similar to: Using ntlm_auth to get NTLMv2 Session support from an application

On Wed, Apr 19, 2017 at 1:08 PM, Jeremy Allison <jra at samba.org> wrote: > > > Any insight, feedback into this issue would be much appreciated. > > The squid program does this. Maybe look into the code they > use for their integration ? > > http://wiki.squid-cache.org/ConfigExamples/Authenticate/Ntlm Jeremy, thanks! That's exactly what I was looking at. So

On Wed, Apr 19, 2017 at 11:03:34AM -0400, pisymbol . via samba wrote: > Hello: > > As many of you already probably know, the neon library is the workhorse for > davfs support. > > However, right now, the current version of libneon has very limited support > for NTLM, particularly NTLMv2, both on the challenge/authentication side as > well as handling NTLMv2 Session

On Fri, 2017-04-21 at 14:12 -0700, Jeremy Allison via samba wrote: > On Wed, Apr 19, 2017 at 03:47:05PM -0400, pisymbol . wrote: > > On Wed, Apr 19, 2017 at 1:08 PM, Jeremy Allison <jra at samba.org> > > wrote: > > > > > > > Any insight, feedback into this issue would be much > > > > appreciated. > > > > > > The squid

On Sat, 2017-04-22 at 13:41 -0400, pisymbol . wrote: > > > On Fri, Apr 21, 2017 at 5:28 PM, Andrew Bartlett <abartlet at samba.org> > wrote: > > On Fri, 2017-04-21 at 14:12 -0700, Jeremy Allison via samba wrote: > > > Not quickly. Probably best to look into the squid code itself > > > and see how they drive it. > > > > Also look into Wine. 

On Sat, Apr 22, 2017 at 4:49 PM, Andrew Bartlett <abartlet at samba.org> wrote: > On Sat, 2017-04-22 at 13:41 -0400, pisymbol . wrote: > > > > > > Your task is fairly easy as the resulting HTTP session won't be > > > NTLMSSP > > > encrypted, just authenticated with NTLMSSP, so you don't need to > > > involve Samba long-term, or get out

On Fri, Apr 21, 2017 at 5:28 PM, Andrew Bartlett <abartlet at samba.org> wrote: > On Fri, 2017-04-21 at 14:12 -0700, Jeremy Allison via samba wrote: > > Not quickly. Probably best to look into the squid code itself > > and see how they drive it. > > Also look into Wine. Kai did something very similar there a long time > ago. > I like red! Not so much white.

Hello, i set up a squid proxy that should authenticate users against a samba PDC using winbind. It works fine as long i allow ntlmv1: on the PDC: ntlm auth = yes lanman auth = no client ntlmv2 auth = yes If i restrict the domains authentication method to ntlmv2 - that's what i want - with these settings: ntlm auth = no lanman auth = no client

Chaps, I'm trying to get a radius server to authenticate to AD via the samba ntlm_auth program. I've just built samba vsn 3.0.21c with the following config parameters ./configure --with-pam --enable-socket-wrapper --with-ldapsam --with-syslog --with-ldap --with-winbind My smb.conf has global] workgroup = ADIR security = domain password server = 150.237.54.198 realm =

Hello, We have samba 3.0.23 installed. We are using free radius to take authentication requests from a nortel vpn server and using ntlm_auth trying to authenticate users against AD. This setup works fine when on the AD side ntlmv1 and ntlmv2 are enabled. (IE. Users can authenticate). However, when only ntlmv2 is enabled users are unable to authenticate. I have searched various places and while

I have installed fuse-davfs2-1.2.2-1.el5.rf.i386.rpm but mount -t davfs http://URL /mnt/dav gets /sbin/mount.davfs: group davfs2 does not exist what did I miss in the install???

man mount.davfs provides an entry in fstab for -t davfs. Does simply adding this into fstab complete the task, or is a reboot needed? (or some service restarted).

I just did a yum update. It pulled in a number of updates including the latest firefox and davfs2.i386. Then I watch the following show up during the cleanup phase of yum (/var/log/messages): Mar 28 15:42:18 nc2400 Erased: jdk Mar 28 15:42:25 nc2400 Erased: jre Mar 28 15:42:31 nc2400 Erased: fuse-davfs2 Are the first jsut removal of the alternatives? How do I tell and how do I find that

I have samba 3.0.14-5 installed (installed via Fedora Core 4's Yum) I have enabled "client NTLMv2 auth = yes" in smb.conf When I run "ntlm_auth --username=user --domain=MYDOM" it connects fine (change user and MYDOM to be my user and my domain) When I run "ntlm_auth --username=user --domain=MYDOM --diagnostics" it fails on all tests with "wrong password"

Hi; Samba team say "It is recommended that administrators set these additional options, if compatible with their network environment:" ntlm auth = no I use samba with FreeRadius. I configure "ntlm_ auth = no" but freeradius users not connected to wifi. I use ntlm_auth in FreeRadius side.. best regards

Is it possible to use NTLMv2 with MSCHAPv2 (using ntlm_auth and winbindd). What do I need to put in the smb.conf to make this work. Thanks a lot for any help. Thanks. Shirish. --------------------------------- Yahoo! Mail Use Photomail to share photos without annoying attachments.

My AD server is Win2003. And my linux server is ubuntu. Samba version is 2:3.6.3-2ubuntu2.12 and 2:4.1.6+dfsg-1ubuntu2.14.04.7. They are join into the Win2003 AD as normal smb servers (not DC). After Win2003 DC autoupdate last week, I can't use smbclient access all samba server with NTLMv2: ~$ smbclient //172.16.3.13/share -U testuser Enter DOMAIN\testuser's password: session setup

> On Apr 15, 2016, at 15:06 , Andrew Bartlett <abartlet at samba.org> wrote: > > > Yes, this really, really sucks. MSCHAPv2 is NTLM, not NTLMv2 based. > This is despite NTLMv2 being around when they 'designed' this > mechanism. Sadly no attempt has been made to somehow get an MSCHAPv3 > in that uses NTLMv2. > > On Windows, setting a special flag

hai,   Please keep it mailing to the list, this way is shows up of others also. A workaround for disabling SMBv1, you can make your server less secure but thats not what i would do. Setting these to enable NTLM v1 again. lanman auth = yes ntlm auth = yes raw NTLMv2 auth = yes I think also this is more a question for the free raduis list, but i would to for a ldap(s) setup. just dont mixup

On 17/03/15 10:13, Sense Zeng wrote: > And use ntlm_auth fail too: > > ntlm_auth --username=testuser > password: > NT_STATUS_LOGON_FAILURE: Logon failure (0xc000006d) > > > 2015-03-17 7:30 GMT+00:00 Sense Zeng <opaperjam at gmail.com>: > >> My AD server is Win2003. And my linux server is ubuntu. Samba version is >> 2:3.6.3-2ubuntu2.12 and

I solved this issue by updating the 2003 AD Servers to SP1. Regards, Bob Bostwick -----Original Message----- From: Tim P [mailto:panterafreak@gmail.com] Sent: Tuesday, July 26, 2005 10:18 AM To: samba@lists.samba.org Subject: [Samba] NTLMv2 - wrong password with samba? I have samba 3.0.14-5 installed (installed via Fedora Core 4's Yum) I have enabled "client NTLMv2 auth = yes" in