samba - May 2008 - ntlm_auth authentication to two different domains

Hi,

I'm wondering if it is possible to use NTLM authentication in squid for
users in two different Windows domains. So basically, I would need that
ntlm_auth --username=user_in_domain1 --domain=domain1
and
ntlm_auth --username=user_in_domain2 --domain=domain2
work at the same time. Is that possible ? What would one need to
configure to make this work ?

Thanks

On Tue, 2008-05-13 at 21:47 -0400, flubu@fastmail.fm
wrote:
> Hi,
> 
> I'm wondering if it is possible to use NTLM authentication in squid for
> users in two different Windows domains. So basically, I would need that
> ntlm_auth --username=user_in_domain1 --domain=domain1
> and
> ntlm_auth --username=user_in_domain2 --domain=domain2
> work at the same time. Is that possible ? What would one need to
> configure to make this work ?
You need to make the domains trust each other.  The domain is specified
by the client, inside the NTLMSSP blob, not on the command line. 

Andrew Bartlett

-- 
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url :
http://lists.samba.org/archive/samba/attachments/20080517/50ff43b9/attachment.bin