RE: smb_auth

I don't understand why you've also given 'full rights' to the auth file in
Netlogon. Only read right is enough for authentication. You can creat a
"Proxy Access" group for example and you may put these users in the Proxy
Access group if you will give right to which users .

-----Original Message-----
From: Scroggins, Kelly [mailto:ScroggiK@Aegiscomgroup.com]
Sent: Tuesday, April 11, 2000 6:53 AM
To: 'Squid Users Mailing List'
Subject: RE: smb_auth

Nope. Still no luck. I've done everything the documentation has told me to
do.

My question was asking what permissions the squid (process/user) needs on
the squid box, not the NT box. I've given the users 'read' permissions on
the NT box. Both to the file and to the directory. I've even given them
'full rights' (to the file). It even fails when I use and ID that's in the
Domain Administrators group.

I'm grasping at straws.

I must have done someting wrong but I can't figure it out. Samba works.
Squid works. But I can't authenticate against the NT Domain.

I'm #$!@#^*)+%^$% off.

kelly

> -----Original Message-----
> From: Kendall Lister [mailto:kendall@charon.net.au]
> Sent: Monday, April 10, 2000 10:07 PM
> To: Squid Users Mailing List
> Subject: Re: smb_auth
>
>
> On Mon, 10 Apr 2000, Scroggins, Kelly wrote:
>
> > I've got samba working and I've got squid working. But I still
> > haven't been able to get the smb_auth to work.
>
> Still no luck? :(
>
> > In order to use smb_auth you must have a file called 'proxyauth' in
> > the netlogon directory on the PDC, and the users/groups must have
> > 'read' access to this file. What privledges does the squid
> process (or
> > user running squid, in my case. The user is called squid)
> need on the
> > Linux box.
>
> As I understand it, Squid doesn't need any access to the
> 'proxyauth' file
> - the users authenticating themselves to Squid need access.
> You must be
> able to connect to the share containing 'proxyauth' as these users and
> read the contents of the 'proxyauth' file - until this works, smb_auth
> can't work properly.
>
> --
> Kendall Lister, Systems Operator for Charon I.S. -
> kendall@charon.net.au
> Charon Information Services - Friendly, Cheap Melbourne
> ISP: 9589 7781
>
Received on Tue Apr 11 2000 - 01:18:56 MDT