samba - Jul 2004 - RES: ntlm_auth help

Isn't possible to test the ntlm_auth with the ntlmssp protocol in a command
line mode, you must use a browser able to handle ntlm because only this sort
of browser send the appropriate ntlm challenges, try IE.

Estevam Henrique

-----Mensagem original-----
De: samba-bounces+ecarvalho=bmf.com.br@lists.samba.org
[mailto:samba-bounces+ecarvalho=bmf.com.br@lists.samba.org] Em nome de
Champaka Guruge
Enviada em: quarta-feira, 7 de julho de 2004 09:25
Para: samba@lists.samba.org
Assunto: [Samba] ntlm_auth help

Hi all

I am going to configure squid proxy server with smb
ntlm_auth.But when i try to test as follows it will
give  a err 

*******
ntlm_auth --helper-protocol=squid-2.5-ntlmssp
username password
NA NT_STATUS_INVALID_PARAMETER
***********
but,
ntlm_auth
--username==squid-helper-protocol=squid-2.5-basic

username password

OK

my smb.conf is

[global]
        workgroup = mydomain
        netbios name = PROXY_LINUX
        security = DOMAIN
        password server = 10.1.1.51
        idmap uid = 10000-20000
        idmap gid = 10000-20000
        winbind use default domain = Yes

Hope your help

thank you
champaka Srinath




		
__________________________________
Do you Yahoo!?
Read only the mail you want - Yahoo! Mail SpamGuard.
http://promotions.yahoo.com/new_mail 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


========================================================= 
Esta mensagem pode conter informacao confidencial e/ou privilegiada. Se voce
nao for o destinatario ou a pessoa autorizada a receber esta mensagem, nao
devera utilizar, copiar, alterar, divulgar a informacao nela contida ou
tomar qualquer acao baseada nessas informacoes. Se voce recebeu esta
mensagem por engano, por favor avise imediatamente o remetente, respondendo
o e-mail e em seguida apague-o. Agradecemos sua cooperacao. 

This message may contain confidential and/or privileged information. If you
are not the addressee or authorized to receive this for the addressee, you
must not use, copy, disclose, change, take any action based on this message
or any information herein. If you have received this message in error,
please advise the sender immediately by reply e-mail and delete this
message. Thank you for your cooperation. 
=========================================================

On Wed, 2004-07-07 at 22:43, Estevam Henrique Carvalho
wrote:
> Isn't possible to test the ntlm_auth with the ntlmssp protocol in a
command
> line mode, you must use a browser able to handle ntlm because only this
sort
> of browser send the appropriate ntlm challenges, try IE.
Actually, it is now possible.  

ntlm_auth --helper-protocol=ntlmssp-client-1  --username=foo
--domain=bar --password=secret

If you type 'YR', it will reply, and from then you can copy & paste
the
output from that program to 

ntlm_auth --helper-protocol=squid-2.5-ntlmssp

(Likewise, copy the replies back).  

This provides a very nice way to test the system, without needing squid
and MSIE.

Andrew Bartlett
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url :
http://lists.samba.org/archive/samba/attachments/20040707/bca31d26/attachment.bin