similar to: [Patch] Samba's proposed "ntlm_auth + winbind" support for dovecot-auth

Hi List, I'm running a heavily loaded squid server that uses ntlm_auth to provide NTLM authentication. As load has increased over time, I've found the need to increase the number of ntlm_auth processes available to squid as well as the "winbind max clients" value in the smb.conf file. This has worked well up until now but seems I've hit some sort of limit. If I keep the

Hello, I'm trying to authenticate PPP (in fact l2tp...) users with Active Directory (windows server 2003 DCs, mixed-mode domain) using winbind / ntlm_auth. I'm using Samba 3.0.22, PPP 2.4.3, Kerberos 1.3.6, with Trustix 2.2 What works : - krb5kinit (and krb5klist -e) - net ads join - wbinfo -u, wbinfo -g, wbinfo -a user%pwd, wbinfo -p, wbinfo -t and wbinfo -m - getent passwd and

Hi all, I have just installed and configured a squid setup authenticating against Active Directory using kerberos tickets and have achieved the holy-grail of IT - Single Sign On! The problem is that I have two users for whom is does not work. The ntlm_auth logs show that for users that are properly authenticated against squid we get the following (Usernames/Domains/Hosts have been changed for

Hi, I'm using ntlm_auth to authenticate users in freeradius. My samba server is joined to DOMAINA. When I run ntlm_auth --username=domainauser everything works great. When I run ntlm_auth --username=domainbuser it fails because the user does not exist in domaina which the server is joined to. If I run ntlm_auth --username=domainbuser --domain=domainb it works great. I was wanting to do

I am trying to get FreeRADIUS using Samba's ntlm auth for MSCHAPv2 authentication. I asked this question over on the FreeRADIUS list, and I think the stunned silence means that the folks over there think you guys in the Samba world may be able to help better. I admit it's been a few years since I did any Samba! I have joined my two RADIUS servers (FreeRADIUS 2.0.2, Solaris 10 x86,

On Tue, 23 Jan 2024 17:07:35 -0500 Mark Foley via samba <samba at lists.samba.org> wrote: > On Mon Jan 22 11:00:59 2024 Mark Foley via samba > <samba at lists.samba.org> wrote: > > > > I have scripts that runs ntlm_auth. Before upgrading my DC to > > 4.18.9 I would get text string output from the ntlm_auth command. > > For example: > > > >

On Mon Jan 22 11:00:59 2024 Mark Foley via samba <samba at lists.samba.org> wrote: > > I have scripts that runs ntlm_auth. Before upgrading my DC to 4.18.9 I would > get text string output from the ntlm_auth command. For example: > > STATUS_NO_SUCH_USER > NT_STATUS_WRONG_PASSWORD > STATUS_OK > > My script(s) look for these strings. > > Now with the new

On Wed Jan 24 05:03:25 2024 Rowland Penny via samba <samba at lists.samba.org> wrote: > > On Tue, 23 Jan 2024 17:07:35 -0500 > Mark Foley via samba <samba at lists.samba.org> wrote: > > > On Mon Jan 22 11:00:59 2024 Mark Foley via samba > > <samba at lists.samba.org> wrote: > > > > > > I have scripts that runs ntlm_auth. Before upgrading

Hello all Im using a linux box running CentOS 4.1 as a proxy server with user auth with an AD Its working for a long time, but suddenly this weekend the users cant authenticate anymore looking on logs i obtain this Oct 10 08:29:59 sol (ntlm_auth): [2005/10/10 08:29:59, 0] utils/ntlm_auth.c:get_require_membership_sid(237) Oct 10 08:29:59 sol (ntlm_auth): Winbindd lookupname failed to resolve

Hi I use suse 10.0 and have problems to set up ntlm_auth for squid. It uses samba 3.0.20 and squid 2.5.stable10 I have set up winbind and everyhting seems to work. I've changes groupownerchip of /var/lib/samba/winbindd_privileged to squid. squid runs as group squid. Everyhting is working fine for several minutes. After a while it doesn't work anymore proxy:/var/log/samba #

That is client setup. We have that under control. Our Linux users use Network Manager to connect and our Windows users use the stuff built into Windows. My problem is server-side. The server is a PPTP VPN (running via pptpd) and I have to add the lines below to make it work. plugin winbind.so ntlm_auth-helper "/usr/bin/ntlm_auth --helper-protocol=ntlm-server-1" Now, that allows ALL

Hello, I am using ntlm_auth called from FreeRADIUS to authenticate users on a network with their Active Directory credentials. The problem I seem to be having is that ntlm_auth is taking longer than it should and I can't seem to get it to go faster reliably. Some background information: Users are connecting to a wireless network using 802.1x. That network sends requests to FreeRADIUS which

Ok I'm at a loss, I have 2 instances on winbindd / smbdd / nmbdd running (basically copied to install from samba-multiple-domains.blogspot .com but with my domains and ip's) But the issue I have is that even though both domains joined, and I can see all the winbinds and smbs running, and no errors in the logs, it appears that wbinfo / ntlm_auth only work with one of the units, no matter

I have scripts that runs ntlm_auth. Before upgrading my DC to 4.18.9 I would get text string output from the ntlm_auth command. For example: STATUS_NO_SUCH_USER NT_STATUS_WRONG_PASSWORD STATUS_OK My script(s) look for these strings. Now with the new Samba, the first two strings are output as usual in the case of non-existant user and invalid password, respectively, but if the user/pw is OK it

On 27-01-2024 11:56, Rowland Penny via samba wrote: > On Fri, 26 Jan 2024 22:22:49 -0500 > Mark Foley via samba<samba at lists.samba.org> wrote: > >> On Wed Jan 24 05:03:25 2024 Rowland Penny via samba >> <samba at lists.samba.org> wrote: >>> On Tue, 23 Jan 2024 17:07:35 -0500 >>> Mark Foley via samba<samba at lists.samba.org> wrote:

On Fri, 26 Jan 2024 22:22:49 -0500 Mark Foley via samba <samba at lists.samba.org> wrote: > On Wed Jan 24 05:03:25 2024 Rowland Penny via samba > <samba at lists.samba.org> wrote: > > > > On Tue, 23 Jan 2024 17:07:35 -0500 > > Mark Foley via samba <samba at lists.samba.org> wrote: > > > > > On Mon Jan 22 11:00:59 2024 Mark Foley via samba

Hi all, I'm trying to use ntlm_auth as authenticator of the freeradius mschap module. If I use ntlm_auth from command line with username and password, authentication works. If I use the same credentials with mschap on the logs I can see the challenge and nt-response and I can't understand if authentication fails because challenge and response are wrong or because ntlm_auth can't

Hi, I want to know how to use ntlm_auth with ntlm-server-1 and freeradius, with the users login and password information in ldap. I have read documentation of ntlm_auth (only found the man page), docs and howtos about pptp and squid, i don't found about freeradius, and i'm experimenting with the options of ntlm_auth. I have configured freeradius+ldap+802.1X for a wireless lan, but i

Hello my goal is to write an authentication module for the Symfony php framework, which would provide SSO capabilities to browsers that are logged in an MS AD domain and support the NTLMv2 protocol. Ideally this module would run on linux servers, and be portable, i.e. require as few non-php tools and network/firewall settings as possible (that's why I eschewed the existing Apache modules

I am not sure how to determine the separator, but 'which' shows "/usr/bin/ntlm_auth". I already ran it while on-site. Since it is broken, I cannot remote in. I will have to show up on-site again, possibly Thursday. Lead IT/IS Specialist Reach Technology FP, Inc On 10/27/2015 01:41 PM, Michael Wandel wrote: > Hey, > > On 27.10.2015 17:53, Ryan Ashley wrote: >>