Re: [squid-users] Fw: NTLM authenication problem

From: George Dominguez <[email protected]>
Date: Fri, 21 Mar 2003 14:34:00 +1100

This are the options I configured squid with:

configure options:

--enable-auth=ntlm, basic
--enable-basic-auth-helpers=winbind
--enable-ntlm-auth-helpers=winbind
--enable-gnuregex

Also, if you are using Squid Cache: Version 2.5.STABLE1- don't forget to
copy the helpers from the samba source to squid before configure.

Squid-2.5.STABLE1 works with Samba 2.2.4 or 2.2.5. With Samba 2.2.6, the
winbindd interface changed and Squid 2.5.STABLE1 will not work as
distributed. Replacing the winbindd_nss.h file in Squid's
helpers/basic_auth/winbind, helpers/ntlm_auth/winbind and
helpers/external_acl/winbind_group/ directories with the version in Samba's
source/nsswitch directory is needed for the helpers to work properly.

http://www.squid-cache.org/Doc/FAQ/FAQ-23.html#ss23.5

Regards
George

                                                                                                          
                      "H"
                      <h@siukeung.com> To: "squid-users" <squid-users@squid-cache.org>
                                               cc:
                      20/03/2003 03:22 Subject: Re: [squid-users] Fw: NTLM authenication problem
                      PM
                                                                                                          
                                                                                                          

oh, when i test it with wbinfo like
wbinfo -a domain\\user%password

it just return plaintext password ok, haven't test with challenge.
but i have built the samba with --with-winbind-auth-challenge
is there any miss for configing the samba ?

thanks for advice

----- Original Message -----
From: "Simon Bryan" <sbryan@olmc.nsw.edu.au>
To: "H" <h@siukeung.com>
Sent: Wednesday, March 19, 2003 5:32 PM
Subject: RE: [squid-users] Fw: NTLM authenication problem

> and the command line tests indicated that it was workng correctly?
>
> > -----Original Message-----
> > From: H [mailto:h@siukeung.com]
> > Sent: Wed, 19. March 2003 7:31 PM
> > To: squid-users
> > Subject: Re: [squid-users] Fw: NTLM authenication problem
> >
> >
> > i've build samba with this options
> >
> > --with-winbind
> > --with-winbind-auth-challenge (needed for ntlm)
> >
> > ----- Original Message -----
> > From: "Simon Bryan" <sbryan@olmc.nsw.edu.au>
> > To: "H" <h@siukeung.com>
> > Sent: Wednesday, March 19, 2003 4:28 PM
> > Subject: RE: [squid-users] Fw: NTLM authenication problem
> >
> >
> > > Did you build Samba with the -with-nt-auth-challenge (or
> > similar) option?
> > >
> > > > -----Original Message-----
> > > > From: H [mailto:h@siukeung.com]
> > > > Sent: Wed, 19. March 2003 6:49 PM
> > > > To: squid-users
> > > > Subject: [squid-users] Fw: NTLM authenication problem
> > > >
> > > >
> > > > Hi All,
> > > >
> > > > I've got a problem of using NTLM authenication. I've follow the
> > > > intruction at FAQ
> > > > http://www.squid-cache.org/Doc/FAQ/FAQ-23.html#ss23.5 to
> > > > configure the samba, winbindd and squid.
> > > >
> > > > i can test the winbindd user authentication and return ok
> > > > i can test the wb_auth helpers and return ok.
> > > >
> > > > but when I test with IE, a password dialog is appear and ask me
> > > > to enter the username,password and domain. it can't let me through
> > > > even I have enter a correct password.
> > > >
> > > > Please help!!!
> > > >
> > > > Thanks!!
> > > >
> > >
>

=====================================================
Privileged/Confidential Information may be contained in this message. If
you are not the addressee (or responsible for delivery of the message to
the addressee), you may not copy or deliver this message to anyone. In such
a case, you should destroy this message and kindly notify the sender by
reply e-mail. Opinions, conclusions and other information in this message
that do not relate to the official business of my employer shall be
understood as neither given nor endorsed by it.
Received on Thu Mar 20 2003 - 20:30:29 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:14:12 MST