samba - Jun 2006 - mod_ntlm_winbind

Anybody using mod_ntlm_winbind?. I'm running SLES9 SP3 and i'mt having 
problems using it, I did the following:

Compilation:
-----------------
autoconf    <-- works
./configure --with-apxs=$(which 
apxs2) --with-apache=$(/usr/share/apache2/find_mpm 2>/dev/null)    <--
works
make    <-- dies (there goes the rpm for my repo) with:

---error---
mod_ntlm_winbind.c:402: warning: no previous prototype for `get_auth_header'
mod_ntlm_winbind.c: In function `winbind_authenticate_plaintext':
mod_ntlm_winbind.c:583: warning: passing arg 3 of `apr_file_write' from 
incompatible pointer type
mod_ntlm_winbind.c: In function `process_msg':
mod_ntlm_winbind.c:735: warning: passing arg 3 of `apr_file_write' from 
incompatible pointer type
/usr/share/apache2/build/libtool --silent --mode=link gcc -o 
mod_auth_ntlm_winbind.so -Wall -DAPACHE2  -Wc,-Wall -rpath 
/usr/lib64/apache2 -module -avoid-version    mod_ntlm_winbind.lo
/usr/lib64/gcc-lib/x86_64-suse-linux/3.3.3/../../../../x86_64-suse-linux/bin/ld:
unrecognized option '-Wall'
/usr/lib64/gcc-lib/x86_64-suse-linux/3.3.3/../../../../x86_64-suse-linux/bin/ld:
use the --help option for usage information
collect2: ld returned 1 exit status
apxs:Error: Command failed with rc=65536
.
make: *** [.libs/mod_auth_ntlm_winbind.so] Error 1
---error---

So i went the apx2 route:

apxs -DAPACHE2 -c -i mod_ntlm_winbind.c <-- works

Configuration
--------------------

--.htaccess--
AuthName "NTLM Authentication thingy"
NTLMBasicAuth on
NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp -d 
400"
NTLMBasicAuthoritative on
AuthType NTLM
require valid-user

--perms for apache2 user--
setfacl -m u:wwwrun:rx /var/lib/samba/winbindd_privileged

Testing
----------

Well, accesing the page asks for user/password, if i give "usrjoe" + 
"mypasswd" it gives me an 401 error code. If i enter
"DOMAIN\usrjose" +
"mypassword", I get an 500 error code and find this in error_log:

[Wed Jun 07 04:26:09 2006] [error] [client 10.129.7.146] (2)No such file or 
directory: couldn't spawn child ntlm helper process: ntlm_auth, referer: 
http://10.129.4.50/nagios/side.html

I hope you understand my messed explanation, and help me if you have any 
idea about my possible mistakes, i tried many configuration variations, but 
these is the simplest one

Ciro Iriarte

On Wed, 2006-06-07 at 05:42 -0400, Ciro Iriarte wrote:
> Anybody using mod_ntlm_winbind?. I'm running SLES9 SP3 and i'mt
having
> problems using it, I did the following:
Yes. I am running it on Solaris 9 and 10.
> 
> Compilation:
> -----------------
> 
> So i went the apx2 route:
> 
> apxs -DAPACHE2 -c -i mod_ntlm_winbind.c <-- works
This is the same way I built the module.
> 
> Configuration
> --------------------
> 
> --.htaccess--
> AuthName "NTLM Authentication thingy"
> NTLMBasicAuth on
> NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
-d
> 400"
> NTLMBasicAuthoritative on
> AuthType NTLM
> require valid-user
I added a Directory entry into my Apache conf file. The settings we have
are the same except I did not use "-d 400".

Check that /usr/bin/ntlm_auth exists.
> 
> --perms for apache2 user--
> setfacl -m u:wwwrun:rx /var/lib/samba/winbindd_privileged
> 
> Testing
> ----------
> 
> Well, accesing the page asks for user/password, if i give
"usrjoe" +
> "mypasswd" it gives me an 401 error code. If i enter
"DOMAIN\usrjose" +
> "mypassword", I get an 500 error code and find this in error_log:
You should not have to provide DOMAIN\<username> as Samba handles the
domain settings etc.
> 
> [Wed Jun 07 04:26:09 2006] [error] [client 10.129.7.146] (2)No such file or
> directory: couldn't spawn child ntlm helper process: ntlm_auth,
referer:
> http://10.129.4.50/nagios/side.html
Seems to suggest a missing ntlm_auth binary file? As above, check
that /usr/bin/ntlm_auth exists.
> 
> I hope you understand my messed explanation, and help me if you have any 
> idea about my possible mistakes, i tried many configuration variations, but
> these is the simplest one
Also, aside from all of this, have you joined the domain using Samba and
started nmbd and winbindd etc? Just things to check.
> 
> Ciro Iriarte 
> 
> 
>