RE: [squid-users] ntlm_auth again... :(

I can't remember for sure what happened when I tried the ntlm_auth
--helper-protocol=squid-2.5-basic test, but I do know that I've seen 2
things cause a popup authentication window that still fails when proper
credentials are entered:

1. Netlogon service not running on AD server (unlikely, but it happened to
me recently)

2. You have not provided Squid permission to the winbindd privileged pipe.

For the latter, in my case:

chown root:squid /var/cache/samba/winbindd_privileged
chmod 750 /var/cache/samba/winbindd_privileged

did the trick. As soon as I performed this forgotten step, authentication
worked.

Geoff

-----Original Message-----
From: Fernando Lujan [mailto:fernando.lujan@terra.com.br]
Sent: Friday, January 20, 2006 11:56 AM
To: squid-users
Subject: [squid-users] ntlm_auth again... :(

Hi all,

I'm trying to make squid works with my Samba PDC.

The command:

root@squid~# ntlm_auth --helper-protocol=squid-2.5-basic
xxx+root #####
OK

But The squid always pop-up for a username password, no matter how many
different
users/passwords I try.

Here is:

auth_param ntlm program /usr/bin/ntlm_auth
--helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 30
auth_param ntlm max_challenge_reuses 0
auth_param ntlm max_challenge_lifetime 2 minutes
auth_param basic program /usr/bin/ntlm_auth
--helper-protocol=squid-2.5-basic
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours

Thanks in advance.

Fernando Lujan
Received on Fri Jan 20 2006 - 16:08:15 MST