similar to: CentOS 6.2 install problem squid winbind

Hi, all. Has anyone else experienced issues with using ntlm_auth in 3.0.28a? We have had squid set up to use ntlm_auth for quite some time & the latest update seems to break. I'm getting (in /var/log/messages) Apr 23 10:13:51 cyclops (ntlm_auth): Login for user [NSTARBANK]\[drandolph]@ [NSB_DAVELAPTOP] failed due to [winbind client not authorized to use winbindd_pam_auth_crap.

Yes, it is. I've made that some times... After having the Samba infra-structure running (winbind -u, winbind -g, winbind -a), you need to create some ACLs in squid.conf, take a look at: http://www.squid-cache.org/Doc/FAQ/FAQ-23.html#winbind To check group membership you can use wbinfo_group or LDAP, I had some problems setting wbinfo_group with Samba 3.0.2, that's why I use LDAP. If you

I recently upgraded from samba 3.0.10-1.fc3 to 3.0.21b-2 running on FC5. Today was the first day of a typing class which uses the network version of Mavis Beacon Typing which depends on file sharing. The users are hanging and then getting an error message during logging into the product. In /var/log/message, I can see the following message for each user similar to: [2006/04/24

Last month, I updated to Fedora 10 with samba 3.2.11-0.30.fc10 via a complete reinstall. Using x86-64. We are now experiencing a problem on a share with the force user parameter. [zz] comment = Test Share path = /home/zz force user = zzadminp create mask = 0770 directory mask = 0770 The primary group of zzadminp above is admplus. If user markoren with

This is obviously not a long term acceptable solution. Could someone please enlighten me as to the permanent solution, or at least see why it doesn't work? This is not my problem, therefore I have not had the opportuntity to test - I don't have a version that old. Let me know if it is solved in a newer version as well. Thanks. It is a workable solution, although the generally accepted

I had the same problem after upgrading to 3.0.23a. I have one samba PDC running a basic setup back to the smbpasswd file, and one that runs OpenLDAP. The former did exactly as yours, and I ended up rolling back to version 3.0.23. On the latter, the smb process refused to run, reporting that it could not contact the database. I ended up having to remove all the database files and reinstall

I recently installed Fedora 9 for use as a squid server. We use smb_auth basic authorization and have run into a problem with it. I believe that I have tracked the problem down to smbclient when the USER environmental variable contains the userid and password. smb_auth.sh in squid uses the USER environmental variable. Below are test results for Version 3.0.28a-0.fc8 and Version

Hai, I think this is an old bug.. ( pretty sure about it ) And i suggest to dont change anything except smb.conf. Your trying to use kerbereros usersname. wbinfo -a marcio at EMPRESA.COM.BR Enter marcio at EMPRESA.COM.BR's password: And you using: winbind use default domain = yes This is and old bug somewhere in 4.5/4/6 i believe. Only change these, yes only slows down you

Hi, I set up Squid 4.6 on Debian 10 and I'm having problems with browser authentication on a Windows station. I did the tests on the command line and apparently it's OK. root at proxy:/etc/squid/acls# /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic Registered MSG_REQ_POOL_USAGE Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED lp_load_ex: refreshing parameters Initialising global

Its in here : ( from your squid.conf ) "/etc/squid/listas/ad_block.lst" http_access deny ads #deny_info TCP_RESET ads affiliates.digitalriver.com it is in the ads list. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: squid-users [mailto:squid-users-bounces at lists.squid-cache.org] Namens > erdosain9 > Verzonden: vrijdag 9 september 2016 15:55 > Aan:

Hai, The folder test-suite/buildtests/ Is an not exiting folder in current 4.11 tar.gz Can you verify that? I thinks thats also from 5.x Greetz, Louis > -----Oorspronkelijk bericht----- > Van: squid-users > [mailto:squid-users-bounces at lists.squid-cache.org] Namens > Amos Jeffries > Verzonden: donderdag 23 april 2020 14:28 > Aan: squid-users at

Hai, I would say facebook protected there certificates with TSLA. Then you cant use ssl bump if im correct. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: squid-users > [mailto:squid-users-bounces at lists.squid-cache.org] Namens > Julian Perconti > Verzonden: dinsdag 12 juni 2018 21:55 > Aan: squid-users at lists.squid-cache.org > Onderwerp: Re:

Hello all, I am discussing more than two weeks with SQuid developpers for an issue I encounter with ntlm_auth process. You can get a complete overview of the discussion at the url specified below but you can also get a summary later in this mail. http://www.mail-archive.com/squid-users@squid-cache.org/msg60371.html I get a complete platform based on OpenLDAP 2.3.43, MIT-KerberosV 1.6, Samba

... oops.. sorry about that.. Well if someone what to know more, you know to find me. ;-) Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens L.P.H. van Belle > Verzonden: dinsdag 29 december 2015 15:39 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] [squid-users] Squid with NTLM auth behind netscaler >

Hai, > i read "Do not use this method if you run winbindd or other > samba services as samba will reset the machine password every x days > and thereby makes the keytab invalid Seems wrong to me. If you use samba 4. ( dont know if its the same for samba 3 ) Make sure you have this in smb.conf dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and

The most simple way to add SSO. ? Install winbind krb5-user, then?your smb.conf,? update this config : [global] ??? # Auth-Only setup with winbind. ( no Shares ) ????log level = 1 ??? workgroup = NTDOM ??? security = ADS ??? realm = YOUR-REALM ??? netbios name = HOSTNAME ? ??? preferred master = no ??? domain master = no ??? host msdfs = no ??? dns proxy = yes ? ??? interfaces = eth0 lo ??? bind

Same as on the squid keytab file : chown root:squid /etc/squid3/ldappass.txt chmod 440 /etc/squid3/ldappass.txt Greetz, > -----Oorspronkelijk bericht----- > Van: squid-users [mailto:squid-users-bounces at lists.squid-cache.org] Namens > alesironi > Verzonden: maandag 1 februari 2016 13:28 > Aan: squid-users at lists.squid-cache.org > Onderwerp: Re: [squid-users]

Hai Amos, Thank you for your very clear responce.. few small questions.. Is there a way to setup the proxy for the following. 1) use negotiate kerberos for auth, ( which is working already for all domain joined machines ) 2) use a fall back that works, for now basic ldap works for non windows machines, and domain joined machines. 3) use any other fallback way for authentication users on windows

--------------------------------------------------------------------- Red Hat, Inc. Security Advisory Synopsis: Potential misuse of squid cachemgr.cgi Advisory ID: RHSA-1999:025-01 Issue date: 1999-07-29 Updated on: Keywords: squid cachemgr.cgi connect Cross references: --------------------------------------------------------------------- 1. Topic: cachemgr.cgi, the manager

... sorry wrong list.. but you can read it and learn from it.. :-)) Greetz, Louis >-----Oorspronkelijk bericht----- >Van: samba [mailto:samba-bounces at lists.samba.org] Namens >L.P.H. van Belle >Verzonden: dinsdag 18 augustus 2015 9:45 >Aan: samba at lists.samba.org >Onderwerp: Re: [Samba] [squid-users] debian Jessie squid with >auth (kerberos/ntlm/basic) ERROR