RE: [squid-users] NTLM authentication with winbind - problem (but basic winbind works) ( Samba , wb_info , with-winbind-auth-challenge )

From: Ken Thomson <Ken.Thomson@dont-contact.us>
Date: Thu, 3 Jul 2003 10:56:54 +1000

Thanks Henrik,

That was the problem. As usual - human error, I didn't read the FAQ
carefully enough. I just assumed that because wbinfo and wb_auth
worked, then Samba was setup correctly. Big mistake :-) After
installing Samba from source instead of the RPM packages and making sure
I enabled -with-winbind-auth-challenge, everything seems to be working.

Don't know if this is a help to anyone - but here are the configure
options I used for Samba to make it install as similar as possible to
the RedHat RPMS...

./configure --prefix=/usr \
            --sbindir=/usr/sbin \
            --bindir=/usr/bin \
            --libdir=/usr/lib/samba \
            --mandir=/usr/share/man \
            --infodir=/usr/share/info \
            --libexecdir=/usr/lib/samba \
            --with-privatedir=/etc/samba \
            --with-configdir=/etc/samba \
            --with-logfilebase=/var/log/samba \
            --with-codepagedir=/usr/share/samba/codepages \
            --with-lockdir=/var/spool/samba \
            --with-piddir=/var/spool/samba \
            --localstatedir=/var/spool/samba \
            --with-libdir=/usr/lib/samba \
            --with-winbind \
            --with-winbind-auth-challenge

There doesn't seem to be a way to disable SWAT - so I just deleted it.

-----Original Message-----
From: Henrik Nordstrom [mailto:hno@squid-cache.org]
Sent: Thursday, 3 July 2003 5:25 AM
To: Ken Thomson; squid-users@squid-cache.org
Subject: Re: [squid-users] NTLM authentication with winbind - problem
(but basic winbind works)

On Tuesday 01 July 2003 08.56, Ken Thomson wrote:

> ./configure --prefix=/root/newsquid/squid \
[...]

You should probably be using --with-samba-sources=... to specify to
Squid where your Samba sources can be found.

Also make sure to verify that your samba understands
challenge-response authentication. (see the Squid FAQ).

Regards
Henrik

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org
If you need commercial Squid support or cost effective Squid or firewall
appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, info@marasystems.com
Received on Wed Jul 02 2003 - 18:57:06 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:17:48 MST