similar to: security of ntlmauth / winbindd_privileged dir

I sent this message and realized I hadn't included info on the environment so I am resending it. I am running red hat enterprise linux 4 with samba version 3.0.10-1.4E.2. Apache version is 2.0.52. I also included output from running ntlm_auth on the command line with diagnostics. This fails but it only seems to try plaintext auth which will not work (see below). I am having problems with

Hello, For these days i'm trying to update the samba PDC of the network of the version 3.0.28a to 3.4.0. I'm configured the ldap pass, winbind and the all services, when they have sucess of update. But now i have a problem with the ntlm_auth: he take and show random messages on auth. For example: 1 time return 0xc00000c3 ( NT_STATUS_INVALID_NETWORK_RESPONSE) or 0x1c010002 (???) and much

I have samba 3.0.14-5 installed (installed via Fedora Core 4's Yum) I have enabled "client NTLMv2 auth = yes" in smb.conf When I run "ntlm_auth --username=user --domain=MYDOM" it connects fine (change user and MYDOM to be my user and my domain) When I run "ntlm_auth --username=user --domain=MYDOM --diagnostics" it fails on all tests with "wrong password"

Hello, I'm trying to connect my Debian 4 samba box to my Windows 2003Server Active Directory. I successfully joined the domain, with net ads join. Wireshark captures a lot of packets going over the wire, and I get the message "joined the domain successfully". In my AD, under 'computers', the samba box appeared. So that all works. Asking a kerberos ticket for a user with

I solved this issue by updating the 2003 AD Servers to SP1. Regards, Bob Bostwick -----Original Message----- From: Tim P [mailto:panterafreak@gmail.com] Sent: Tuesday, July 26, 2005 10:18 AM To: samba@lists.samba.org Subject: [Samba] NTLMv2 - wrong password with samba? I have samba 3.0.14-5 installed (installed via Fedora Core 4's Yum) I have enabled "client NTLMv2 auth = yes" in

Hi, I've got an unbelievable problem : I'm trying to setup samba on RHEL 4 AS PPC(iSeries) to work with a Win2K domain controler. I use the same smb.conf file (and the same configuration procedure) on a Fedora 3 box too. I have no problem with the Fedora server, but on the RHEL 4 server, Windows clients are unable to browse the server and I've this strange error appearing in the

Hi, all. Has anyone else experienced issues with using ntlm_auth in 3.0.28a? We have had squid set up to use ntlm_auth for quite some time & the latest update seems to break. I'm getting (in /var/log/messages) Apr 23 10:13:51 cyclops (ntlm_auth): Login for user [NSTARBANK]\[drandolph]@ [NSB_DAVELAPTOP] failed due to [winbind client not authorized to use winbindd_pam_auth_crap.

Hello all, I am discussing more than two weeks with SQuid developpers for an issue I encounter with ntlm_auth process. You can get a complete overview of the discussion at the url specified below but you can also get a summary later in this mail. http://www.mail-archive.com/squid-users@squid-cache.org/msg60371.html I get a complete platform based on OpenLDAP 2.3.43, MIT-KerberosV 1.6, Samba

Hi! I have a problem with the ntlm_auth helper (samba-3.0.2) under squid. I got the following from the cache.log: [2003/12/18 15:36:48, 10] utils/ntlm_auth.c:manage_squid_request(1114) Got 'YR' from squid (length: 2). [2003/12/18 15:36:48, 10] utils/ntlm_auth.c:manage_squid_ntlmssp_request(362) got NTLMSSP packet: [2003/12/18 15:36:48, 10]

I'm running samba 3.0.11 on SuSE Linux Pro 9.2. RPM's: samba-doc-3.0.11-0.1 samba-client-3.0.11-0.1 samba-3.0.11-0.1 samba-winbind-3.0.11-0.1 libsmbclient-3.0.11-0.1 Kernel : Linux printserver 2.6.8-24-smp #1 SMP Wed Oct 6 09:16:23 UTC 2004 i686 i686 i386 GNU/Linux The server is currently serving up only printing to a network of 170ish users. Printing was originally being handled by

I've been running FreeRadius 2 on Centos 5.5 for a while now. So far so good. I'm now looking to make connecting to our WPA secured wireless easier. The RADIUS server is running in a VM and since the system is in use I have copied the original and used that copy to create a test environment. I have run through all system updates and have upgraded all relevant packages. The test system

I have an issue where winbind will occasionally pause for 30 seconds. # strace -T -t ls -l /share 16:52:20 read(4, "/var/lib/samba/winbindd_privileg"..., 35) = 35 <0.000009> 16:52:20 lstat("/var/lib/samba/winbindd_privileged", {st_mode=S_IFDIR|0750, st_size=72, ...}) = 0 <0.000011> 16:52:20 lstat("/var/lib/samba/winbindd_privileged/pipe",

Okay, I'm having some weird Windbind issues. Here's my plea below: Okay, here's my setup: SLES9 | Samba Version 3.0.4 | Winbind | W2K3-SP1 Active Directory Domain I have kerberos configured properly, I can successfully run this command: # knit domainuser domainuser@TESTDOMAIN.ORG's Password: kinit: NOTICE: ticket renewable lifetime is 1 week and succesfully joined the

Authenticating Server: 2003 with Active Directory Enabled Squid Server: FreeBSD 5.1 Samba: 3.0.7,1 Other package info in package list at bottom. The DNS server is on the 2003 Server with the proper kerberos and ldap entries in the DNS server. (Passes Active Directory DNS utility tests) Responses are sent in LM, NTLM, &NTLM2 when negotiated. Signing requirements are not configured. (Choices:

Hi, I am using squid+ntlm-helper+samba+winbindd. Squid mailing list told me to try this one. When using the setting "Send NTLMv2 Response only" on my windows VISTA machines I get this error message in my logs. winbindd_pam_auth_crap: invalid password length. As soon as I change the setting to "Send NTLMv2 if negotiated" it works. Samba v3.2.5 Winbindd v3.2.5 Squid

Scenario: Centos 5 x86_64 machine with samba-3.0.23c-2.el5.2.0.2 The machine is a PDC, Windows 2000 users logon, get profiles, etc. I'm trying to set up a folder in apache that uses NTLM authentication using mod_auth_ntlm_winbind. I've followed: http://adldap.sourceforge.net/mod_auth_ntlm_winbind.php winbindd is running, and ntlm_auth seems to work: # ntlm_auth --username=pdc2

I'm playing with the mod_ntlm_winbind from http://download.samba.org/ftp/unpacked/lorikeet/mod_ntlm_winbind/ on Centos 4.3 but running into problems when trying to authenticate via the browser. IE says it cannot find the server when trying to access http://server/auth Firefox pops up an authentication box but this also does not work. Can anyone point me into what I might be doing wrong or may

Hi, I have some error into my log.winbind and I can't understand why. [2005/10/03 16:38:28, 2] nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(654) NTLM CRAP authentication for user [D-CH-CAI3]\[] returned NT_STATUS_NO_SUCH_US ER (PAM: 4) [2005/10/03 16:38:38, 2] nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(654) NTLM CRAP authentication for user [D-CH-CAI3]\[] returned

Hello! If I use the errbar-function and have a logarithmic scale on the x-axis, then the little horizontal bars at the end of the errbars (cap) disappear. What can I do? Thanks for helping! Ute

http://us4.samba.org/samba/docs/SambaIntro.html Through his E'mail contacts, Andrew discovered that NetBIOS and SMB were actually (though nominally) documented. With this new information at his fingertips he set to work again, but soon ran into another problem. He was contacted by a company claiming trademark on the name that he had chosen for his server software. Rather than cause a fuss,