similar to: Probleme Winbind:

Hi List, I'm running a heavily loaded squid server that uses ntlm_auth to provide NTLM authentication. As load has increased over time, I've found the need to increase the number of ntlm_auth processes available to squid as well as the "winbind max clients" value in the smb.conf file. This has worked well up until now but seems I've hit some sort of limit. If I keep the

Hi,guys . I implement HTTP Proxy running in Linux environment and my proxy have to support NTLM authentication. My proxy written in C++. I try to use _squid-ntlm helper _according to *http://devel.squid-cache.org/ntlm/squid_helper_protocol.html . So *I run helper like this *system ("ntlm_auth -d=10 --helper-protocol=squid-2.5-ntlmssp"*); and implemented its protocol (see

Hi List, Hunting around Google I've found a couple of references to using "winbindd: socket dir" in smb.conf to allow multiple winbindd instances to run but can't seem to find any doco on this feature. I have tried adding this to my smb.conf file but when I try to use ntlm_auth with this configuration any authentication fails and it returns: ntlm_auth --username=testusr

Hello all, I'm sorry if my question doesn't match to this list but I don't know where I can find an answer. To resume my situation, I'm using samba and more particularly ntlm_auth to ask an active directory database from my radius server. I arrived to authenticate a user yesterday but I can't today and I find it's due to the ntlm_auth . I try only the ntlm_auth commands

Hi everyone, We just upgraded Samba from 4.4.5 to 4.6.5 and appear to be experiencing a problem with authentication, when the RPC domain is not supplied as part of the username. I have two scenarios where this has cropped up: RADIUS authentication using ntlm_auth Apache HTTP using mod_auth_ntlm_winbind RADIUS authentication: We use the freeRADIUS 'mschap' module to provide

Hi Anyone know my problems ? i don't have receive a answer or idea ;=< ================================================= I have upgraded from 3.0.14a to 3.0.20b and now when i put wbinfo -u or wbinfo -g i have a error message : [root@gw samba]# wbinfo -g Error looking up domain groups [root@gw samba]# wbinfo -u Error looking up domain users [root@gw samba]# and into the log.winbind:

Hil list! I'm trying to authenticate Active Directory Users via freeradius. I can do it in a general case (user and domain) without problem. Now I have to do it restricting the authentication to the members of a group. I can exect the script (as is put in radiusd.conf) correct from the command line: Deb:~# /usr/bin/ntlm_auth --username=javi2 --require-membership-of='AAMM\MyGroup'

Hello all Im using a linux box running CentOS 4.1 as a proxy server with user auth with an AD Its working for a long time, but suddenly this weekend the users cant authenticate anymore looking on logs i obtain this Oct 10 08:29:59 sol (ntlm_auth): [2005/10/10 08:29:59, 0] utils/ntlm_auth.c:get_require_membership_sid(237) Oct 10 08:29:59 sol (ntlm_auth): Winbindd lookupname failed to resolve

Hello, I tried various settings to authenticate my PPP (l2tp) users via winbind (ntlm_auth), without success... I use ppp 2.4.3 and Samba 3.0.22-2tr. My distribution is Trustix 2.2 What is working : - mschapv2 authentication with chap-secrets (nomppe, novj, novjccomp) - wbinfo -g, wbinfo -u, getent passwd and getent group - net ads info and net ads status - ntlm_auth --username X

The Samba team recommends to use their "ntlm_auth" command line helper for "NTLM" and "GSS-SPNEGO" authentication. This helper interacts with the Samba's winbind daemon, and this way can authenticate users against NT or Active Directory windows domain. Currently Dovecot can do "NTLM" authentication too, but just "locally" (against a local

hum... thanks Achim.... I think this is more reasonable to my scenario.... I will try! 2016-08-30 11:48 GMT-03:00 Achim Gottinger via samba <samba at lists.samba.org> : > > > Am 30.08.2016 um 15:05 schrieb Gilberto Nunes via samba: > >> Hello list... >> >> I have samba 4.1.17 installed and in the same server, I have l2tp. >> Samba it configurated as

I am trying to setup unified logons to my VPN users. My goal is to get rid of chap.secrets file and use winbind to authenticate against tdbsam password backend located in the PDC (Fedora Core 1) running with Samba 3.0.21pre1. I have tried with older Samba versions without success. Using winbind should allow password changes from the Windows XP Pro -client using CTRL+ALT+DEL. Smb.conf,

Hi, I'm struggling to get squid+ntlm_auth working correctly. I have successfully joined the domain, and I am able to successfully enumerate groups and users using wbinfo. I can also successfully run "wbinfo -a." However, once I configure Squid to use ntlm_auth per: auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp --debug-level=10 --nt-response

Hi anyone know this error: Mar 20 12:01:06 gw winbindd[14756]: [2009/03/20 12:01:06, 0] sam/idmap_tdb.c:db_allocate_id(106) Mar 20 12:01:06 gw winbindd[14756]: idmap Fatal Error: UID range full!! (max: 20000) Mar 20 12:01:06 gw winbindd[14756]: [2009/03/20 12:01:06, 0] sam/idmap_tdb.c:db_allocate_id(106) Mar 20 12:01:06 gw winbindd[14756]: idmap Fatal Error: UID range full!! (max: 20000)

Hai,   Im setting up a new proxy and im testing a bit around. Goal is, get everyting working with minimal changes to the system.   Setup: Debian 8 with NFS nfsv3 and v4 (krb) automounts,  winbind 4.5.3 , squid 3.5.24 (with ssl support) Which is basicly a copy of my other proxy but a new install with more systemd and less packages used.   Working: -          ssh logins with AD users.

Hello list... I have samba 4.1.17 installed and in the same server, I have l2tp. Samba it configurated as active directory domain controller. I am trying authetication against samba with winbind. I want to know how to restrict authentication for certain group. I put this line in the end of l2tp conf file: ntlm_auth-helper '/usr/bin/ntlm_auth --helper-protocol=ntlm-server-1

Ok I'm at a loss, I have 2 instances on winbindd / smbdd / nmbdd running (basically copied to install from samba-multiple-domains.blogspot .com but with my domains and ip's) But the issue I have is that even though both domains joined, and I can see all the winbinds and smbs running, and no errors in the logs, it appears that wbinfo / ntlm_auth only work with one of the units, no matter

Hello, I''m new to Xen and especially to the hypervisor code. I''m working off a 3.0.4.1 base and have the following questions regarding the memory management code for an x86, 32-bit platform (capable of supporting PAE). I''m doing some research into providing grant table hypercall support from a Windows 2003 HVM. I have made all the necessary changes to allow the

Hello, I'm trying to use ntlm_auth and winbindd to authenticate users against a Windows 2003 AD server. Despite having "disable netbios yes", winbindd insists on doing one NetBIOS exchange on UDP port 138 on startup. If I block this port "wbinfo -t", "wbinfo -a username", and ntlm_auth request fail with: error code was NT_STATUS_INVALID_COMPUTER_NAME

Hello I've already tried to post this question some time ago, maybe this time somebody could help me. I try to authenticate users using FreeRadius in few AD forests. The problem is as follows - it is possible to have multiple winbind instances, each binded to a different AD domain and each being interacted by a different instance of ntlm_auth? Or maybe it is possible to bind one winbinnd to