LinuxQuestions.org
Did you know LQ has a Linux Hardware Compatibility List?
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 12-27-2004, 02:02 PM   #1
codedv
Member
 
Registered: Nov 2003
Location: Slough, UK
Distribution: Debian
Posts: 146

Rep: Reputation: 15
Squid and NTLM Authentication


Hi, this is my current set up. I have a SAMBA PDC and on the same machine running as a PDC I have squid installed. I would like to configure squid to use NTLM authentication against the Samba PDC.

The resources I've found on the Internet so far have been very confusing and I fail to understand how to set this up properly. From what I have gathered so far I need to compile smaba with Winbind and squid agains the samba sources:
Code:
Samba
#./configure --with-winbind --with-winbind-auth-challenge --with-automount --with-acl-support

Squid
# ./configure  --enable-gnuregex --enable-useragent-log --enable-arp-acl --enable-ssl --with-openssl=/usr/local/ssl \
--enable-default-err-language=English --enable-err-languages=English --enable-linux-netfilter --enable-auth="basic ntlm" \
--enable-basic-auth-helpers="PAM SMB" --enable-ntlm-auth-helpers=SMB --enable-ntlm-fail-open \
--with-samba-sources=/usr/local/src/samba-3.0.7
The installation and compliation was successful and I edited my squid.conf file to contain the following lines:
Code:
auth_param ntlm program /usr/local/samba/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp --debugleve
l=0
auth_param ntlm children 5
auth_param ntlm max_challenge_reuses 0
auth_param ntlm max_challenge_lifetime 2 minutes
auth_param ntlm use_ntlm_negotiate off
However, it just repeatedly asks me for my authentication details. I started winbindd, but as I am unsure as to how this all works, it makes it extremely diffcult trying to findthe problem. Can anyone offer me some insight here?
 
Old 05-12-2005, 05:25 PM   #2
codedv
Member
 
Registered: Nov 2003
Location: Slough, UK
Distribution: Debian
Posts: 146

Original Poster
Rep: Reputation: 15
Nearly 6 months on and I have still made no progress on this issue. Is there anyone out there with a similar configuaration?

All I need is to authenticate squid against my Samba PDC using NTLM, I just seem to be running into one problem after another though.
 
Old 05-29-2005, 12:36 AM   #3
win32sux
Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 371Reputation: 371Reputation: 371Reputation: 371
still no luck?? please post some links to the documentation you've been using...

 
Old 05-29-2005, 04:52 PM   #4
codedv
Member
 
Registered: Nov 2003
Location: Slough, UK
Distribution: Debian
Posts: 146

Original Poster
Rep: Reputation: 15
Still no luck

I think there is something I am not understanding. Maybe it is because I want to authenticate against a domain with a samba PDC. I have been following this tutorial: http://www1.fr.squid-cache.org/Doc/FAQ/FAQ-23.html. All is fine up until the point I try and get windbind working, this is when I begin to get errors:
Code:
[root@delves-s samba]# # join domain
[root@delves-s samba]# net rpc join -U Administrator
Password:
Joined domain DELVES.

[root@delves-s samba]# # check secret
[root@delves-s samba]# wbinfo -t
checking the trust secret via RPC calls succeeded

[root@delves-s samba]# wbinfo -D delves
Name              : DELVES
Alt_Name          :
SID               : S-1-5-21-752677008-808481252-3068482387
Active Directory  : No
Native            : No
Primary           : Yes
Sequence          : -1

[root@delves-s samba]# wbinfo -u
Error looking up domain users

[root@delves-s samba]# wbinfo -g
BUILTIN+system operators
BUILTIN+replicators
BUILTIN+guests
BUILTIN+power users
BUILTIN+print operators
BUILTIN+administrators
BUILTIN+account operators
BUILTIN+backup operators
BUILTIN+users

[root@delves-s samba]# wbinfo -a delves\\adam+password
plaintext password authentication failed
error code was NT_STATUS_NO_SUCH_USER (0xc0000064)
error messsage was: No such user
Could not authenticate user delves\adam+password with plaintext password
challenge/response password authentication failed
error code was NT_STATUS_NO_SUCH_USER (0xc0000064)
error messsage was: No such user
Could not authenticate user delves\adam+password with challenge/response
Wbinfo doesn't appear to see my domain as a trusted domain but I don't know why.

I know now this isn't a distribution or version specific issue becuase I have tried this with various versions of Samba and squid and on both Debian and Fedora 3 with identicle results.

Any help would be appreciated because I am banging my head against a brick wall.
 
Old 12-02-2005, 04:34 PM   #5
Decor_kev
LQ Newbie
 
Registered: Dec 2005
Location: Morden, Manitoba, Canada
Distribution: FC1,3,4
Posts: 1

Rep: Reputation: 0
Anybody find a solution to this problem

Suffering from the same dilema. Any solutions?
 
Old 07-16-2006, 03:46 AM   #6
moleno
LQ Newbie
 
Registered: Sep 2004
Posts: 14

Rep: Reputation: 0
check this ... i hope it will be enough


http://www.linuxquestions.org/questi...ight=ntlm_auth
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
NTLM authentication. TheRealDeal Linux - Networking 4 10-12-2006 07:36 PM
squid NTLM IE prompt paul_mat Linux - Networking 0 09-20-2005 07:45 PM
Squid NTLM paul_mat Linux - Networking 2 09-15-2005 07:25 PM
squid.conf for NTLM paul_mat Linux - Networking 1 09-15-2005 07:21 PM
Squid and NTLM authorisation davebarnes Linux - Networking 6 11-11-2002 02:27 PM


All times are GMT -5. The time now is 12:05 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration