Re: [squid-users] Squid 2.5-Stable10 With Negotiate Patch and Sambe 3.x

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Tue, 27 Sep 2005 23:25:59 +0200 (CEST)

On Tue, 27 Sep 2005, Cole wrote:

> The problem comes in that, wb_authntlm cannot contact winbindd. I get this error.
> "wb_ntlmauth[466](wb_ntlm_auth.c:414): Can't contact winbindd. Dying".

wb_ntlmauth is for Samba-2.2.X only.

For Samba-3.X you should use ntlm_auth shipped with Samba.

For Negotiate support you probably will need Samba4. I do not think the
required support is in Samba-3.X yet.

> If so, what is the furtherest back samba-3.x that squid-2.5-StableX will work with, cause I ran into
> another problem trying to use the very latest samba 3 release from ports.

Starting with Samba-3.X there no longer is any versioning dependency
between Squid and Samba.

> Which is a problem cause I am actually trying to use squid to auth using Negotiate against a Windows
> 2003 AD/KDC.

Do you have clients willing to use Negotiate in this setup? As far as I
know MSIE does not support Negotiate to proxies, only web servers
(including reverse proxies).

Is there any reason you do not want to use NTLM? NTLM is supported by AD
unless explicitly disabled in the AD.

Regards
Henrik
Received on Tue Sep 27 2005 - 15:26:01 MDT

This archive was generated by hypermail pre-2.1.9 : Sat Oct 01 2005 - 12:00:04 MDT