[squid-users] Winbind/FreeBSD authenticator woes

From: Jerry Murdock <jmurdock@dont-contact.us>
Date: Tue, 25 Jun 2002 12:04:22 -0400

Please forgive the double posting, but wasn't sure where to send this for
a -PRE release.

I've got winbind partially working under FreeBSD. This is all tested with
the 6/24 2.5 snapshot and Samba 2.2.5 on FBSD 4.6.

On the Winbind side of the house, it compiles and runs. All wbinfo tests
run successfully, and pam_winbind works OK.

Unfortuneatly I have issues with both squid winbind authenticators. The
basic authenticator would be easy enough for me to fix. I haven't looked
into the ntlm problems.

===================
BASIC Authenticator
===================
The basic authenticator seems returns ERR when passed a valid
username/password and OK when passed.

Debug output on a valid user/pw shows the following:
winbindd -d5:
Plain-text authenticaion for user \administrator returned NT_STATUS_OK (PAM:
0)

wb_auth:
/wb_auth[5965](wb_basic_auth.c:86): Got 'TDOMAIN\validuser validpw' from
squid (length: 25).
/wb_auth[5965](wb_basic_auth.c:54): winbindd result: 0
/wb_auth[5965](wb_basic_auth.c:59): sending 'ERR' to squid
ERR

On an invalid user/pw I get:
Winbind -d5(exact message changes due to reason for failure):
Plain-text authenticaion for user TDOMAIN\invalid bogus returned
NT_STATUS_NO_SUCH_USER (PAM: 10)

wb_auth:
/wb_auth[5965](wb_basic_auth.c:86): Got 'TDOMAIN\invalid bogus' from squid
(length: 22).
/wb_auth[5965](wb_basic_auth.c:54): winbindd result: 1
/wb_auth[5965](wb_basic_auth.c:57): sending 'OK' to squid
OK

==================
NTLM Authenticator
==================
The NTLM authentcator dyes on startup:

wb_ntlmauth -d TDOMAIN:
wb_ntlmauth[5989](wb_ntlm_auth.c:370): target domain is TDOMAIN
wb_ntlmauth[5989](wb_ntlm_auth.c:409): ntlm winbindd auth helper build Jun
25 2002, 06:11:00 starting up...
wb_ntlmauth[5989](wb_ntlm_auth.c:384): Can't contact winbindd. Dying

winbindd -d5:
[ 5997]: request interface version
read failed on sock 11, pid 5997: EOF

Thanks,
Jerry
Received on Tue Jun 25 2002 - 10:08:28 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:08:48 MST