Re: [squid-users] squid-2.6.STABLE.13 + NTLM authentication problem

From: Adrian Chadd <adrian@dont-contact.us>
Date: Mon, 2 Jul 2007 19:22:28 +0800

On Fri, Jun 29, 2007, Jegadeesh wrote:

> #wbinfo -t
> checking the trust secret via RPC calls failed
> error code was NT_STATUS_CANT_ACCESS_DOMAIN_INFO (0xc00000da)
> Could not check secret

Thats your first port of call. Ignore Squid completely until you
get wbinfo -t returning success.

I'd check that you've logged the machine into the domain correctly
and that your machine is timesynced to the domain controller(s).

Adrian

>
> The portion of squid configuration file is given below
>
> auth_param basic program /usr/bin/ntlm_auth
> --helper-protocol=3Dsquid-2.5-basic
> auth_param basic children 6
> auth_param basic realm Internet Access
> auth_param basic credentialsttl 2 hours
> acl ntlm_users proxy_auth REQUIRED
> http_access allow ntlm_users
> http_access deny all
>
>
> The portion of samba configuration file is given below
>
> [global]
> workgroup = mydomain
> server string = mydomain jag
> hosts allow = 10.1. 127.
> security = user
> password server = 10.1.1.32
> encrypt passwords = yes
> smb passwd file = /etc/samba/smbpasswd
> passwd program = /usr/bin/passwd %u
> username map = /etc/samba/smbusers
> socket options = TCP_NODELAY SO_RCVBUF=3D8192 SO_SNDBUF=3D8192
> local master = yes
> os level = 64
> domain master = yes
> preferred master = yes
> domain logons = yes
> wins support = no
> dns proxy = no
> winbind enum users = yes
> winbind enum groups = yes
> winbind separator = +
> winbind cache time = 10
> winbind uid = 10000-20000
> winbind gid = 10000-20000
> winbind use default domain = yes
>
>
> Please any one help me to solve this problem.
>
> Thanks,
> -Jegadeesh

-- 
- Xenion - http://www.xenion.com.au/ - VPS Hosting - Commercial Squid Support -
- $25/pm entry-level bandwidth-capped VPSes available in WA -
Received on Mon Jul 02 2007 - 05:20:24 MDT

This archive was generated by hypermail pre-2.1.9 : Wed Aug 01 2007 - 12:00:03 MDT