similar to: w2k3 AD and samba 3.0.14a (debian)

Hello all, I am attempting to set up Squid and have the authentication occur onto a Windows 2003 ADS server (enterprise edition- if it matters), hostname W2003. I have followed instructions listed at: http://itmanagers.net/Documents/File/walkthroughs/~Linux@Squid/Squid+and+Samba+3+-+Walkthrough.html and have spent numerous hours(+15) attempting this. However, I can't seem to get past the

My smb.conf is below wbinfo -u, -t, -g all work. getent works, but when I do wbinfo -a domain\\username%password I get: proxy:~# wbinfo -a cicero\\test1%ilbcnu plaintext password authentication failed error code was NT_STATUS_NO_SUCH_USER (0xc0000064) error messsage was: No such user Could not authenticate user cicero\test1%ilbcnu with plaintext password challenge/response password

> you are better off building the more up to date 3.5 version available > from Stretch/Testing repository. I disagree with this one, use SID and not testing, testing has a longer delay in security updates and koms after unstable. See : https://www.debian.org/security/faq Greetz, Louis > -----Oorspronkelijk bericht----- > Van: squid-users [mailto:squid-users-bounces at

Hai, You can very easy upgrade to 3.5.12 on Jessie. Add sid to your sources.list, or better in : /etc/apt/sources.list.d/debian-sid.list Only the deb-src line is needed. Now apt-get update # install dependecies. apt-get build-dep squid # get and build source. apt-get source squid -b if you missing something, get that package first, build it, install it and do above again. !! thing to

I've got a Samba (3.0.14a) controlled domain that contains 1 Windows 2003 Server as a member server. I've been thinking about using Terminal Services from that machine to allow roaming users (ie, those outside of the office) to connect to our network and get work done. My only concern at this point how to deal with the lack of an Active Directory and still allow Terminal Services to

> you are better off building the more up to date 3.5 version available > from Stretch/Testing repository. I disagree with this one, use SID and not testing, testing has a longer delay in security updates and coms after unstable. See : https://www.debian.org/security/faq Greetz, Louis > -----Oorspronkelijk bericht----- > Van: squid-users [mailto:squid-users-bounces at

Hai Amos, Thank you for your very clear responce.. few small questions.. Is there a way to setup the proxy for the following. 1) use negotiate kerberos for auth, ( which is working already for all domain joined machines ) 2) use a fall back that works, for now basic ldap works for non windows machines, and domain joined machines. 3) use any other fallback way for authentication users on windows

Hi All, For the past few months I've been running a SUSE 9.2 server here (mostly as an app server) which was a member of an AD domain (w2k3 domain controller.) I used winbind to enable domain members to log into the box, all was well. This week the w2k3 server had some MS security patches applied and suddenly logins became impossible, because winbind was unable to retrieve user info from the

... sorry wrong list.. but you can read it and learn from it.. :-)) Greetz, Louis >-----Oorspronkelijk bericht----- >Van: samba [mailto:samba-bounces at lists.samba.org] Namens >L.P.H. van Belle >Verzonden: dinsdag 18 augustus 2015 9:45 >Aan: samba at lists.samba.org >Onderwerp: Re: [Samba] [squid-users] debian Jessie squid with >auth (kerberos/ntlm/basic) ERROR

Dear All Is it possible to mount a share hosted on a Windows 2003 box, that exists in an AD domain, on linux client. I can connect to the same share using SMBClient but cannot mount the share using mount -t smbfs. I have read on the forum that there are problems but couldn't determine if it was possible or not. If some one could clarify for me if this is possible or not I'd be grateful

About the : > ERROR: Negotiate Authentication validating user. Result: {result=BH, > notes={message: NT_STATUS_UNSUCCESSFUL * NT_STATUS_UNSUCCESSFUL; }}   I suspect the pc you trying with is not domain joined? Or you using user at REALM Can you add ?-d?  to the auth line of squid and try again and post that log. ( -d = enable debugging )   Now what i dont know. A samba DC

And i forgot to mention.   This is what i have for my squid.   auth_param negotiate program /usr/lib/squid/negotiate_wrapper_auth \     --kerberos /usr/lib/squid/negotiate_kerberos_auth -s HTTP/proxy.internal.domain.tld at REALM \     --ntlm /usr/bin/ntlm_auth --helper-protocol=gss-spnego --domain=NTDOMAIN   See the ntlm line. =>  --helper-protocol=gss-spnego     Greetz,  

The proxy already is into domain "wbinfo -u" returns all users from the AD, the kinit command with -t /etc/squid/PROXY.keytab is working great, but the NTLM phase into the squid log is the same ERROR: Negotiate Authentication validating user. Result: {result=BH, notes={message: NT_STATUS_UNSUCCESSFUL * NT_STATUS_UNSUCCESSFUL; }} are in recent versions some changes about the NTLM or NT

No its a misconfiguration somewhere. Squid works fine i have it all running. Took me some time to understand things but it works fine now. See the list links.. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Rowland Penny via > samba > Verzonden: woensdag 28 december 2016 16:12 > Aan: samba at lists.samba.org

Hi all, please cc me, i'm not on the list. Second: All google findable information about problems setting up ntlm_auth for squid with winbind are read and checked more than three times. After breaking a running setup under debian squeeze, i go back to debian lenny to circumvent the actual MIT kerberos problem[1]. [1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=566977#57 Now i

no thats not it samba-tool does not set upn but msktutil does set the upn. So an option for samba-tool to set upn would be nice... Greetz Louis > Op 28 dec. 2016 om 18:38 heeft Rowland Penny via samba <samba at lists.samba.org> het volgende geschreven: > > On Wed, 28 Dec 2016 17:05:39 +0100 > "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote:

After testing my W2K3 SP1 terminal server against a SAMBA server *AND* a W2K server, I have noticed the following *odd* behavior. LOGIN: Map drive letters LOGOUT: Connections are still connected. on BOTH W2K and SAMBA file servers. LOGIN: Map drive letters LOGOUT: Now you have TWO sets of connections still connected for the one user. REPEAT: For each time you repeat the above procedure, you

Hello I am using samba 3.0.10 connected to w2k3 (domain member) via winbind. Everythings works ok, but when linux (winbind) lost connection to w2k3 system works very slow. e. g. Loging to console -> 1min 10sec Apache server -> I cannot refresh web site usage cpu is ok -> about 5% usage mem is ok too, When I restart winbind or kill them everything works good. What is wrong??? I

Hello, I've been trying to join w2k3 machine to samba 3 domain for a last few hours. This is strange but all I get from joining process is: The Specified User Already Exists. More than 100 machines running XP are already added to the same domain as well as Linux machines. The only problem I've got is 2003 server. This w2k3 server is quite pure however it wasn't me who has installed

Hi, Is that possible? If I start in normal VGA mode I can see yellow ! next to the 2nd and 3rd QXL card and Win complains about can't start (Code 10). If I want to change the normal VGA resolution in a higher res (for example 800x600) I got black screen in virt-manager. I use SPICE protocol (for more screens). Any solution? W2k3 R2 Ent. Ed. SP2 TIA, Ruzsi