Re: [squid-users] NTLM questions (sorry)

2003-04-01 Thread Gavin Hamill
Gavin, I know how you feel I battled with winbind and these problems for ages and finally it all worked. Below is the relevant parts of my squid.conf. I'm /almost/ there :) winbindd now seems to work fine, and I can successfully limit squid access only to those who authenticate using NTLM...

Re: [squid-users] NTLM questions (sorry)

2003-04-01 Thread Greg Sheard
On Tue, 2003-04-01 at 11:42, Gavin Hamill wrote: Gavin, I know how you feel I battled with winbind and these problems for ages and finally it all worked. Below is the relevant parts of my squid.conf. I'm /almost/ there :) winbindd now seems to work fine, and I can successfully limit

Re: [squid-users] NTLM questions (sorry)

2003-04-01 Thread Gavin Hamill
external_acl_type NT_global_group %LOGIN /usr/lib/squid/wb_group acl domainadmins external NT_global_group Domain Admins Hi Gavin, Brian O'Neill submitted a patch in November to allow you to use `Domain Admins`, because you can't do it with spaces (as you've discovered). It's down to the

[squid-users] NTLM auth works with groups! (was Re: [squid-users] NTLM questions (sorry))

2003-04-01 Thread Gavin Hamill
On Tue, Apr 01, 2003 at 12:17:40PM +0100, Gavin Hamill wrote: This sounds like either a source-hacking job, or a little shim bash script with 'tr' to translate the backtick into a double-quote to pass on to the real wb_group It turned out to be a very simple source tweak.. I just changed

[squid-users] NTLM questions (sorry)

2003-03-28 Thread Gavin Hamill
Hullo again :) My 'squiddlings' are continuing on the same theme as last time (limiting certain users to certain websites), and while this works well using IP addresses, the customer would like to tie it to Windows usernames. And here the problem starts :) I'm using the Debian 'unstable'

Re: [squid-users] NTLM questions (sorry)

2003-03-28 Thread Henrik Nordstrom
Gavin Hamill wrote: I've also set one of our Windows 2000 servers into Active Directory mode to act as a PDC, but have not experienced any joy in even authenticating by manually running the ntlm_auth program from the commandline, so I have yet to get as far as configuring squid to use it!

Re: [squid-users] NTLM questions (sorry)

2003-03-28 Thread Robert Collins
On Sat, 2003-03-29 at 00:16, Gavin Hamill wrote: FATAL: authenticateNTLMHandleReply: called with no result string This is due to a broken response from a helper - it's a *loud* warning :}. Does ntlm_auth broadcast on the local network to find a domain controller? No. Try ./ntlm_auth

Re: [squid-users] NTLM questions (sorry)

2003-03-28 Thread Gavin Hamill
On Sat, Mar 29, 2003 at 12:43:59AM +1100, Robert Collins wrote: FATAL: authenticateNTLMHandleReply: called with no result string This is due to a broken response from a helper - it's a *loud* warning :}. I gathered that much - unfortunately 'it's broken' doesn't actually tell me anything

RE: [squid-users] NTLM questions (sorry)

2003-03-28 Thread daniel . jarboe
http://www.squid-cache.org/Doc/FAQ/FAQ-23.html will prove very helpful. You need samba --with-winbind and --with-winbind-auth-challenge, and join the domain for squid's ntlm authentication to work. The winbind and windows domain server stuff is in samba's smb.conf. Smbd and nmbd won't need to

RE: [squid-users] NTLM questions (sorry)

2003-03-28 Thread Robert Collins
On Sat, 2003-03-29 at 07:51, [EMAIL PROTECTED] wrote: http://www.squid-cache.org/Doc/FAQ/FAQ-23.html will prove very helpful. You need samba --with-winbind and --with-winbind-auth-challenge, and join the domain for squid's ntlm authentication to work. The winbind and windows domain server