FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > CentOS > CentOS

 
 
LinkBack Thread Tools
 
Old 06-09-2011, 10:24 PM
Tom Diehl
 
Default NTLM auth fails after upgrade to centos 5.6

Hi,

I upgraded a working centos5.5 with squid using ntlm auth to centos 5.6 today.
After doing so squid failed to authenticate. Downgrading samba3x to
samba3x-3.3.8-0.52.el5_5.2 got things working again.

In the squid config I have,
auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
in the squid config and this was working until the upgrade.

testparm shows no errors and the logs do not indicate a problem except that
authentication fails.

With samba3x-3.5.4-0.70.el5_6.1.x86_64 installed the following command fails:
/usr/bin/ntlm_auth --username=myuser with the following error:

[2011/06/09 10:21:19.538041, 2] winbindd/winbindd_pam.c:2001(winbindd_dual_pam_auth_crap)
NTLM CRAP authentication for user [mydomain][myuser] returned NT_STATUS_INVALID_HANDLE (PAM: 4)

with samba3x-3.3.8-0.52.el5_5.2 I get the following:

(indy pts3) # /usr/bin/ntlm_auth --username=myuser
password:
NT_STATUS_OK: Success (0x0)
(indy pts3) #

[2011/06/09 18:18:30, 2] passdb/pdb_ldap.c:init_sam_from_ldap(571)
init_sam_from_ldap: Entry found for user: myuser
[2011/06/09 18:18:30, 2] auth/auth.c:check_ntlm_password(308)
check_ntlm_password: authentication for user [myuser] -> [myuser] -> [myuser] succeeded

Has anyone else seen this behavior?

Regards,

--
Tom Diehl tdiehl@rogueind.com Spamtrap address mtd123@rogueind.com
_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
 

Thread Tools




All times are GMT. The time now is 02:51 PM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright 2007 - 2008, www.linux-archive.org