RE: [squid-users] Ntlm auth

Hi Henrik

I forgot to put in my last email the permissions of the pipe, in fact, my
squid.conf have

cache_effective_user squid
cache_effective_group squid

The perms on the pipe are
drwxr-x--- 2 root squid 72 Apr 4 17:57 winbindd_privileged

And the pipe perms are
nbsf000si10:/var/lib/samba/winbindd_privileged# ls -l
total 0
srwxrwxrwx 1 root root 0 Apr 4 17:57 pipe

The directory of the pipe is /var/lib/samba/winbindd_privileged/pipe, is
important the location of this file ?

squid@nbsf000si10:~$ whoami
squid
squid@nbsf000si10:~$ wbinfo -t
checking the trust secret via RPC calls succeeded
squid@nbsf000si10:~$ /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic
Myuser mypass
OK

Any suggestion ?

Regards, Mauricio

-----Original Message-----
From: Henrik Nordstrom [mailto:hno@squid-cache.org]
Sent: Monday, April 04, 2005 6:15 PM
To: Duran, Mauricio
Cc: squid-users@squid-cache.org
Subject: RE: [squid-users] Ntlm auth

On Mon, 4 Apr 2005 duranm@bancobsf.com.ar wrote:

> I check wbinfo
> nbsf000si10:/usr/src/samba-3.0.13/source# wbinfo -t
> checking the trust secret via RPC calls succeeded
>
> I check the plain auth
>
> nbsf000si10:/var/log/samba# /usr/bin/ntlm_auth
> --helper-protocol=squid-2.5-basic Myuser mypass
> OK

You should run this test as your cache_effective_user, not root.

The most common error is lack of permissions on the winbind pipe. See the
winbindd and ntlm_auth manuals.

Regards
Henrik
Received on Tue Apr 05 2005 - 11:56:29 MDT