Re: Fwd: RE: [squid-users] ntlm authentication

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Wed, 29 May 2002 23:30:40 +0200

Your Squid server does not seem to know the address of your selected NT
login servers.. It needs to know these by name.

Can you ping the servers by their netbios name? If not, add them to your
/etc/hosts file...

dhana krishnan wrote:
>
> Hello Henrik,
>
> I'm using ntlm_auth on WINNT4.0 domain controller not
> winbind. while trying to browse, only error results.
> I'm getting following messages(errors) in cache.log.
>
> ntlm-auth[672](ntlm_auth.c:277): managing request
> ntlm-auth[672](ntlm_auth.c:283): ntlm authenticator.
> Got 'YR' from Squid
> ntlm-auth[672](ntlm_auth.c:232): obtain_challenge:
> selecting DOMAIN\172.16.1.3 (attempt #1)
> ntlm-auth[672](ntlm_auth.c:244): attempting challenge
> retrieval
> ntlm-auth[672](libntlmssp.c:119): Connecting to server
> 172.16.1.3 domain DOMAIN
> ntlm-auth[672](libntlmssp.c:126): Couldn't connect to
> SMB Server. Error:The attempt to call the remote
> server failed. See protocol error info.
> RFCNBE_CallRejCNNP: Call rejected. Called name
> not present.
> ntlm-auth[672](ntlm_auth.c:246): make_challenge
> retuned (nil)
> ntlm-auth[672](ntlm_auth.c:252): Marking DC as DEAD
> ntlm-auth[672](ntlm_auth.c:255): moving on to next
> controller
>
> and in access.log ,i'm getting TCP_DENIED/407.
> Don't know what may be the problem.
>
> Thansk...
> -dhana
>
> --- Henrik Nordstrom <hno@marasystems.com> wrote: >
> dhana krishnan wrote:
> > > Does squid NTLM works with WINNT4.0 domain
> > controller?
> >
> > Yes, NTLM needs a NT domain controller or server
> > where to you want to
> > authenticate..
> >
> > > if so, howto configure winnt domain controller to
> > use ntlm?
> >
> > Nothing special needs to be configured on the NT
> > side of things when using
> > the SMB helper (ntlm_auth). If using winbind then
> > you need to set up a
> > workstation/server account for your winbind server..
> > (see the Samba winbind
> > installation instructions).
> >
> > Regards
> > Henrik
>
> ________________________________________________________________________
> Everything you always wanted to know about cars and bikes,now
> at: http://in.autos.yahoo.com/cricket/tracker.html
Received on Wed May 29 2002 - 16:51:30 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:08:15 MST