similar to: Problems with ntlm_auth --helper-protocol=squid-2.5-ntlmssp

You should use the ntlm_auth module provided by samba. -----Mensagem original----- De: samba-bounces+ecarvalho=bmf.com.br@lists.samba.org [mailto:samba-bounces+ecarvalho=bmf.com.br@lists.samba.org] Em nome de Riccardo Baldanzi Enviada em: quinta-feira, 22 de abril de 2004 16:51 Para: samba@lists.samba.org Assunto: [Samba] Problems with ntlm_auth --helper-protocol=squid-2.5-ntlmssp Hi Guys,

What do you mean with "... ntlm_auth --helper-protocol=squid-2.5-ntlmssp does respond only BH..." ? Is it happing in a command line test ? Remember that this helper wait for a NTLM "hash" not a clear user and password, as basic helper does. The best way of testing is to put in use, inside the squid.conf. I've be using it for some months without problem. -----Mensagem

Hi! I have a problem with the ntlm_auth helper (samba-3.0.2) under squid. I got the following from the cache.log: [2003/12/18 15:36:48, 10] utils/ntlm_auth.c:manage_squid_request(1114) Got 'YR' from squid (length: 2). [2003/12/18 15:36:48, 10] utils/ntlm_auth.c:manage_squid_ntlmssp_request(362) got NTLMSSP packet: [2003/12/18 15:36:48, 10]

Hello my goal is to write an authentication module for the Symfony php framework, which would provide SSO capabilities to browsers that are logged in an MS AD domain and support the NTLMv2 protocol. Ideally this module would run on linux servers, and be portable, i.e. require as few non-php tools and network/firewall settings as possible (that's why I eschewed the existing Apache modules

Hi all, I've a little problem using ntlm_auth with squid. Scenario: Redhat 9, Samba 3 compiled, squid-2.5 compiled. smb.conf: [global] encrypt passwords = Yes winbind separator = \ winbind cache time = 10 template homedir = /home/%D/%U template shell = /bin/bash idmap uid = 10000-20000 idmap gid = 10000-20000 winbind uid = 10000-20000 winbind gid = 10000-20000 winbind enum users = yes

Hi all, I'm having trouble getting ntlm_auth working with the "--require-membership-of=" option. I did rebuild the Samba RPM so that it had the --enable-auth="ntlm,basic" and --enable-external-acl-helpers="wbinfo_group" settings. The command line test for the squid-2.5-basic protocol returns an "OK". The one using the squid-2.5-ntlmssp protocol

Hello, I'm having a little problem after logging into domain via samba, after a few minutes the squid no longer authenticates the users through single sign on and keeps asking for authentication in the browser without stopping. below is my settings and error logs. smb.conf [global]workgroup = SALEnetbios name = utmadmserver string = PROXY SERVERload printers = nolog file =

Hi Guys, i've installed a Fedora Core 1 with samba 3 and squid 2.5 stable 3 (all with redhat rpms). Now i've joined our internal active directory and i see that "wbinfo -u", "wbinfo -g" and "wbinfo -a user%password" works great. ntlm_auth --helper-protocol=squid-2.5-basic works ok too but.. ntlm_auth --helper-protocol=squid-2.5-ntlmssp does respond only

Hi all, please cc me, i'm not on the list. Second: All google findable information about problems setting up ntlm_auth for squid with winbind are read and checked more than three times. After breaking a running setup under debian squeeze, i go back to debian lenny to circumvent the actual MIT kerberos problem[1]. [1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=566977#57 Now i

Hi, We are having problems setting up a squid cache server to use NTLMv2 authentication to authenticate users against AD. We have narrowed the problems down to being a problem between samba and squid when using NTLMv2. It constantly moans about the password being wrong when using squid, but doing a direct samba auth works fine. We have (believedly) narrowed it down to this: the domain requires

Is /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp supposed to be working at this stage of samba 3? With RH EL3 beta (taroon) which comes with samba-3.0.0-3rc1.3E packages (and squid-2.5.STABLE3-2.3E packages), the /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic helper works great but /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp always fails (NTLMSSP

This turned into the mother of all system integration exercises and I **almost** have it working. I am trying to set up proxy authorization using: RedHat Linux 9.0, MIT Kerberos 1.4 built from source, Samba 3.0.13 built from source, Squid 2.5.STABLE7 built from source SmartFilter 4.01. Active Directory with Windows 2003 Why not use RPMs? Well - ADS support for Windows 2003 needs

Hi all, I have just installed and configured a squid setup authenticating against Active Directory using kerberos tickets and have achieved the holy-grail of IT - Single Sign On! The problem is that I have two users for whom is does not work. The ntlm_auth logs show that for users that are properly authenticated against squid we get the following (Usernames/Domains/Hosts have been changed for

Hi list, Can somebody please enlighten me: I have Samba PDC running and want to add Squid with ntlm_auth on the same machine! As far as i understand ntlm_auth needs winbind!? So i started winbind, but "wbinfo -u" still ain't working :-) Neither is ntlm_auth! Do i have to change my nsswitch.conf to "search" winbind aswell? Currently it looks this way: passwd: files

YES!!!!!!!!!!!!!!! HOT DOGGIES!!!!!!!!!!!!!!!!!!!!! I think I fixed it. The problem - Squid worked at my test site - it did not popup a login window, but instead used Ssamba's ntlm helper program to get credentials from IE. But at my customer site it did (improperly) popup a login window. The squid.conf files were almost identical - even to the point where my working test site incorrectly

Hi Gaetano, Good plan, I'd be very interested in your work as I am starting to look at symfony here, also! I do have ntlm_auth working perfectly using Samba 4 (and with badlock patches). I use it with freeradius, not squid. An extract from my /etc/raddb/modules/mschap, if it helps: ntlm_auth = "/usr/local/samba/bin/ntlm_auth --request-nt-key

Isn't possible to test the ntlm_auth with the ntlmssp protocol in a command line mode, you must use a browser able to handle ntlm because only this sort of browser send the appropriate ntlm challenges, try IE. Estevam Henrique -----Mensagem original----- De: samba-bounces+ecarvalho=bmf.com.br@lists.samba.org [mailto:samba-bounces+ecarvalho=bmf.com.br@lists.samba.org] Em nome de Champaka

I've not clear if is a squid or a samba/ntlm_auth trouble... indeed... In Squid i've added: auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp --domain=LNFFVG --require-membership-of='LNFFVG\Domain Users' auth_param ntlm children 5 but in 'cache.log' i got: Winbindd lookupname failed to resolve 'LNFFVG\Domain into a SID! Winbindd

Hello, I'm setting up (at least I try) to set up network services with single sign on. I could build and configure dovecat to use samba's ntlm_auth helper to achieve ntlm authentication of imap users. The point is, I wanted to restrict which users could actually authenticate through ntlm. The ntlm_auth helper has this ability with the --require-membership-of=... command line parameter. I

Hi. I need to use the ntlm_auth module to auth. users so a group can use Internet and other not, using squid. The users that belong to "Internet" group may use Internet. I've being looking for info. about this but there is no much info. in google. Until now this is the only info. that I had found: for squid.conf: auth_param ntlm program /usr/bin/ntlm_auth