[squid-users] NTLM authentification failed

From: GUILLEMOT Yann <yann.guillemot@dont-contact.us>
Date: Mon, 14 Apr 2003 16:12:32 +0200

Hello,

I am using squid 2.5 stable 1 with samba 2.2.5-10 (Redhat 8.0 RPM) and i
would like to authenticate my users with IE 5.5 SP2 by response/challenge
but it's not a succeed.

Also with netscape a basic authentification with wb_auth is good with pop-up
windows.

my squid conf with acl essai proxy_auth required

  auth_param ntlm program /usr/local/squid/libexec/wb_ntlmauth
  auth_param ntlm children 5
  auth_param ntlm max_challenge_reuses 0
  auth_param ntlm max_challenge_lifetime 2 minutes

  auth_param basic program /usr/local/squid/libexec/wb_auth
  auth_param basic children 5
  auth_param basic realm Squid proxy-caching web server
  auth_param basic credentialsttl 2 hours

wbinfo -t secret is good

wbinfo -u and -a are good.

I have do a debug and i have error messages : debug ALL,1 29,9

2003/04/14 16:00:57| authenticateValidateUser: Validating Auth_user request
'(nil)'.
2003/04/14 16:00:57| authenticateValidateUser: Auth_user_request was NULL!
2003/04/14 16:00:57| authenticateFixHeader: headertype:34 authuser:(nil)
2003/04/14 16:00:57| authenticateNTLMFixErrorHeader: Sending type:34 header:
'NTLM'
2003/04/14 16:00:57| authenticateAuthUserRequestLock auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateAuthUserRequestLock auth_user request
'0x8403dd8' now at '1'.
2003/04/14 16:00:57| authenticateDecodeAuth: header = 'NTLM
TlRMTVNTUAABAAAAB7IAAAYABgAoAAAACAAIACAAAABTVDAwMjg0MURPTVJFUw=='
2003/04/14 16:00:57| authenticateAuthUserLock auth_user '0x8403df0'.
2003/04/14 16:00:57| authenticateAuthUserLock auth_user '0x8403df0' now at
'1'.
2003/04/14 16:00:57| authenticateDecodeNTLMAuth: NTLM authentication
2003/04/14 16:00:57| authenticateValidateUser: Validating Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateValidateUser: Validated Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateValidateUser: Validating Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateValidateUser: Validated Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| User not fully authenticated.
2003/04/14 16:00:57| authenticateNTLMAuthenticateUser: auth state ntlm none.
NTLM TlRMTVNTUAABAAAAB7IAAAYABgAoAAAACAAIACAAAABTVDAwMjg0MURPTVJFUw==
2003/04/14 16:00:57| authenticateNTLMAuthenticateUser: Locking auth_user
from the connection.
2003/04/14 16:00:57| authenticateAuthUserRequestLock auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateAuthUserRequestLock auth_user request
'0x8403dd8' now at '2'.
2003/04/14 16:00:57| authenticateValidateUser: Validating Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateValidateUser: Validated Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| User not fully authenticated.
2003/04/14 16:00:57| authenticateValidateUser: Validating Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateValidateUser: Validated Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateStart: auth_user_request '0x8403dd8'
2003/04/14 16:00:57| authenticateNTLMStart: auth state '1'
2003/04/14 16:00:57| authenticateNTLMStart: state '1'
2003/04/14 16:00:57| authenticateNTLMStart:
'TlRMTVNTUAABAAAAB7IAAAYABgAoAAAACAAIACAAAABTVDAwMjg0MURPTVJFUw=='
2003/04/14 16:00:57| authenticateNTLMHelperServerAvailable: not starving -
returning 1
2003/04/14 16:00:57| authenticateNTLMChangeChallenge_p: Challenge uses (1)
exceeded max uses (0)
2003/04/14 16:00:57| authenticateNTLMHelperServerOnEmpty: resetting
challenge details
2003/04/14 16:00:57| authenticateNTLMHelperServerAvailable: not starving -
returning 1
2003/04/14 16:00:57| authenticateNTLMChangeChallenge_p: first use
2003/04/14 16:00:57| authenticateNTLMStart: helper '0x821b718' assigned
2003/04/14 16:00:57| authenticateNTLMValidChallenge: Challenge is Invalid
2003/04/14 16:00:57| authenticateNTLMHandleReply: Helper: '0x821b718' {TT
TlRMTVNTUAACAAAABgAGACgAAACCgkEAYfW4PgviMF8AAAAAAAAAAERPTVJFUw==}
2003/04/14 16:00:57| authenticateNTLMHandleReply: helper '0x821b718'
2003/04/14 16:00:57| authenticateValidateUser: Validating Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateValidateUser: Validated Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateValidateUser: Validating Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateValidateUser: Validated Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| User not fully authenticated.
2003/04/14 16:00:57| authenticateValidateUser: Validating Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateValidateUser: Validated Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| User not fully authenticated.
2003/04/14 16:00:57| authenticateValidateUser: Validating Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateValidateUser: Validated Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| User not fully authenticated.
2003/04/14 16:00:57| authenticateAuthUserRequestUnlock auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateAuthUserRequestUnlock auth_user_request
'0x8403dd8' now at '1'.
2003/04/14 16:00:57| authenticateAuthUserRequestLock auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateAuthUserRequestLock auth_user request
'0x8403dd8' now at '2'.
2003/04/14 16:00:57| authenticateFixHeader: headertype:34 authuser:0x8403dd8
2003/04/14 16:00:57| authenticateValidateUser: Validating Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateValidateUser: Validated Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| User not fully authenticated.
2003/04/14 16:00:57| authenticateNTLMFixErrorHeader: Sending type:34 header:
'NTLM TlRMTVNTUAACAAAABgAGACgAAACCgkEAYfW4PgviMF8AAAAAAAAAAERPTVJFUw=='
2003/04/14 16:00:57| authenticateAuthUserRequestUnlock auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateAuthUserRequestUnlock auth_user_request
'0x8403dd8' now at '1'.
2003/04/14 16:00:57| NTLM HandleReply, telling stateful helper : 3
2003/04/14 16:00:57| authenticateNTLMHelperServerAvailable: not starving -
returning 1
2003/04/14 16:00:57| authenticateValidateUser: Validating Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateValidateUser: Validated Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| User not fully authenticated.
2003/04/14 16:00:57| authenticateAuthUserRequestLock auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateAuthUserRequestLock auth_user request
'0x8403dd8' now at '2'.
2003/04/14 16:00:57| authenticateValidateUser: Validating Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateValidateUser: Validated Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| User not fully authenticated.
2003/04/14 16:00:57| authenticateNTLMAuthenticateUser: auth state challenge
with header NTLM
TlRMTVNTUAADAAAAGAAYAFIAAAAYABgAagAAAAYABgBAAAAABAAEAEYAAAAIAAgASgAAAAAAAACC
AAAAAoIBAERPTVJFU1lBTk5TVDAwMjg0MbhpX11Yzt4gwgC+OcRP4zyTlkN6oWM7sVo+qIiPZAUe
EUK3ETvMcD3Q6kG9I1rEIg==.
2003/04/14 16:00:57| aclMatchProxyAuth: cache lookup with key 'NTLM
TlRMTVNTUAADAAAAGAAYAFIAAAAYABgAagAAAAYABgBAAAAABAAEAEYAAAAIAAgASgAAAAAAAACC
AAAAAoIBAERPTVJFU1lBTk5TVDAwMjg0MbhpX11Yzt4gwgC+OcRP4zyTlkN6oWM7sVo+qIiPZAUe
EUK3ETvMcD3Q6kG9I1rEIg==TlRMTVNTUAACAAAABgAGACgAAACCgkEAYfW4PgviMF8AAAAAAAAA
AERPTVJFUw=='
2003/04/14 16:00:57| authenticateNTLMAuthenticateUser: proxy-auth cache
miss.
2003/04/14 16:00:57| authenticateValidateUser: Validating Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateValidateUser: Validated Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| User not fully authenticated.
2003/04/14 16:00:57| authenticateValidateUser: Validating Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateValidateUser: Validated Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateStart: auth_user_request '0x8403dd8'
2003/04/14 16:00:57| authenticateNTLMStart: auth state '3'
2003/04/14 16:00:57| authenticateNTLMStart: Asking NTLMauthenticator
'0x821b718'.
2003/04/14 16:00:57| authenticateNTLMStart: state '3'
2003/04/14 16:00:57| authenticateNTLMStart:
'TlRMTVNTUAADAAAAGAAYAFIAAAAYABgAagAAAAYABgBAAAAABAAEAEYAAAAIAAgASgAAAAAAAAC
CAAAAAoIBAERPTVJFU1lBTk5TVDAwMjg0MbhpX11Yzt4gwgC+OcRP4zyTlkN6oWM7sVo+qIiPZAU
eEUK3ETvMcD3Q6kG9I1rEIg=='
2003/04/14 16:00:57| authenticateNTLMstart: finished
2003/04/14 16:00:57| authenticateNTLMHandleReply: Helper: '0x821b718' {NA
DOMRES\YANN auth failure because: Authentication Failure ()}
2003/04/14 16:00:57| authenticateNTLMHandleReply: Error validating user via
NTLM. Error returned 'NA DOMRES\YANN auth failure because: Authentication
Failure ()'
2003/04/14 16:00:57| authenticateValidateUser: Validating Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateValidateUser: Validated Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateValidateUser: Validating Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateValidateUser: Validated Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| User not fully authenticated.
2003/04/14 16:00:57| authenticateValidateUser: Validating Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateValidateUser: Validated Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| User not fully authenticated.
2003/04/14 16:00:57| authenticateNTLMAuthenticateUser: auth state ntlm
failed. NTLM
TlRMTVNTUAADAAAAGAAYAFIAAAAYABgAagAAAAYABgBAAAAABAAEAEYAAAAIAAgASgAAAAAAAACC
AAAAAoIBAERPTVJFU1lBTk5TVDAwMjg0MbhpX11Yzt4gwgC+OcRP4zyTlkN6oWM7sVo+qIiPZAUe
EUK3ETvMcD3Q6kG9I1rEIg==
2003/04/14 16:00:57| authenticateValidateUser: Validating Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateValidateUser: Validated Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| User not fully authenticated.
2003/04/14 16:00:57| authenticateAuthUserRequestUnlock auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateAuthUserRequestUnlock auth_user_request
'0x8403dd8' now at '1'.
2003/04/14 16:00:57| authenticateAuthUserRequestLock auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateAuthUserRequestLock auth_user request
'0x8403dd8' now at '2'.
2003/04/14 16:00:57| authenticateFixHeader: headertype:34 authuser:0x8403dd8
2003/04/14 16:00:57| authenticateValidateUser: Validating Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateValidateUser: Validated Auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| User not fully authenticated.
2003/04/14 16:00:57| authenticateNTLMFixErrorHeader: Sending type:34 header:
'NTLM'
2003/04/14 16:00:57| authenticateAuthUserRequestUnlock auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateAuthUserRequestUnlock auth_user_request
'0x8403dd8' now at '1'.
2003/04/14 16:00:57| NTLM HandleReply, telling stateful helper : 2
2003/04/14 16:00:57| authenticateNTLMHelperServerAvailable: not starving -
returning 1
2003/04/14 16:00:57| authenticateAuthUserRequestUnlock auth_user request
'0x8403dd8'.
2003/04/14 16:00:57| authenticateAuthUserRequestUnlock auth_user_request
'0x8403dd8' now at '0'.
2003/04/14 16:00:57| authenticateAuthUserRequestFree: freeing request
0x8403dd8
2003/04/14 16:00:57| authenticateAuthUserUnlock auth_user '0x8403df0'.
2003/04/14 16:00:57| authenticateAuthUserUnlock auth_user '0x8403df0' now at
'0'.
2003/04/14 16:00:57| authenticateFreeProxyAuthUser: Freeing auth_user
'0x8403df0' with refcount '0'.
2003/04/14 16:00:57| authenticateNTLMFreeUser: Clearing NTLM scheme data

Anybody could you help me ?

Thanks.

                  _\\
                 | oo |
-------------------------------nn--o--nn---------------------
| Yann Guillemot |
| Lactalis Informatique - service réseau |
| tel : 02 43 59 51 50 |
| fax : 02 43 59 27 61 |
-----------------------------------------------------------------
Received on Mon Apr 14 2003 - 08:11:46 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:14:58 MST