Re: [squid-users] newer kerberos breaks ntlm

From: Cardon Denis <[email protected]>
Date: Fri, 13 Oct 2006 13:03:51 +0200

Hi Chris,
> Which versions of kerberos are compatible with ntlm authentication in squid 2.5? Up to now, I have compiled samba with kerberos 1.3.6, as more recent versions appear to break ntlm authentication.
>
> Running the command wbinfo -t after compiling samba with the newer kerberos version returns a working response.
>
> However, as my organisation is now adopting x86_64 based servers, this has become an issue, as 1.3.6 will not compile on this architecture. Any suggestions?
>
I have no answer for your problem (yet :-), but I am quite interested to
know how you set up a working kerberos ntlm authentication, both on
server side and client side. If you could describe your configuration in
a few lines, I think it would be very interesting for all the linux
users that would like to achieve transparent authentication (or windows
users that would like to avoid standard ntlm auth). What version of
samba did you use? It seems that you use MIT kerberos implementation, so
it is probably not samba 4. Would it be possible for you to provide a
few sample configuration files, and a few hints on how to achieve this?

Thanks a lot

Denis

> Chris Vaughan
> Department of Lands
>
>
>
>
> ***************************************************************
> This message is intended for the addressee named and may contain confidential information. If you are not the intended recipient, please delete it and notify the sender.
>
> Views expressed in this message are those of the individual sender, and are not necessarily the views of the Department of Lands.
>
> This email message has been swept by MIMEsweeper for the presence of computer viruses.
> ***************************************************************
>
>

-- 
Denis Cardon
Tranquil IT Systems
10 rue du Docteur Bouchard
49400 Saumur
tel : +33 (0) 2.41.67.56.99
fax : +33 (0) 2.40.56.09.81
mob : +33 (0) 6 81 66 27 62
http://www.tranquil-it-systems.fr
Received on Fri Oct 13 2006 - 05:05:42 MDT

This archive was generated by hypermail pre-2.1.9 : Wed Nov 01 2006 - 12:00:04 MST