Re: [squid-users] Authentification via samba 3.0 to an active directory server

Markus Meissner <mm645380@meissner.IT> writes:

[...]

> - The last resort: Using the new ntlm_auth provided by the samba-team.
> Using this from the command-line works, wow (NT_STATUS_OK: Success
> (0x0)).
> But integrating it in squid leads to the following error:
> [2003/08/12 15:19:37, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(282)
> Got user=[ADMINISTRATOR] domain=[MYDOM] workstation=[LAPTOP01] len1=24
> len2=24
> [2003/08/12 15:19:37, 10] utils/ntlm_auth.c:manage_squid_ntlmssp_request(309)
> NTLMSSP NT_STATUS_UNSUCCESSFUL

Clients communicate with winbind using a named pipe.
Most likely cause of the problem is that when you test from the
command-line you run it as root, but squid runs as an unprivileged user.

Try running lsof to find out where that named pipe is in your filesystem,
and make sure that the squid user has r/w access to it (including at least
x access to the directories up to the root of course).

-- 
	kinkie (kinkie-squid [at] kinkie [dot] it)
	Random fortune, unrelated to the message:
The difference between art and science is that science is what we
understand well enough to explain to a computer.  Art is everything else.
		-- Donald Knuth, "Discover"