[squid-users] Re: squid3 NTLM cant find the user but wbinfo does

From: Douglas Santos <mlist_at_corelabs.com.br>
Date: Tue, 15 Jun 2010 14:08:45 -0300

Sniffing the connection I got:
--------------------------[cut]----------------------
    Proxy-Authorization: NTLM
TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAFASgKAAAADw==\r\n
        NTLMSSP
            NTLMSSP identifier: NTLMSSP
            NTLM Message Type: NTLMSSP_NEGOTIATE (0x00000001)
            Flags: 0xa2088207
----...all flags not set ommited...----
Negotiate 56: Set
Negotiate 128: Set
Negotiate 0x02000000: Set
Negotiate NTLM2 key: Set
Negotiate Always Sign: Set
Negotiate NTLM key: Set
Request Target: Set
Negotiate OEM: Set
Negotiate UNICODE: Set
----...all flags not set ommited...----
            Calling workstation domain: NULL
            Calling workstation name: NULL
    \r\n

appears to be THAT my problem.
any clue about?

2010/6/15 Douglas Santos <mlist_at_corelabs.com.br>:
> Hi folks,
> i'm with this problem during a few days, and i'm getting nuts! :D
>
> I'm using:
> debian 5.0.4
> squid3.0.STABLE8 (default by debian apt repositories)
> Samba 3.2.5
> kerberos5
>
> I'm trying to implement the users automatic authentication by use
> ntlm_auth with Active Directory 2008.
> Well, all it's working fine (really), from my shell i got wbinfo
> answers, with ntlm_auth helper basic i got "sucess" answer (i've not
> tried using ntlmssp because i cannot found the correct query on
> google).
>
> but when I tried to get web from browser i got this message on cache.out:
> ----------------------------------------------------------[cut]------------------------------------------------------------------------
> [2010/06/15 10:23:36,  3] utils/ntlm_auth.c:check_plaintext_auth(328)
>  NT_STATUS_NO_SUCH_USER: No such user (0xc0000064)
> 2010/06/15 10:23:36| storeDirWriteCleanLogs: Starting...
> 2010/06/15 10:23:36| WARNING: Closing open FD   65
> 2010/06/15 10:23:36|   Finished.  Wrote 0 entries.
> 2010/06/15 10:23:36|   Took 0.00 seconds (  0.00 entries/sec).
> FATAL: authenticateNTLMHandleReply: *** Unsupported helper response ***, 'ERR'
>
> Squid Cache (Version 3.0.STABLE8): Terminated abnormally.
> ----------------------------------------------------------[cut]------------------------------------------------------------------------
>
> Here is my ntlm's squid.conf line:
> ----------------------------------------------------------[cut]------------------------------------------------------------------------
> auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
> ----------------------------------------------------------[cut]------------------------------------------------------------------------
>
> Test from shell:
> # ntlm_auth --username=douglas --nt-response
> password:
> NT_STATUS_OK: Success (0x0)
> #
>
> # wbinfo -u
> administrator
> guest
> krbtgt
> douglas
> #
>
> Someone blessed with a good heart could help me on this? :)
>
> thanks.
> --
> -- Douglas dos Santos
>

-- 
-- Douglas dos Santos
Received on Tue Jun 15 2010 - 17:08:52 MDT

This archive was generated by hypermail 2.2.0 : Wed Jun 16 2010 - 12:00:03 MDT