[Samba] mod_ntlm_winbind

Aaron Browne
Sun, 11 Jun 2006 07:59:24 -0000

On Wed, 2006-06-07 at 05:42 -0400, Ciro Iriarte wrote:
> Anybody using mod_ntlm_winbind?. I'm running SLES9 SP3 and i'mt
having
> problems using it, I did the following:

Yes. I am running it on Solaris 9 and 10.

>
> Compilation:
> -----------------
>
> So i went the apx2 route:
>
> apxs -DAPACHE2 -c -i mod_ntlm_winbind.c <-- works

This is the same way I built the module.

>
> Configuration
> --------------------
>
> --.htaccess--
> AuthName "NTLM Authentication thingy"
> NTLMBasicAuth on
> NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
-d
> 400"
> NTLMBasicAuthoritative on
> AuthType NTLM
> require valid-user

I added a Directory entry into my Apache conf file. The settings we have
are the same except I did not use "-d 400".

Check that /usr/bin/ntlm_auth exists.

>
> --perms for apache2 user--
> setfacl -m u:wwwrun:rx /var/lib/samba/winbindd_privileged
>
> Testing
> ----------
>
> Well, accesing the page asks for user/password, if i give
"usrjoe" +
> "mypasswd" it gives me an 401 error code. If i enter
"DOMAIN\usrjose" +
> "mypassword", I get an 500 error code and find this in error_log:

You should not have to provide DOMAIN\<username> as Samba handles the
domain settings etc.

>
> [Wed Jun 07 04:26:09 2006] [error] [client 10.129.7.146] (2)No such file or
> directory: couldn't spawn child ntlm helper process: ntlm_auth,
referer:
> http://10.129.4.50/nagios/side.html

Seems to suggest a missing ntlm_auth binary file? As above, check
that /usr/bin/ntlm_auth exists.

>
> I hope you understand my messed explanation, and help me if you have any
> idea about my possible mistakes, i tried many configuration variations, but
> these is the simplest one

Also, aside from all of this, have you joined the domain using Samba and
started nmbd and winbindd etc? Just things to check.

>
> Ciro Iriarte
>
>
>