similar to: Backup Domain Controllers

Hi, We are having problems setting up a squid cache server to use NTLMv2 authentication to authenticate users against AD. We have narrowed the problems down to being a problem between samba and squid when using NTLMv2. It constantly moans about the password being wrong when using squid, but doing a direct samba auth works fine. We have (believedly) narrowed it down to this: the domain requires

Hi, I am running squid and samba to auth users against a 2003 domain. My squid setup is something like this: auth_param ntlm program /usr/local/libexec/squid/ntlm_auth --helper-protocol=squid-2.5-ntlmssp auth_param ntlm max_challenge_reuses 0 auth_param ntlm max_challenge_lifetime 2 minutes auth_param ntlm children 2 auth_param basic program /usr/local/libexec/squid/ntlm_auth

Hi, We are running Squid version: 2.5.STABLE13 and Samba version: Version 3.0.21b We have it setup to use NTLM to check that the user belongs to a group within the domain. The need has arrisen to be able to support multiple groups. Is this possible? Our squid.conf section: auth_param ntlm program /ntlm_auth.sh ntlmssp auth_param ntlm max_challenge_reuses 0 auth_param ntlm

Hi, I have encountered a problem and I don't know how or if I can work around the problem. I setup squid to use NTLM to auth against a 2003 machine. On windows 2003 there is a security option called: "Network Security: LAN Manager authentication level properties", now the default option for this setting is: "Send NTLM response only". If I use the defaults, I can connect

Hi, I am using a patch that Jerry wrote that will auto discover any secondary servers on your network and if the one its joined to dies, it will join another one. That's fine, I can join and everything works fine, until I unplug the server im joined to. It takes a few minutes to kill over, and once its detected that its dead, it swaps over and I get this if I then try wbinfo -a

Probably is a stupid question, but... I need to implement some 'NTLM auth' (in squid and MSCHAPv2/PEAP on freeradius). It is better to install squid/freeradius in the same host of a DC, or don't bother at all so they can be installed also on a DM? Thanks. -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia''

Would squid and freeradius support LDAP authentication with AD ?   I don't know if you are using NTLM or NTLMv2. On 09/08/18 06:54, Harry Jede via samba wrote: > Hi Marco, > >> Probably is a stupid question, but... >> >> I need to implement some 'NTLM auth' (in squid and MSCHAPv2/PEAP on >> freeradius). >> >> It is better to install

On Wed, Apr 19, 2017 at 1:08 PM, Jeremy Allison <jra at samba.org> wrote: > > > Any insight, feedback into this issue would be much appreciated. > > The squid program does this. Maybe look into the code they > use for their integration ? > > http://wiki.squid-cache.org/ConfigExamples/Authenticate/Ntlm Jeremy, thanks! That's exactly what I was looking at. So

hello spec''ers, i''m in the hunt for guides on testing controllers with rspec, would you guys recommend any? thanks Oliver -- Oliver Azevedo Barnes oli.azevedo.barnes at gmail.com +55 11 9768 0193 http://www.linkedin.com/in/oliverbarnes http://workingwithrails.com/person/4704-oliver-barnes

Hello I'm having some dificulties joining my Samba 3.0alpha (and 2.2.7a) machine to my NT4 domain. Let me tell you what I'm attempting to accomplish. I want to setup the Samba system to authenticate to my NT domain so that I can use NTLM Proxy authentication with SQUID. Through reading the docs, I'm under the impression that in order to allow thre SQUID/Samba setup to auth on

Hello: As many of you already probably know, the neon library is the workhorse for davfs support. However, right now, the current version of libneon has very limited support for NTLM, particularly NTLMv2, both on the challenge/authentication side as well as handling NTLMv2 Session Security. There is a patch somewhere to add NTLMv2 authentication support natively but there is zero support for

Here is the problem: I'm setting up a new squid proxy server with authentication via Samba and NTLM because the old one died suddenly. The new one is up and running and i have it working; mostly. The kicker is the 2 employees testing Vista (myself and my supervisor) could not authenticate against the server. I say could because through a variety of testing and some lucky reading I found the

Hello, Our company is trying to implement central Windows Domain at HQ and replicated across all its regional offices. The implementation will have a PDC/LDAP-master on HQ and BDC/LDAP-slave on each regional office. In the hopes of saving bandwidth we are trying to avoid the use of WINS between WAN links. Is there any way of not using WINS and still have the clients find the PDC (for updating

On Fri, 2017-04-21 at 14:12 -0700, Jeremy Allison via samba wrote: > On Wed, Apr 19, 2017 at 03:47:05PM -0400, pisymbol . wrote: > > On Wed, Apr 19, 2017 at 1:08 PM, Jeremy Allison <jra at samba.org> > > wrote: > > > > > > > Any insight, feedback into this issue would be much > > > > appreciated. > > > > > > The squid

Hello my goal is to write an authentication module for the Symfony php framework, which would provide SSO capabilities to browsers that are logged in an MS AD domain and support the NTLMv2 protocol. Ideally this module would run on linux servers, and be portable, i.e. require as few non-php tools and network/firewall settings as possible (that's why I eschewed the existing Apache modules

Hi, I have been having issues with NTLMv2 on newly provisioned domains, using Samba 4.1 from backports on Debian Wheezy. Everything seems to be working fine, except for NTLMv2 authentication with Squid and "ntlm_auth" on newer Windows versions. If I set "Lmcompatibility" down on the Windows PCs, then authentication works, but that is temporary workaround at best. I have

Hello, i set up a squid proxy that should authenticate users against a samba PDC using winbind. It works fine as long i allow ntlmv1: on the PDC: ntlm auth = yes lanman auth = no client ntlmv2 auth = yes If i restrict the domains authentication method to ntlmv2 - that's what i want - with these settings: ntlm auth = no lanman auth = no client

Hi all, if a device doesn''t support power management (pm_cap == 0) but it is acpi_pci_power_manageable() because there is a _PS0 method declared for it and _EJ0 is also declared for the slot then nobody is going to set current_state = PCI_D0 for this device. This is what I think it is happening: pci_enable_device | __pci_enable_device_flags /* here we do not set current_state

Hello everyone, Just made a brand new installation of the Samba 4.10 for FreeBSD (got it from FreeNAS project) and it worked very well but I am facing some issues while working with it + Squid 4.6 Here is the thing. I could Join the machine to my Domain with absolutely no problems. I also created the Kerberos keytab, etc. For some reason, the Squid Helpers are showing an error message, like

Jeremy, Thanks for this feedback. I will include this info as soon as I get a moment. Good work. - John T. --- John H Terpstra Samba-Team email: jht@samba.org > -------- Original Message -------- > Subject: TOSHARG: Samba ADS domain membership notes > From: "Jeremy Naylor" <jnaylor@gmail.com> > Date: Wed, October 13, 2004 5:27 am > To: jht@samba.org > > Hi