similar to: NTLM authentication with squid using smbpasswd/tdbsam?

Hi. Samba-4.0.7 FreeBSD 10.0-CURRENT Besides serving files I'm using Samba to authenticate users in the Windows AD with squid. After having issues with samba 3.6.16 I decided to see if samba4 will fit me more. I was surprised, but I found that Samba 4 is fully functional in my environment and is nearly production-ready. After that I tried to setup squid to use samba for NTLM authentication.

Hi. I need to use the ntlm_auth module to auth. users so a group can use Internet and other not, using squid. The users that belong to "Internet" group may use Internet. I've being looking for info. about this but there is no much info. in google. Until now this is the only info. that I had found: for squid.conf: auth_param ntlm program /usr/bin/ntlm_auth

Hi, We are having problems setting up a squid cache server to use NTLMv2 authentication to authenticate users against AD. We have narrowed the problems down to being a problem between samba and squid when using NTLMv2. It constantly moans about the password being wrong when using squid, but doing a direct samba auth works fine. We have (believedly) narrowed it down to this: the domain requires

Currently (samba 4 NT-like domains) i use extensively NTLM auth in freeradius and more mildly in squid, respectively with: Freeradius (mschap module): ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --domain=SANVITO --username=%{mschap:User-Name:-None} --challenge=%{mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00}" squid3: auth_param ntlm program /usr/bin/ntlm_auth

I submited this to the Squid list, but I got no response which I assume means that no one has any suggestions. Can anyone give me a clue as to what I have configured incorrectly. Thanks. -------- Original Message -------- Subject: [squid-users] NTLM Authentication Problem Date: Tue, 28 Oct 2003 11:34:29 -0500 From: Jim Richey <jrichey@highmark.com> To: squid-users@squid-cache.org

Hello, I'm having a little problem after logging into domain via samba, after a few minutes the squid no longer authenticates the users through single sign on and keeps asking for authentication in the browser without stopping. below is my settings and error logs. smb.conf [global]workgroup = SALEnetbios name = utmadmserver string = PROXY SERVERload printers = nolog file =

Hi I'm using Samba/Winbind(ntlm_auth) to handle NTLM requests from a Squid proxy. Everything works fine with local PDC mode and also in domain member mode. There is only one thing which isn't very nice for end-users. If you try to surf over the authenticated proxy with a Windows client which is not member of the domain, the browser (problem only occurs with IE) will use hostname as

Hi Guys! Probably this is not the best place to ask, I'll try anyway... =) I've been trying to configure a Samba PDC and a Squid Porxy server with NTLM auth on the same machine but NTML_AUTH keeps complaining about: NT_STATUS_INVALID_HANDLE.... I have others machines running Squid and Authenticating against a Samba Server but on different machines, this is the first time a try both on

Hi all, I have just installed and configured a squid setup authenticating against Active Directory using kerberos tickets and have achieved the holy-grail of IT - Single Sign On! The problem is that I have two users for whom is does not work. The ntlm_auth logs show that for users that are properly authenticated against squid we get the following (Usernames/Domains/Hosts have been changed for

Hi all; We have Squid 2.5.STABLE7running with 30 ntlm_auth helpers Version 3.0.10-1.fc3. The problem is that on the squid?s cachemgr.cgi->NTLM User Authenticator Stats is possible to verify that the ntlm_auth processes are slowly having the flag R (Reserved or Deferred) set and never being used again (the number of requests stops). This problem goes until there is no more ntlm_auth

Is it possible that no one on this list is authenticating Outlook with Dovecot and NTLM? --Mark -----Original Message----- Date: Fri, 08 Feb 2019 00:51:01 -0500 To: dovecot at dovecot.org Subject: Re: Need to authenticate Outlook and NTLM From: Mark Foley via dovecot <dovecot at dovecot.org> More on this ... I short-sheeted ntlm_auth to see what was being passed to it. It is getting as

On 19.2.2019 4.48, Mark Foley via dovecot wrote: > On Mon, 18 Feb 2019 10:17:16 -0000 Stuart Henderson wrote: >> On 2019-02-13, Mark Foley via dovecot <dovecot at dovecot.org> wrote: >>> Is it possible that no one on this list is authenticating Outlook with Dovecot and NTLM? >> Yes, it's possible, the outdated instructions you found on the wiki >> suggests

Hi! I have a problem with the ntlm_auth helper (samba-3.0.2) under squid. I got the following from the cache.log: [2003/12/18 15:36:48, 10] utils/ntlm_auth.c:manage_squid_request(1114) Got 'YR' from squid (length: 2). [2003/12/18 15:36:48, 10] utils/ntlm_auth.c:manage_squid_ntlmssp_request(362) got NTLMSSP packet: [2003/12/18 15:36:48, 10]

Hi all, I've a little problem using ntlm_auth with squid. Scenario: Redhat 9, Samba 3 compiled, squid-2.5 compiled. smb.conf: [global] encrypt passwords = Yes winbind separator = \ winbind cache time = 10 template homedir = /home/%D/%U template shell = /bin/bash idmap uid = 10000-20000 idmap gid = 10000-20000 winbind uid = 10000-20000 winbind gid = 10000-20000 winbind enum users = yes

Hi, I am running squid and samba to auth users against a 2003 domain. My squid setup is something like this: auth_param ntlm program /usr/local/libexec/squid/ntlm_auth --helper-protocol=squid-2.5-ntlmssp auth_param ntlm max_challenge_reuses 0 auth_param ntlm max_challenge_lifetime 2 minutes auth_param ntlm children 2 auth_param basic program /usr/local/libexec/squid/ntlm_auth

You should use the ntlm_auth module provided by samba. -----Mensagem original----- De: samba-bounces+ecarvalho=bmf.com.br@lists.samba.org [mailto:samba-bounces+ecarvalho=bmf.com.br@lists.samba.org] Em nome de Riccardo Baldanzi Enviada em: quinta-feira, 22 de abril de 2004 16:51 Para: samba@lists.samba.org Assunto: [Samba] Problems with ntlm_auth --helper-protocol=squid-2.5-ntlmssp Hi Guys,

Morning all, Im trying to resolve a problem with the way a new squid server im building handles NTLM authentication for Windows clients that arent part of the default domain. I have two groups of PCs. The first group of PC's are in the same domain as my squid server (which obviously has a working samba running on it as well). This first group of PC's are using NTLM authentication in

Hello my goal is to write an authentication module for the Symfony php framework, which would provide SSO capabilities to browsers that are logged in an MS AD domain and support the NTLMv2 protocol. Ideally this module would run on linux servers, and be portable, i.e. require as few non-php tools and network/firewall settings as possible (that's why I eschewed the existing Apache modules

Authenticating Server: 2003 with Active Directory Enabled Squid Server: FreeBSD 5.1 Samba: 3.0.7,1 Other package info in package list at bottom. The DNS server is on the 2003 Server with the proper kerberos and ldap entries in the DNS server. (Passes Active Directory DNS utility tests) Responses are sent in LM, NTLM, &NTLM2 when negotiated. Signing requirements are not configured. (Choices:

Hai Amos, Thank you for your very clear responce.. few small questions.. Is there a way to setup the proxy for the following. 1) use negotiate kerberos for auth, ( which is working already for all domain joined machines ) 2) use a fall back that works, for now basic ldap works for non windows machines, and domain joined machines. 3) use any other fallback way for authentication users on windows