search for: ntlmauth

I have a working setup with samba & squid on one machine. However it seems that ntlm_auth is not doing what I expected. As an unprivilegd user I am able to test succesfull password: ute at alix:~$ ntlm_auth -V Version 3.5.6 ute at alix:~$ ntlm_auth --username=hans --password=keins NT_STATUS_OK: Success (0x0) Surely I know this password. Now the same with diagnostics on: ute at

...uld be great! Thanks! LoadModule auth_ntlm_winbind_module /usr/lib64/httpd/modules/mod_auth_ntlm_winbind.so <Directory "/var/www/html/test"> Options ExecCGI AllowOverride None Order allow,deny Allow from all AuthName "NTLM Authentication" AuthType NTLM Require valid-user NTLMAuth on NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp" NTLMBasicAuthoritative on NegotiateAuth on </Directory> Jonas Turner │ Security Analyst II Ph: 419.254.4890│Fax: 419.252.5557 E-mail: joturner at hcr-manorcare.com<mailto:joturner at hcr-manorcare.com&gt...

...vn SVNPath /mnt/data/rep/svn </Location /svn/repos> I can check out projects from the repository Then I've tested the NTLM authentication with Alias /ntlmtest/ "/mnt/data/docuwiki/" <Directory "/mnt/data/docuwiki"> AuthName "NTLM Authentication" NTLMAuth on NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp" NTLMBasicAuthoritative on AuthType NTLM require valid-user </Directory> This works just fine, the browser prompts for the username and password, and ntlm authenticates against our PDC Now my problem is...

...s in squidguard are src files with Domain/username\n as a line. Are there any utilities to get the list of groups, and the users in each group. Attempting to do wbinfo -r username always fails. wbinfo -g DOMAIN\Groupname DOMAIN\Groupname2 wbinfo -u unable to get domain users wbinfo -t success ntlmauth works both cleartext and encrypted (My browsers are able to authenticate successfully using ntlmauth) I suspect I want some perl utility with LDAP... any hints would be greatly appreciated..as I seem to have hit a roadblock...I would prefer not to have to get to deeply involved in the internals of...

...em with strace but logfile contains nothing useful ( except the broken pipe information :) ). http://ncpnc.obsysa.net/combor/strace.log My share definition looks like below. Alias /auth/ntlm/ "/var/www/auth/ntlm/" <Directory "/var/www/auth/ntlm/"> AuthType NTLM NTLMAuth on NegotiateAuth off NTLMBasicAuth on NTLMAuthHelper "/usr/bin/ntlm_auth -d10 --option='auth methods = winbind' --helper-protocol=squid-2.5-ntlmssp" NTLMBasicAuthoritative off Require valid-user </Directory> Host is correctly joined to AD and users can...

...security = ADS) - The authentication seems to work fine, I can access shares, wbinfo -u/-g returns a valid output, etc. The authentication is enabled in Apache for a specific folder only. <Directory "/var/www/html/confprod/v2" > AuthName "NTLM Authentication thingy" NTLMAuth on NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp --debuglevel=10" NTLMBasicAuthoritative on AuthType NTLM require valid-user </Directory> My problem is that IE gives me an error page when I try to access the pages from that folder. I have enabled...

...rt-test.elided.com DocumentRoot /usr/local/rt3/share/html AddDefaultCharset UTF-8 PerlModule Apache::DBI PerlRequire /usr/local/rt3/bin/webmux.pl <Location /> SetHandler perl-script PerlHandler RT::Mason AuthName "NTLM Authentication test" NTLMAuth on NTLMAuthHelper "/usr/local/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp" NTLMBasicAuthoritative on AuthType NTLM require valid-user </Location> </VirtualHost> With this in place, a logged-in user attempting to connect to that vhost via IE...

...he access denied line in access.log: 192.168.0.53 - - [29/Aug/2006:20:15:57 +0930] "GET /auth-test HTTP/1.1" 401 547 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" Here's the config I'm using in Apache: <Directory /var/www/auth-test> NTLMAuth on NTLMBasicAuthoritative on NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp" AuthType NTLM AuthName "NTLM Authentication Test" require valid-user </Directory> I tried adding --domain=WUM3 to the NTLMAuthHelper line, but that did...

...winbind_module /usr/lib64/httpd/modules/mod_auth_ntlm_winbind.so > <Directory "/var/www/html/test"> > Options ExecCGI > AllowOverride None > Order allow,deny > Allow from all > AuthName "NTLM Authentication" > AuthType NTLM > Require valid-user > NTLMAuth on > NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp" > NTLMBasicAuthoritative on > NegotiateAuth on > </Directory> > > Jonas Turner │ Security Analyst II > Ph: 419.254.4890│Fax: 419.252.5557 > E-mail: joturner at hcr-manorcare.com<...

Hi there, I try to have a XP box using ntlm authentication when accessing a samba domain. In apache I have the following stanza: <Location "/"> AuthName "NTLM Authentication thingy" NTLMAuth on NTLMAuthHelper "/opt/samba/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp" NTLMBasicAuthoritative on AuthType NTLM require valid-user </Location> In IE7 on the client I added the apache site to the list of intranet sites so windows should use ntlm to send its...

...oup so it could access the /var/cache/samba/winbindd_privileged directory as user apache and I have added to httpd.conf the following LoadModule ntlm_winbind_module modules/mod_ntlm_winbind.so and <Directory "/var/www/html/auth"> AuthName "NTLM Authentication test" NTLMAuth on NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp" NTLMBasicAuthoritative on AuthType NTLM require valid-user </Directory> Winbind processes running when trying to connect apache 16343 16335 0 16:50 ? 00:00:00 /usr/bin/ntlm_auth --helper-p...

...eful ( except the broken pipe information :) ). > > http://ncpnc.obsysa.net/combor/strace.log > > My share definition looks like below. > > Alias /auth/ntlm/ "/var/www/auth/ntlm/" > > <Directory "/var/www/auth/ntlm/"> > AuthType NTLM > NTLMAuth on > NegotiateAuth off > NTLMBasicAuth on > NTLMAuthHelper "/usr/bin/ntlm_auth -d10 --option='auth methods = > winbind' --helper-protocol=squid-2.5-ntlmssp" > NTLMBasicAuthoritative off > Require valid-user > > </Directory> > &...

...Log /var/log/httpd/intranet-access.log combined ErrorLog /var/log/httpd/intranet-error.log LogLevel debug RewriteLog "/var/log/httpd/rewrite_log" RewriteLogLevel 2 <Location "/"> AuthName "NTLM Authentication thingy" NTLMAuth on NTLMAuthHelper "/usr/bin/ntlm_auth \ --helper-protocol=squid-2.5-ntlmssp -d10 -l/root" NTLMBasicAuthoritative on AuthType NTLM require valid-user </Location> LogLevel debug RewriteEngine On # Add to virtual host block f...

...ed auth_ntlm_winbind_module for apache 2.2, which worked before with auth_kerb. LoadModule auth_ntlm_winbind_module /usr/lib64/httpd/modules/mod_auth_ntlm_winbind.so <LocationMatch "^/.*$"> AuthName "DOMAIN" AuthType NTLM AuthType Negotiate NTLMAuth on NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp -d10" # NTLMBasicAuthoritative on NegotiateAuth on NegotiateAuthHelper "/usr/bin/ntlm_auth --helper-protocol=gss-spnego -d10" Require valid-user </LocationMatch>...

On Thu, 21 Sep 2017 12:40:57 -0400 lingpanda101 via samba <samba at lists.samba.org> wrote: > > > I'm not understanding the change to 'ntlm auth' parameter. It's says > default is now ntlmv2-only as a value.  So this takes the place of > 'ntlm auth = no'(ie. ntlm auth = ntlmv2-only)? Using the value of > 'yes' is OK(ie. ntlm auth = yes)? 

...42+] invalidGot '377' from squid (length: 1748). [2009/01/13 13:07:09, 1] utils/ntlm_auth.c:manage_squid_ntlmssp_request(692) NTLMSSP query [377] invalidGot '242+' from squid (length: 119). The config part in apache2 looks like this: AuthName "NTLM Authentication thingy" NTLMAuth on NTLMAuthHelper "/usr/bin/ntlm_auth -d10 --helper-protocol=squid-2.5-ntlmssp" NTLMBasicAuthoritative on AuthType NTLM require valid-user I'm using OpenSuse 10.2 x86_64 with the newest updates. apache2-2.2.3-26 samba-3.0.23d-19.14 I guess the problem lies with winbindd_priviledged...

...CHING realm = HACHING.LAN idmap uid = 10000-20000 idmap gid = 10000-20000 security = domain #password server = sun.haching.lan winbind use default domain = yes mod_auth_ntlm_winbind.so configuration AuthName "NTLM Authentication thingy" NTLMAuth on NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp" NegotiateAuth on NegotiateAuthHelper "/usr/bin/ntlm_auth --helper-protocol=gss-spnego" NTLMBasicAuthoritative on AuthType Negotiate AuthType NTLM require valid-user Tests like net rpc testj...

...l_winbind from svn June 5, 2007. samba 3.0.24-2ubuntu1.2 winbind is working, I can log into the machine as an AD domain user. graham@wtldevapp1:~$ sudo ntlm_auth --username=gdunn01 password: NT_STATUS_OK: Success (0x0) from the conf.d/twiki.conf: AuthName "NTLM Authentication" NTLMAuth on NegotiateAuth On NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp -d 400" NegotiateAuthHelper "/usr/bin/ntlm_auth --helper-protocol=gss-spnego" NTLMBasicAuthoritative on AuthType NTLM AuthType Negotiate require valid-user Ho...

...4) Test Plaintext NT only failed! Wrong Password (0xc000006a) [2006/11/28 10:52:09, 1] utils/ntlm_auth_diagnostics.c:diagnose_ntlm_auth(594) Test Plaintext LM only failed! == httpd.conf == <Directory "/tmp/test"> Order allow,deny Allow from all AuthName "Domain Logon" NTLMAuth On NegotiateAuth On NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp -d9" NegotiateAuthHelper "/usr/bin/ntlm_auth --helper-protocol=gss-spnego" NTLMBasicAuthoritative On AuthType NTLM AuthType Negotiate Require valid-user </Directory> == httpd error_...

...t ntlm_auth has access to: # ls -ld /var/cache/samba/winbindd_privileged/ drwxrwx--- 2 root squid 4096 May 21 14:15 /var/cache/samba/winbindd_privileged/ In /etc/httpd/conf/httpd.conf I have: <Directory "/var/www/html/cchem"> AuthName "NTLM Authentication thingy" NTLMAuth on NTLMAuthHelper "/usr/bin/ntlm_auth -d100 --helper-protocol=squid-2.5-ntlmssp" NTLMBasicAuthoritative on AuthType NTLM require valid-user </Directory> I get the following in /var/log/httpd/error_log when I try to access http://www2.crc.dk/cchem from a Windows PC wher...