Re: [squid-users] agin Samba3 Win 2003 and Squid 2.5 stable4

Arno

You are almost there...

If ntlm_auth works on the command line then what you have is a
permissions problem.

Check the group ownership on your winbind_priveleged directory. It
should be owned by the same group that squid runs as...

On Fri, 2003-11-28 at 10:15, Arno.STREULI@ca-indosuez.ch wrote:
> Hmm,
> It works !?!?
>
> bash-2.05# wbinfo -a login%password
> plaintext password authentication succeeded
> challenge/response password authentication succeeded
> bash-2.05#
>
> I just add the following line into my smb.conf
>
> winbind use default domain = Yes
>
>
> and this one still work:
> bash-2.05# /opt/samba/bin/ntlm_auth --username=login
> password:
> NT_STATUS_OK: Success (0x0)
>
> But still no luck in Squid: (not even a prompt for the password)
> cache.log:
> 2003/11/28 11:11:18| Ready to serve requests.
> [2003/11/28 11:11:34, 1] utils/ntlm_auth.c:manage_squid_request(1042)
> fgets() failed! dying..... errno=0 (Error 0)
> [2003/11/28 11:11:34, 1] utils/ntlm_auth.c:manage_squid_request(1042)
> fgets() failed! dying..... errno=0 (Error 0)
> [2003/11/28 11:11:34, 1] utils/ntlm_auth.c:manage_squid_request(1042)
> fgets() failed! dying..... errno=0 (Error 0)
> [2003/11/28 11:11:34, 1] utils/ntlm_auth.c:manage_squid_request(1042)
> fgets() failed! dying..... errno=0 (Error 0)
> [2003/11/28 11:11:34, 1] utils/ntlm_auth.c:manage_squid_request(1042)
> fgets() failed! dying..... errno=0 (Error 0)
> [2003/11/28 11:11:34, 1] utils/ntlm_auth.c:manage_squid_request(1042)
>
> access.log:
> bash-2.05# more access.log
> 1070014292.417 454 10.137.138.117 TCP_DENIED/407 1614 GET
> http://www.cisco.com/ - NONE/- text/html
> 1070014293.690 862 10.137.138.117 TCP_DENIED/407 1684 GET
> http://www.cisco.com/ - NONE/- text/html
>
>
> Will keep you inform if I find something...
>
>
> Regards,
>
> Arno
>
> Crédit Agricole Indosuez (Suisse) SA
> Chemin de Bérée 46-48, ch-1010 Lausanne 10
> Tél. +41 21 651.5215 - Fax +41 21 651.5251
> http://www.ca-indosuez.ch
>
>
>
>
> ******************************************************************
> DISCLAIMER - E-MAIL
> -------------------
> The information contained in this E-Mail is intended for the named
> recipient(s). It may contain certain privileged and confidential
> information, or information which is otherwise protected from
> disclosure. If you are not the intended recipient, you must not
> copy,distribute or take any action in reliance on this information
> ******************************************************************

-- 
Mark Taylor
Sirius
www.siriusit.co.uk
Tel +44 (0)1784 463644