No Samba package on Pfsense?

alivdel

PfSense is a firewall distribution and not a general purpose server system. That's why samba is left out of the available packages on purpose.

thanks for reply, that means i can install it only manually from ssh?
and there is no web_gui access on samba anymore?

kpa

No, the package is not available in the package repository. You can try to use the official FreeBSD packages for installing samba. You're on your own though so be warned.

https://doc.pfsense.org/index.php/Installing_FreeBSD_Packages

alivdel

@kpa:

No, the package is not available in the package repository. You can try to use the official FreeBSD packages for installing samba. You're on your own though so be warned.

https://doc.pfsense.org/index.php/Installing_FreeBSD_Packages

thanks again for quick reply. can you please tell me which risks can be there if i use samba on pfsense. i'm new in this fiels.

Gertjan

@alivdel:

can you please tell me which risks can be there if i use samba on pfsense.

The risk, mostly, is this:
@alivdel:

i'm new in this fiels.

Other, like we, the rest of the world, don't know how you setup things, so impossible to evaluate a or any risk.
As a rule of thumb, no "do-something-server" on a firewall. Never. Period. In that case a "zero risk" is possible.

This doesn't mean it isn't possible of course.

SammyWoo

Let the Firewall be the Firewall dude, don't throw other stuff at it, more stuff = more points of failure. If u just want to play around, fine.

alivdel

@SammyWoo:

Let the Firewall be the Firewall dude, don't throw other stuff at it, more stuff = more points of failure. If u just want to play around, fine.

thanks for the advise, yes i wanted to check it only for a Special test.

alivdel

@alivdel:

@kpa:

No, the package is not available in the package repository. You can try to use the official FreeBSD packages for installing samba. You're on your own though so be warned.

https://doc.pfsense.org/index.php/Installing_FreeBSD_Packages

thanks again for quick reply. can you please tell me which risks can be there if i use samba on pfsense. i'm new in this fiels.

hi , i have installed samba4 and all its dependencies. now im getting the following error with "testparm":
"/usr/local/lib/samba4/libsmbconf.so.0: Undefined Symbol "yp_match"
can you please tell me what can be the Problem?

revengineer

@alivdel:

hi , i have installed samba4 and all its dependencies. now im getting the following error with "testparm":
"/usr/local/lib/samba4/libsmbconf.so.0: Undefined Symbol "yp_match"
can you please tell me what can be the Problem?

Try this: http://lmgtfy.com/?q=%2Fusr%2Flocal%2Flib%2Fsamba4%2Flibsmbconf.so.0%3A+Undefined+Symbol+%22yp_match

alivdel

@revengineer:

@alivdel:

hi , i have installed samba4 and all its dependencies. now im getting the following error with "testparm":
"/usr/local/lib/samba4/libsmbconf.so.0: Undefined Symbol "yp_match"
can you please tell me what can be the Problem?

Try this: http://lmgtfy.com/?q=%2Fusr%2Flocal%2Flib%2Fsamba4%2Flibsmbconf.so.0%3A+Undefined+Symbol+%22yp_match

you think i did not Google it before i ask it in Forum. sure i did it but could not find a solution.

johnpoz

I don't think your going to find much support here for such an endeavor to honest. Its come up every now and then pretty much since pfsense has been around. And it is just not something that should be done.

If you want a nas, your better off running pfsense as a VM and then running whatever VM you want on that hardware for your other services. Implementing such services into the actual os that is running your firewall is not a good idea.

If you need to move files on and off pfsense you can use scp, or there is the gui if need to move a file here or there, etc.

kpa

The base system in pfSense is built without NIS/YP but the default configuration of stock FreeBSD includes it. This means all binaries built on standard FreeBSD will expect to find those NIS/YP symbols in libc. The pfSense project is not going to help here because you're trying something that is completely unsupported. If you still feel like trying you can create your own custom FreeBSD system that is built without NIS/YP and build your own samba packages for your pfSense system. As already noted many times, you're on your own if you take this route.

alivdel

@kpa:

The base system in pfSense is built without NIS/YP but the default configuration of stock FreeBSD includes it. This means all binaries built on standard FreeBSD will expect to find those NIS/YP symbols in libc. The pfSense project is not going to help here because you're trying something that is completely unsupported. If you still feel like trying you can create your own custom FreeBSD system that is built without NIS/YP and build your own samba packages for your pfSense system. As already noted many times, you're on your own if you take this route.

thanks for your reply, i was busy last few days with sth else.
as all of you guys already said, it's not a good idea to use Samba on Firewall and i personally use SFTP. but for some reason i have to test Samba on it.
if pfSense is built without NIS/YP, that means no one has used or at least tried Samba on pfSense? as i know there was a Samba package on pfSense
earlier and then it was removed. how it could be installed and used without NIS/YP?

johnpoz

" for some reason i have to test Samba on it."

Per who? Who told you - tell them to F off.. It's not a supported feature ;)

If its that inner voice telling you need to do it. Bang your head on the wall and say samba on a firewall = BAD IDEA, BAD IDEA, BAD IDEA!! Do that until the voice stops.

alivdel

@johnpoz:

" for some reason i have to test Samba on it."

Per who? Who told you - tell them to F off.. It's not a supported feature ;)

If its that inner voice telling you need to do it. Bang your head on the wall and say samba on a firewall = BAD IDEA, BAD IDEA, BAD IDEA!! Do that until the voice stops.

that was funny :)) but do you have a reall answer to my last question?

"if pfSense is built without NIS/YP, that means no one has used or at least tried Samba on pfSense? as i know there was a Samba package on pfSense
earlier and then it was removed. how it could be installed and used without NIS/YP?"

kpa

I'm guessing at some point the base system was built with YP/NIS but it was removed because any features that are not on the list of supported features should be removed for tightening down potential attack surfaces.´

YP/NIS is a well known security nightmare.

ScottyDM

Forget pfSense and use FreeNAS instead. It too is built on FreeBSD. However FreeNAS needs RAM–8 GB minimum.