similar to: optimizing and scaling ntlm_auth

On Thu, 15 Jun 2017 11:51:18 +0200 mj via samba <samba at lists.samba.org> wrote: > Hi Rowland, > > On 06/15/2017 11:05 AM, Rowland Penny via samba wrote: > > OK, whilst it is recomended to use 'password server = *' you can > > use a list of servers instead. I personally do not see the point of > > setting it as you are proposing, surely it is just the

Hi; Samba team say "It is recommended that administrators set these additional options, if compatible with their network environment:" ntlm auth = no I use samba with FreeRadius. I configure "ntlm_ auth = no" but freeradius users not connected to wifi. I use ntlm_auth in FreeRadius side.. best regards

> On Apr 15, 2016, at 15:06 , Andrew Bartlett <abartlet at samba.org> wrote: > > > Yes, this really, really sucks. MSCHAPv2 is NTLM, not NTLMv2 based. > This is despite NTLMv2 being around when they 'designed' this > mechanism. Sadly no attempt has been made to somehow get an MSCHAPv3 > in that uses NTLMv2. > > On Windows, setting a special flag

Hi List, I'm running a heavily loaded squid server that uses ntlm_auth to provide NTLM authentication. As load has increased over time, I've found the need to increase the number of ntlm_auth processes available to squid as well as the "winbind max clients" value in the smb.conf file. This has worked well up until now but seems I've hit some sort of limit. If I keep the

Hello, I'm trying to authenticate PPP (in fact l2tp...) users with Active Directory (windows server 2003 DCs, mixed-mode domain) using winbind / ntlm_auth. I'm using Samba 3.0.22, PPP 2.4.3, Kerberos 1.3.6, with Trustix 2.2 What works : - krb5kinit (and krb5klist -e) - net ads join - wbinfo -u, wbinfo -g, wbinfo -a user%pwd, wbinfo -p, wbinfo -t and wbinfo -m - getent passwd and

Hi all, I have just installed and configured a squid setup authenticating against Active Directory using kerberos tickets and have achieved the holy-grail of IT - Single Sign On! The problem is that I have two users for whom is does not work. The ntlm_auth logs show that for users that are properly authenticated against squid we get the following (Usernames/Domains/Hosts have been changed for

Hi, I'm using ntlm_auth to authenticate users in freeradius. My samba server is joined to DOMAINA. When I run ntlm_auth --username=domainauser everything works great. When I run ntlm_auth --username=domainbuser it fails because the user does not exist in domaina which the server is joined to. If I run ntlm_auth --username=domainbuser --domain=domainb it works great. I was wanting to do

I am trying to get FreeRADIUS using Samba's ntlm auth for MSCHAPv2 authentication. I asked this question over on the FreeRADIUS list, and I think the stunned silence means that the folks over there think you guys in the Samba world may be able to help better. I admit it's been a few years since I did any Samba! I have joined my two RADIUS servers (FreeRADIUS 2.0.2, Solaris 10 x86,

On Tue, 23 Jan 2024 17:07:35 -0500 Mark Foley via samba <samba at lists.samba.org> wrote: > On Mon Jan 22 11:00:59 2024 Mark Foley via samba > <samba at lists.samba.org> wrote: > > > > I have scripts that runs ntlm_auth. Before upgrading my DC to > > 4.18.9 I would get text string output from the ntlm_auth command. > > For example: > > > >

On Mon Jan 22 11:00:59 2024 Mark Foley via samba <samba at lists.samba.org> wrote: > > I have scripts that runs ntlm_auth. Before upgrading my DC to 4.18.9 I would > get text string output from the ntlm_auth command. For example: > > STATUS_NO_SUCH_USER > NT_STATUS_WRONG_PASSWORD > STATUS_OK > > My script(s) look for these strings. > > Now with the new

On Wed Jan 24 05:03:25 2024 Rowland Penny via samba <samba at lists.samba.org> wrote: > > On Tue, 23 Jan 2024 17:07:35 -0500 > Mark Foley via samba <samba at lists.samba.org> wrote: > > > On Mon Jan 22 11:00:59 2024 Mark Foley via samba > > <samba at lists.samba.org> wrote: > > > > > > I have scripts that runs ntlm_auth. Before upgrading

Hi Has anybody tried to combine shorewall (instead of iptables) with packetfence? /Göran ------------------------------------------------------------------------------ October Webinars: Code for Performance Free Intel webinars can help you accelerate application performance. Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from the latest Intel processors and

Hello all Im using a linux box running CentOS 4.1 as a proxy server with user auth with an AD Its working for a long time, but suddenly this weekend the users cant authenticate anymore looking on logs i obtain this Oct 10 08:29:59 sol (ntlm_auth): [2005/10/10 08:29:59, 0] utils/ntlm_auth.c:get_require_membership_sid(237) Oct 10 08:29:59 sol (ntlm_auth): Winbindd lookupname failed to resolve

Hi I use suse 10.0 and have problems to set up ntlm_auth for squid. It uses samba 3.0.20 and squid 2.5.stable10 I have set up winbind and everyhting seems to work. I've changes groupownerchip of /var/lib/samba/winbindd_privileged to squid. squid runs as group squid. Everyhting is working fine for several minutes. After a while it doesn't work anymore proxy:/var/log/samba #

That is client setup. We have that under control. Our Linux users use Network Manager to connect and our Windows users use the stuff built into Windows. My problem is server-side. The server is a PPTP VPN (running via pptpd) and I have to add the lines below to make it work. plugin winbind.so ntlm_auth-helper "/usr/bin/ntlm_auth --helper-protocol=ntlm-server-1" Now, that allows ALL

Ok I'm at a loss, I have 2 instances on winbindd / smbdd / nmbdd running (basically copied to install from samba-multiple-domains.blogspot .com but with my domains and ip's) But the issue I have is that even though both domains joined, and I can see all the winbinds and smbs running, and no errors in the logs, it appears that wbinfo / ntlm_auth only work with one of the units, no matter

I have scripts that runs ntlm_auth. Before upgrading my DC to 4.18.9 I would get text string output from the ntlm_auth command. For example: STATUS_NO_SUCH_USER NT_STATUS_WRONG_PASSWORD STATUS_OK My script(s) look for these strings. Now with the new Samba, the first two strings are output as usual in the case of non-existant user and invalid password, respectively, but if the user/pw is OK it

On 27-01-2024 11:56, Rowland Penny via samba wrote: > On Fri, 26 Jan 2024 22:22:49 -0500 > Mark Foley via samba<samba at lists.samba.org> wrote: > >> On Wed Jan 24 05:03:25 2024 Rowland Penny via samba >> <samba at lists.samba.org> wrote: >>> On Tue, 23 Jan 2024 17:07:35 -0500 >>> Mark Foley via samba<samba at lists.samba.org> wrote:

On Fri, 26 Jan 2024 22:22:49 -0500 Mark Foley via samba <samba at lists.samba.org> wrote: > On Wed Jan 24 05:03:25 2024 Rowland Penny via samba > <samba at lists.samba.org> wrote: > > > > On Tue, 23 Jan 2024 17:07:35 -0500 > > Mark Foley via samba <samba at lists.samba.org> wrote: > > > > > On Mon Jan 22 11:00:59 2024 Mark Foley via samba

Hi all, I'm trying to use ntlm_auth as authenticator of the freeradius mschap module. If I use ntlm_auth from command line with username and password, authentication works. If I use the same credentials with mschap on the logs I can see the challenge and nt-response and I can't understand if authentication fails because challenge and response are wrong or because ntlm_auth can't