Installing Netatalk AFP with SSL (encrypted authentication) on Ubuntu Hardy Heron 8.04 LTS Server
on Monday 12th May, 2008 Gabe speculated thusly…Installing Netatalk from the repositories means that when you connect using a Mac client you will be warned that you are going to send your password in the clear. Obviously this isn’t great for security, and being prompted every time you want to connect is annoying. This occurs because Netatalk in the Ubuntu repositories is compiled without SSL support (SSL is what handles the encryption).
The key to getting this to work is to get the Netatalk source code and compile it yourself. Don’t worry, it’s been done hundreds of times before and if you follow this tutorial closely you should be fine.
The commands written always start with a dollar sign ($), you should not type this, it just indicates the commands should be typed at a standard user prompt in the terminal.
First off it’s a good idea to switch to your home directory:
$ cd ~
Make a new directory to hold the hundreds of small Netatalk files:
$ mkdir netatalk
Ensure you have essential development libraries and tools installed:
$ sudo aptitude install libdb4.2-dev libslp-dev autotools-dev devscripts cracklib2-dev dpkg-dev libssl-dev
Change in to the newly created directory:
$ cd netatalk
Install the netatalk source code:
$ sudo apt-get source netatalk
Install all required dependencies for netatalk:
$ sudo apt-get build-dep netatalk
A new directory called netatalk-2.0.3 should have been created, change in to that directory:
$ cd netatalk-2.0.3
Compile Netatalk with the SSL option:
$ DEB_BUILD_OPTIONS=ssl sudo dpkg-buildpackage -us -uc
Install the finished product!:
$ sudo debi
Just wanted to add that if you don’t want the package manager trying to “upgrade” it to the old, non ssl version, you can use wajig to hold the package so it will not get updated.
$ sudo aptitude install wajig
$ wajig hold netatalk
Ocdude, you are quite right, but you don’t even need to install an extra program you can just do:
$ sudo aptitude hold netatalk
I’m following these instructions line for line, but when I run ’sudo debi’ I get:
debi: can’t read netatalk_2.0.3-9_i386.changes!
And I’ve googled, but no luck. Any ideas?
The machine is an amd (not 64) with mythbuntu 8.04 installed.
Thanks in advance
I got the same error as Scott on a Celeron box under Debian 4.
This is very frustrating I got Netatalk to work many time on other boxes.
Hi Scott and 3on
It was a while ago I did this, so I might be wrong. But I *think* I remembered getting this error too. The answer was because I was in the wrong directory. You either need to be in the source directory where it all got compiled, or I think probably the one up - where the .deb files end up.
Get back to me with the results.
Cheers
Gabe