[squid-users] squid3 NTLM cant find the user but wbinfo does

From: Douglas Santos <mlist_at_corelabs.com.br>
Date: Tue, 15 Jun 2010 12:56:30 -0300

Hi folks,
i'm with this problem during a few days, and i'm getting nuts! :D

I'm using:
debian 5.0.4
squid3.0.STABLE8 (default by debian apt repositories)
Samba 3.2.5
kerberos5

I'm trying to implement the users automatic authentication by use
ntlm_auth with Active Directory 2008.
Well, all it's working fine (really), from my shell i got wbinfo
answers, with ntlm_auth helper basic i got "sucess" answer (i've not
tried using ntlmssp because i cannot found the correct query on
google).

but when I tried to get web from browser i got this message on cache.out:
----------------------------------------------------------[cut]------------------------------------------------------------------------
[2010/06/15 10:23:36, 3] utils/ntlm_auth.c:check_plaintext_auth(328)
  NT_STATUS_NO_SUCH_USER: No such user (0xc0000064)
2010/06/15 10:23:36| storeDirWriteCleanLogs: Starting...
2010/06/15 10:23:36| WARNING: Closing open FD 65
2010/06/15 10:23:36| Finished. Wrote 0 entries.
2010/06/15 10:23:36| Took 0.00 seconds ( 0.00 entries/sec).
FATAL: authenticateNTLMHandleReply: *** Unsupported helper response ***, 'ERR'

Squid Cache (Version 3.0.STABLE8): Terminated abnormally.
----------------------------------------------------------[cut]------------------------------------------------------------------------

Here is my ntlm's squid.conf line:
----------------------------------------------------------[cut]------------------------------------------------------------------------
auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
----------------------------------------------------------[cut]------------------------------------------------------------------------

Test from shell:
# ntlm_auth --username=douglas --nt-response
password:
NT_STATUS_OK: Success (0x0)
#

# wbinfo -u
administrator
guest
krbtgt
douglas
#

Someone blessed with a good heart could help me on this? :)

thanks.

-- 
-- Douglas dos Santos
Received on Tue Jun 15 2010 - 15:56:41 MDT

This archive was generated by hypermail 2.2.0 : Tue Jun 15 2010 - 12:00:03 MDT