[squid-users] RE: Re: Winbind authentication (HELP)

Please don't top post (which is putting your reply above the original
message).

Herman (ISTD) wrote:

> But there is something very weird that I cannot authenticate squid with
> winbind.
>
> The winbind is working correctly :
> [root@mx logs]# /usr/local/samba/bin/wbinfo -t
> checking the trust secret via RPC calls succeeded
> [root@mx logs]# /usr/local/samba/bin/ntlm_auth
> --helper-protocol=squid-2.5-basic
> mydomain+myuser mypassword
> OK

Good, though that's an odd separator to use for winbind.

> The configuration of squid.conf, is correct also (I think so) :
>
> auth_param basic program /usr/local/samba/bin/ntlm_auth
> --helper-protocol=squid-2.5-basic
> auth_param basic children 5
> auth_param basic realm Squid proxy-caching web server
> auth_param basic credentialsttl 2 hours

These settings look fine.

> But I always got denied, and here is the access.log in squid :
> 1086587020.578 12 10.32.4.45 TCP_DENIED/407 1735 GET
> http://www.google.com/search? mydomain\myuser NONE/- text/html

When you login at the authentication prompt, how are you entering your
username and password - like this:

domain+username
password

Or something else?

Adam
Received on Wed Jun 16 2004 - 14:51:22 MDT