No its a misconfiguration somewhere. Squid works fine i have it all running. Took me some time to understand things but it works fine now. See the list links.. Greetz, Louis> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Rowland Penny via > samba > Verzonden: woensdag 28 december 2016 16:12 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Error with samba update in debian. > > On Wed, 28 Dec 2016 15:40:34 +0100 > "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > > > About the : > > > > > ERROR: Negotiate Authentication validating user. Result: {result=BH, > > > > > notes={message: NT_STATUS_UNSUCCESSFUL * NT_STATUS_UNSUCCESSFUL; }} > > > > > > > > I suspect the pc you trying with is not domain joined? > > > > Or you using user at REALM > > > > Can you add ?-d? to the auth line of squid and try again and post > > that log. > > > > ( -d = enable debugging ) > > > > > > > > Now what i dont know. > > > > A samba DC reported with wbinfo ?u : DOMAIN\user > > Yes, the DC uses the DOMAIN as part of the username and you cannot turn > it off. > > > > > I have in my samba member ( and this is a member only setting ) > > winbind enum users = yes > > You can also use this line on a DC. > > > > > So when i wbinfo ?u i see only the usernames. > > You will also have this line in your domain members smb.conf: > > winbind use default domain = yes > > The default is no (i.e. same as a DC) > > So, if squid insists on just the username without the DOMAIN, it is (in > my opinion) badly broken and they need to fix it. > > Rowland > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba
On Wed, 28 Dec 2016 17:05:39 +0100 "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote:> No its a misconfiguration somewhere. > Squid works fine i have it all running. > Took me some time to understand things but it works fine now. > > See the list links.. > > Greetz, > > LouisOK, I have been looking into this and it seems that squid wants a UPN like 'HTTP/proxy02.example.com'. The only problem is, (in my opinion), that is an SPN, so, I repeat, squid is broken. Rowland
Luis Felipe Dominguez Vega
2016-Dec-28 17:56 UTC
[Samba] Error with samba update in debian.
Squid was working fine, when i update samba, all the authentication crash.... And what you say me about this???: root at proxy:~# ntlm_auth --diagnostics --username=luis.dominguez Password: <correct_password> Wrong Password (0xc000006a) Wrong Password (0xc000006a) Wrong Password (0xc000006a) Wrong Password (0xc000006a) root at proxy:~# ntlm_auth --username=luis.dominguez Password: <correct_password> NT_STATUS_OK: Success (0x0) root at proxy:~# ntlm_auth --diagnostics --username=luis.dominguez Password: <bad_password> Wrong Password (0xc000006a) Wrong Password (0xc000006a) Wrong Password (0xc000006a) Wrong Password (0xc000006a) Wrong Password (0xc000006a) Wrong Password (0xc000006a) Wrong Password (0xc000006a) Wrong Password (0xc000006a) Wrong Password (0xc000006a) Wrong Password (0xc000006a) Wrong Password (0xc000006a) Wrong Password (0xc000006a) Wrong Password (0xc000006a) Wrong Password (0xc000006a) Wrong Password (0xc000006a) Wrong Password (0xc000006a) Wrong Password (0xc000006a) --------------------------------------- Al tanto Ing. Luis Felipe Domínguez Vega Administrador de la Red de Desoft Matanzas GNU/Linux Kernel Developer - rtlwifi kernel module "No es grande aquel que nunca falla, es grande el que nunca se da por vencido… " ----- Original Message ----- From: "Rowland Penny via samba" <samba at lists.samba.org> To: samba at lists.samba.org Sent: Wednesday, December 28, 2016 12:35:38 PM Subject: Re: [Samba] Error with samba update in debian. On Wed, 28 Dec 2016 17:05:39 +0100 "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote:> No its a misconfiguration somewhere. > Squid works fine i have it all running. > Took me some time to understand things but it works fine now. > > See the list links.. > > Greetz, > > LouisOK, I have been looking into this and it seems that squid wants a UPN like 'HTTP/proxy02.example.com'. The only problem is, (in my opinion), that is an SPN, so, I repeat, squid is broken. Rowland -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba