[squid-users] msnt_auth is not working

From: Muthu <cmuthu@dont-contact.us>
Date: Tue, 16 Aug 2005 19:17:16 +0530

Hi,

   I am using squid 2.5.STABLE10 in Linux gentoo.I am trying to
authenticate the client by my windows2000 server(configured as primary
domain controller).If I type right password also from the
client(Username used is muthu), it is not working.

 

1.I am getting the error in the /var/log/everything/current

Aug 16 18:46:22 [msnt_auth] Server error when checking muthu.
Aug 16 18:46:22 [msnt_auth] 'muthu' login failed

2. in the /var/log/squid/accesslog

1124198282.109 4 192.168.0.2 TCP_DENIED/407 1732 GET
http://mail.yahoo.com/ muthu NONE/- text/html

3.I have the following settings in the squid.conf

acl all proxy_auth REQUIRED

auth_param basic program /usr/lib/squid/msnt_auth
auth_param basic children 4
auth_param basic realm icusindia
auth_param basic credentialsttl 5
auth_param basic children 20

http_access allow all

Note: I am able to browse with the ncsa authentication(with
corresponding config changes in the squid.conf).

4. I have following setting in the /etc/squid/msntauth.conf

server in.icus.net icus-svr01 icusindia
allowusers /etc/squid/msntauth.allowuser

Note: I have put the entry in the /etc/hosts for the domain name
resolving.I have the username in the msntauth.allowuser.

5. squid compilation options are

Squid Cache: Version 2.5.STABLE10
configure options: --prefix=/usr --bindir=/usr/bin --exec-prefix=/usr
--sbindir=/usr/sbin --localstatedir=/var --mandir=/usr/share/man
--sysconfdir=/etc/squid--libexecdir=/usr/lib/squid
--enable-auth=basic,digest,ntlm --enable-removal-policies=lru,heap
--enable-digest-auth-helpers=password
--enable-basic-auth-helpers=PAM,getpwnam,YP,NCSA,SMB,MSNT,multi-domain-NTLM,winbind
--enable-external-acl-helpers=ip_user,unix_group,wbinfo_group,winbind_group
--enable-ntlm-auth-helpers=SMB,fakeauth,no_check,winbind
--enable-linux-netfilter --enable-ident-lookups --enable-useragent-log
--enable-cache-digests --enable-delay-pools --enable-referer-log
--enable-truncate --enable-arp-acl --with-pthreads --with-large-files
--enable-htcp --enable-carp --enable-poll --host=i686-pc-linux-gnu
--disable-snmp --enable-ssl --enable-storeio='ufs,diskd,coss,aufs,null'
--enable-async-io

6. I have tried the msnt_auth from the commandline

gw8 root # /usr/lib/squid/msnt_auth
(I am pressing here enter)
ERR
muthu password ( I am tying here the real domain user name and the password)
ERR

Can sombody help me on this

Regards,
Muthu.
cmuthu@naturesoft.net
Received on Tue Aug 16 2005 - 07:47:00 MDT

This archive was generated by hypermail pre-2.1.9 : Thu Sep 01 2005 - 12:00:02 MDT