similar to: Authenticate machine accounts with ntlm_auth

Hi, I saw your post on the samba ML... I've the same problem... do you find a solution ? Someone told me to rewrite the auth_ntlm... but I think I'm not able to do this... Regards, Jeremy

At http://groups.google.de/group/mailing.unix.samba/browse_frm/thread/3806dd92303380d1/10f21511e488d8d0?lnk=st&q=ntlm_auth++%22machine+authentication%22&rnum=1&hl=de#10f21511e488d8d0 the question is discussed, whether ntlm_auth can be used for machine authentication against a Win2003/AD. and the conclusion seems to be, that it is not really clear: >Machine accounts are a problem

Hi all, I have just installed and configured a squid setup authenticating against Active Directory using kerberos tickets and have achieved the holy-grail of IT - Single Sign On! The problem is that I have two users for whom is does not work. The ntlm_auth logs show that for users that are properly authenticated against squid we get the following (Usernames/Domains/Hosts have been changed for

I am trying to use ntlm_auth for machine authentication requests against a Win2003/AD from my RADIUS server. Normal, user authentication works fine, but not machine authentication. The username passed from RADIUS to ntlm-auth looks like host/pcname123. I'm wondering if the "/" is killing it? The ntlm_auth man page says that it expects only Samba's unix charset. Does anyone

Maybe as you said I was lucky before. Then if I have a computer account in my domain, how can I get this computer authencated in domain as I did before? Does the NetJoinDomain work either? Because I just try to create a computer account using RSAT, but use it to authencate with the domain by NetJoinDomain , which failed. Or how to offline domain join in samba4.9.0? Ryan >On Fri, 14 Sep

Hello all, I'd like to run a Wireless LAN with Windows XP Clients, FreeRADIUS, Samba and Windows Server 2003 Active Directory. For user authentication FreeRADIUS uses the Samba ntlm_auth tool in order to identify users from active directory. Thereby, the ntlm_auth tool is used as shown below: ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --username=%{mschap:User-Name}

Hi, I'm using ntlm_auth to authenticate users in freeradius. My samba server is joined to DOMAINA. When I run ntlm_auth --username=domainauser everything works great. When I run ntlm_auth --username=domainbuser it fails because the user does not exist in domaina which the server is joined to. If I run ntlm_auth --username=domainbuser --domain=domainb it works great. I was wanting to do

Hello all Im using a linux box running CentOS 4.1 as a proxy server with user auth with an AD Its working for a long time, but suddenly this weekend the users cant authenticate anymore looking on logs i obtain this Oct 10 08:29:59 sol (ntlm_auth): [2005/10/10 08:29:59, 0] utils/ntlm_auth.c:get_require_membership_sid(237) Oct 10 08:29:59 sol (ntlm_auth): Winbindd lookupname failed to resolve

Hi! I have a problem with the ntlm_auth helper (samba-3.0.2) under squid. I got the following from the cache.log: [2003/12/18 15:36:48, 10] utils/ntlm_auth.c:manage_squid_request(1114) Got 'YR' from squid (length: 2). [2003/12/18 15:36:48, 10] utils/ntlm_auth.c:manage_squid_ntlmssp_request(362) got NTLMSSP packet: [2003/12/18 15:36:48, 10]

Hi, I want to know how to use ntlm_auth with ntlm-server-1 and freeradius, with the users login and password information in ldap. I have read documentation of ntlm_auth (only found the man page), docs and howtos about pptp and squid, i don't found about freeradius, and i'm experimenting with the options of ntlm_auth. I have configured freeradius+ldap+802.1X for a wireless lan, but i

Hi guys/gals. I'm brand new to this list, been working with Linux for several years, and have occasionally set up samba file servers before in a "hi-i'm-wide-open-so-anyone-can-read/write-to-my-shares" mode for temporary storage in data recovery scenarios. At the moment, I'm working on a project that involves FreeRADIUS authenticating against a Win2k/2k3 AD server using the

Hi there, I'm trying to configure Squid to use a windows domain for authentication, and all goes well until I add the "--require-membership-of" option on ntlm_auth. I need to restrict access based on group membership, however ntlm_auth does not seem to be behaving correctly. I'm using Samba 3.0.6 on Debian and I'm using a Windows 2000 (SP4) Domain Controller. I

Hi all, I'm having trouble getting ntlm_auth working with the "--require-membership-of=" option. I did rebuild the Samba RPM so that it had the --enable-auth="ntlm,basic" and --enable-external-acl-helpers="wbinfo_group" settings. The command line test for the squid-2.5-basic protocol returns an "OK". The one using the squid-2.5-ntlmssp protocol

Hi all, I've a little problem using ntlm_auth with squid. Scenario: Redhat 9, Samba 3 compiled, squid-2.5 compiled. smb.conf: [global] encrypt passwords = Yes winbind separator = \ winbind cache time = 10 template homedir = /home/%D/%U template shell = /bin/bash idmap uid = 10000-20000 idmap gid = 10000-20000 winbind uid = 10000-20000 winbind gid = 10000-20000 winbind enum users = yes

Hi list, Can somebody please enlighten me: I have Samba PDC running and want to add Squid with ntlm_auth on the same machine! As far as i understand ntlm_auth needs winbind!? So i started winbind, but "wbinfo -u" still ain't working :-) Neither is ntlm_auth! Do i have to change my nsswitch.conf to "search" winbind aswell? Currently it looks this way: passwd: files

Hi, I've noticed that Windows Updates, just won't do NTLM auth, so i've just added a no_auth exception for windows update sites. How many children are you starting. I'm serving +700 users with just one squid with 30 ntlm_auth processes on a PII/800 MHZ/256 MB Ram with no problems wathsoever. Best Regards, Bruno Guerreiro >-----Original Message----- >From: Vitaly Protsko

Chaps, I'm trying to get a radius server to authenticate to AD via the samba ntlm_auth program. I've just built samba vsn 3.0.21c with the following config parameters ./configure --with-pam --enable-socket-wrapper --with-ldapsam --with-syslog --with-ldap --with-winbind My smb.conf has global] workgroup = ADIR security = domain password server = 150.237.54.198 realm =

Hello all, I am working on a VPN solution using FC3-2.6.12-1.1381 - openswan 2.4.4-1 - l2tpd 0.69-13 - pppd 2.4.3-5 - samba 3.0.10-1. When attempting a connection from an XP-SP2 box pppd dies without authenticating the user (see below). I have run ntlm_auth from the command line with success. What tools can I use to identify the failure? Is there an obvious error in the ppp options file?

Hello all, I'm sorry if my question doesn't match to this list but I don't know where I can find an answer. To resume my situation, I'm using samba and more particularly ntlm_auth to ask an active directory database from my radius server. I arrived to authenticate a user yesterday but I can't today and I find it's due to the ntlm_auth . I try only the ntlm_auth commands

Hi List, I'm running a heavily loaded squid server that uses ntlm_auth to provide NTLM authentication. As load has increased over time, I've found the need to increase the number of ntlm_auth processes available to squid as well as the "winbind max clients" value in the smb.conf file. This has worked well up until now but seems I've hit some sort of limit. If I keep the