search for: ntlm_auth

Hi i have a problems with winbind, all hours of the days, we have : Mar 23 08:02:45 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 08:02:46 gw (ntlm_auth): [2009/03/23 08:02:46, 0] utils/ntlm_auth.c:get_winbind_netbios_name(166) Mar 23 08:02:46 gw (ntlm_auth): could not obtain winbind netbios name! Mar 23 08:02:46 gw (ntlm_auth): [2009/03/23 08:02:46, 0] utils/ntlm_auth.c:ge...

...ly in debian etch with samba version 3.0.24, and ubuntu Gutsy with samba 3.0.26a. But when I have upgraded those servers to hardy (samba 3.0.28a) and lenny (3.2.3), thn sqwuid auth has stopped working, without any other config change. Squid version I am using is 2.6-STABLE17, and . I am using the ntlm_auth helper that comes with squid. I think maybe the one that comes with samba would work better, but the problem is that it requires winbind, and since I am running sqquid in the same box as the PDC, I don't know if winbind would work. This is the relevant section of my squid.conf file: # ntlm au...

Hi List, I'm running a heavily loaded squid server that uses ntlm_auth to provide NTLM authentication. As load has increased over time, I've found the need to increase the number of ntlm_auth processes available to squid as well as the "winbind max clients" value in the smb.conf file. This has worked well up until now but seems I've hit some sort o...

Hi all, I have just installed and configured a squid setup authenticating against Active Directory using kerberos tickets and have achieved the holy-grail of IT - Single Sign On! The problem is that I have two users for whom is does not work. The ntlm_auth logs show that for users that are properly authenticated against squid we get the following (Usernames/Domains/Hosts have been changed for security reasons): ======================== ntlm-auth[4409](ntlm_auth.c:284): managing request ntlm-auth[4409](ntlm_auth.c:290): ntlm authenticator. Got '...

I'm trying to get mod_auth_ntlm with apache2 to work but it refuses to do so. ntlm_auth does work if I use the commandline argument. The error I got is: [2009/01/13 13:07:09, 5] lib/debug.c:debug_dump_status(391) INFO: Current debug levels: all: True/10 tdb: False/0 printdrivers: False/0 lanman: False/0 smb: False/0 rpc_parse: False/0 rpc_srv: False/0 rpc_cli: False/0 passdb: False/...

That is client setup. We have that under control. Our Linux users use Network Manager to connect and our Windows users use the stuff built into Windows. My problem is server-side. The server is a PPTP VPN (running via pptpd) and I have to add the lines below to make it work. plugin winbind.so ntlm_auth-helper "/usr/bin/ntlm_auth --helper-protocol=ntlm-server-1" Now, that allows ALL domain users to connect. We only want users in the "PPTP" domain group to use the VPN, so we do this instead. plugin winbind.so ntlm_auth-helper "/usr/bin/ntlm_auth --helper-protocol=ntlm-ser...

Hello, I'm trying to authenticate PPP (in fact l2tp...) users with Active Directory (windows server 2003 DCs, mixed-mode domain) using winbind / ntlm_auth. I'm using Samba 3.0.22, PPP 2.4.3, Kerberos 1.3.6, with Trustix 2.2 What works : - krb5kinit (and krb5klist -e) - net ads join - wbinfo -u, wbinfo -g, wbinfo -a user%pwd, wbinfo -p, wbinfo -t and wbinfo -m - getent passwd and getent group - ntlm_auth --username=user --domain=domain.x.y - n...

...nse to the challenge messages that my app has sent, as the app does not have access to the user database, which is only stored in the AD. The app can access the AD via secure LDAP, but that does not seem to help with the NTLM hashes (the app never stores user passwords locally). I thought that the ntlm_auth tool for Samba might be used in this scenario, as it seems to have been developed to do exactly the same for Squid. I played around with it a little bit, but so fare have not managed to get it working, hence my questions to the list: 1. would you recommend just abandoning this path and favour oth...

Hi all, I've a little problem using ntlm_auth with squid. Scenario: Redhat 9, Samba 3 compiled, squid-2.5 compiled. smb.conf: [global] encrypt passwords = Yes winbind separator = \ winbind cache time = 10 template homedir = /home/%D/%U template shell = /bin/bash idmap uid = 10000-20000 idmap gid = 10000-20000 winbind uid = 10000-20000 winbi...

...On Tue, 23 Jan 2024 17:07:35 -0500 > > Mark Foley via samba <samba at lists.samba.org> wrote: > > > > > On Mon Jan 22 11:00:59 2024 Mark Foley via samba > > > <samba at lists.samba.org> wrote: > > > > > > > > I have scripts that runs ntlm_auth. Before upgrading my DC to > > > > 4.18.9 I would get text string output from the ntlm_auth > > > > command. For example: > > > > > > > > STATUS_NO_SUCH_USER > > > > NT_STATUS_WRONG_PASSWORD > > > > STATUS_OK > > > &gt...

Hi there, I'm trying to configure Squid to use a windows domain for authentication, and all goes well until I add the "--require-membership-of" option on ntlm_auth. I need to restrict access based on group membership, however ntlm_auth does not seem to be behaving correctly. I'm using Samba 3.0.6 on Debian and I'm using a Windows 2000 (SP4) Domain Controller. I configured winbind as discussed here: http://www.squid-cache.org/Doc/FAQ/FAQ-23.htm...

On Tue, 23 Jan 2024 17:07:35 -0500 Mark Foley via samba <samba at lists.samba.org> wrote: > On Mon Jan 22 11:00:59 2024 Mark Foley via samba > <samba at lists.samba.org> wrote: > > > > I have scripts that runs ntlm_auth. Before upgrading my DC to > > 4.18.9 I would get text string output from the ntlm_auth command. > > For example: > > > > STATUS_NO_SUCH_USER > > NT_STATUS_WRONG_PASSWORD > > STATUS_OK > > > > My script(s) look for these strings. > > > >...

Hihi So I have a really strange problem. I am running Centos 7 with Samba purely for ntlm_auth against winbind services (squid/radius auth etc). Its been working fine till we found a strange bug with the ntlm_auth executable. If the username has a "w" at the end it throws out a syntax error see below test: # ./ntlm_auth --username=lblaauw username must be specified! Usage: [OPT...

On Mon Jan 22 11:00:59 2024 Mark Foley via samba <samba at lists.samba.org> wrote: > > I have scripts that runs ntlm_auth. Before upgrading my DC to 4.18.9 I would > get text string output from the ntlm_auth command. For example: > > STATUS_NO_SUCH_USER > NT_STATUS_WRONG_PASSWORD > STATUS_OK > > My script(s) look for these strings. > > Now with the new Samba, the first two strings are outpu...

...amba.org> wrote: > > On Tue, 23 Jan 2024 17:07:35 -0500 > Mark Foley via samba <samba at lists.samba.org> wrote: > > > On Mon Jan 22 11:00:59 2024 Mark Foley via samba > > <samba at lists.samba.org> wrote: > > > > > > I have scripts that runs ntlm_auth. Before upgrading my DC to > > > 4.18.9 I would get text string output from the ntlm_auth command. > > > For example: > > > > > > STATUS_NO_SUCH_USER > > > NT_STATUS_WRONG_PASSWORD > > > STATUS_OK > > > > > > Now with the new S...

Hi, I'm using ntlm_auth to authenticate users in freeradius. My samba server is joined to DOMAINA. When I run ntlm_auth --username=domainauser everything works great. When I run ntlm_auth --username=domainbuser it fails because the user does not exist in domaina which the server is joined to. If I run ntlm_auth --usern...

...a world may be able to help better. I admit it's been a few years since I did any Samba! I have joined my two RADIUS servers (FreeRADIUS 2.0.2, Solaris 10 x86, Sun's winbindd 3.0.25a) to our AD domain with the "net join" command. This worked (eventually!). Now when I test "ntlm_auth" I get the following odd goings on: Scenario A: Works Type: ntlm_auth --username=USER --password=PASSWORD --domain=DOMAIN Result: NT_STATUS_OK: Success (0x0) Scenario B: FAILS Type: ntlm_auth --username=USER --domain=DOMAIN password: <PASSWORD> Result: NT_STATUS_WRONG_PASSWORD...

...amba-3.0.23c-2.el5.2.0.2 The machine is a PDC, Windows 2000 users logon, get profiles, etc. I'm trying to set up a folder in apache that uses NTLM authentication using mod_auth_ntlm_winbind. I've followed: http://adldap.sourceforge.net/mod_auth_ntlm_winbind.php winbindd is running, and ntlm_auth seems to work: # ntlm_auth --username=pdc2 password: [2007/05/21 14:33:07, 10] intl/lang_tdb.c:lang_tdb_init(138) lang_tdb_init: /usr/lib64/samba/en_US.UTF-8.msg: No such file or directory NT_STATUS_OK: Success (0x0) I've added apache to the squid group so that ntlm_auth has access to: #...

Hello, I am using ntlm_auth called from FreeRADIUS to authenticate users on a network with their Active Directory credentials. The problem I seem to be having is that ntlm_auth is taking longer than it should and I can't seem to get it to go faster reliably. Some background information: Users are connecting to a wireles...

Hi I use suse 10.0 and have problems to set up ntlm_auth for squid. It uses samba 3.0.20 and squid 2.5.stable10 I have set up winbind and everyhting seems to work. I've changes groupownerchip of /var/lib/samba/winbindd_privileged to squid. squid runs as group squid. Everyhting is working fine for several minutes. After a while it doesn't work a...