[Samba] mod_ntlm_winbind

Ciro Iriarte
Sun, 11 Jun 2006 03:30:40 -0000

Anybody using mod_ntlm_winbind?. I'm running SLES9 SP3 and i'mt having
problems using it, I did the following:

Compilation:
-----------------
autoconf    <-- works
./configure --with-apxs=$(which
apxs2) --with-apache=$(/usr/share/apache2/find_mpm 2>/dev/null)    <--
works
make    <-- dies (there goes the rpm for my repo) with:

---error---
mod_ntlm_winbind.c:402: warning: no previous prototype for `get_auth_header'
mod_ntlm_winbind.c: In function `winbind_authenticate_plaintext':
mod_ntlm_winbind.c:583: warning: passing arg 3 of `apr_file_write' from
incompatible pointer type
mod_ntlm_winbind.c: In function `process_msg':
mod_ntlm_winbind.c:735: warning: passing arg 3 of `apr_file_write' from
incompatible pointer type
/usr/share/apache2/build/libtool --silent --mode=link gcc -o
mod_auth_ntlm_winbind.so -Wall -DAPACHE2  -Wc,-Wall -rpath
/usr/lib64/apache2 -module -avoid-version    mod_ntlm_winbind.lo
/usr/lib64/gcc-lib/x86_64-suse-linux/3.3.3/../../../../x86_64-suse-linux/bin/ld:
unrecognized option '-Wall'
/usr/lib64/gcc-lib/x86_64-suse-linux/3.3.3/../../../../x86_64-suse-linux/bin/ld:
use the --help option for usage information
collect2: ld returned 1 exit status
apxs:Error: Command failed with rc=65536
.
make: *** [.libs/mod_auth_ntlm_winbind.so] Error 1
---error---

So i went the apx2 route:

apxs -DAPACHE2 -c -i mod_ntlm_winbind.c <-- works

Configuration
--------------------

--.htaccess--
AuthName "NTLM Authentication thingy"
NTLMBasicAuth on
NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp -d
400"
NTLMBasicAuthoritative on
AuthType NTLM
require valid-user

--perms for apache2 user--
setfacl -m u:wwwrun:rx /var/lib/samba/winbindd_privileged

Testing
----------

Well, accesing the page asks for user/password, if i give "usrjoe" +
"mypasswd" it gives me an 401 error code. If i enter
"DOMAIN\usrjose" +
"mypassword", I get an 500 error code and find this in error_log:

[Wed Jun 07 04:26:09 2006] [error] [client 10.129.7.146] (2)No such file or
directory: couldn't spawn child ntlm helper process: ntlm_auth, referer:
http://10.129.4.50/nagios/side.html

I hope you understand my messed explanation, and help me if you have any
idea about my possible mistakes, i tried many configuration variations, but
these is the simplest one

Ciro Iriarte