ubuntu breezy-security universe

and then run 'apt-get update' to update the package index files. (Note: this doesn't update packages, just the list of packages which are available.)

> sudo apt-get build-dep netatalk OK, aside from lots of non authenticated packages
> sudo apt-get install cracklib2-dev OK, same

Without knowing what specific errors you were getting, this is probably okay.

> cd netatalk-2.0.3 What, where?

'apt-get source netatalk' just put it in my current directory. I have that directory and the three netatalk files you mentioned.

> DEB_BUILD_OPTIONS=ssl debuild Where do I define this?

You just run it. That sets the $DEB_BUILD_OPTIONS environment variable and runs debuild (which reads the environment variable). I copied the command from netatalk-2.0.3/debian/README.Debian.

>sudo dpkg -i ../netatalk-*.deb

> The issue I now have, which is a real noob one : where is that directory? > In the current directory, there are three files
> (netatalk_2.0.3-1ubuntu1.diff.gz, netatalk_2.0.3-1-1ubuntu1.dsc and
> netatalk_2.0.3.orig.tar.gz). No Netatalk directory. I know it's somewhere, > but I can't remember where.

> And the build options? What are they?

See above.

> Thanks for your time!

Hope it works for you.

BTW, I'm running this on breezy powerpc.