Arno You are almost there...
If ntlm_auth works on the command line then what you have is a permissions problem. Check the group ownership on your winbind_priveleged directory. It should be owned by the same group that squid runs as... On Fri, 2003-11-28 at 10:15, [EMAIL PROTECTED] wrote: > Hmm, > It works !?!? > > bash-2.05# wbinfo -a login%password > plaintext password authentication succeeded > challenge/response password authentication succeeded > bash-2.05# > > I just add the following line into my smb.conf > > winbind use default domain = Yes > > > and this one still work: > bash-2.05# /opt/samba/bin/ntlm_auth --username=login > password: > NT_STATUS_OK: Success (0x0) > > But still no luck in Squid: (not even a prompt for the password) > cache.log: > 2003/11/28 11:11:18| Ready to serve requests. > [2003/11/28 11:11:34, 1] utils/ntlm_auth.c:manage_squid_request(1042) > fgets() failed! dying..... errno=0 (Error 0) > [2003/11/28 11:11:34, 1] utils/ntlm_auth.c:manage_squid_request(1042) > fgets() failed! dying..... errno=0 (Error 0) > [2003/11/28 11:11:34, 1] utils/ntlm_auth.c:manage_squid_request(1042) > fgets() failed! dying..... errno=0 (Error 0) > [2003/11/28 11:11:34, 1] utils/ntlm_auth.c:manage_squid_request(1042) > fgets() failed! dying..... errno=0 (Error 0) > [2003/11/28 11:11:34, 1] utils/ntlm_auth.c:manage_squid_request(1042) > fgets() failed! dying..... errno=0 (Error 0) > [2003/11/28 11:11:34, 1] utils/ntlm_auth.c:manage_squid_request(1042) > > access.log: > bash-2.05# more access.log > 1070014292.417 454 10.137.138.117 TCP_DENIED/407 1614 GET > http://www.cisco.com/ - NONE/- text/html > 1070014293.690 862 10.137.138.117 TCP_DENIED/407 1684 GET > http://www.cisco.com/ - NONE/- text/html > > > Will keep you inform if I find something... > > > Regards, > > Arno > > Cr�dit Agricole Indosuez (Suisse) SA > Chemin de B�r�e 46-48, ch-1010 Lausanne 10 > T�l. +41 21 651.5215 - Fax +41 21 651.5251 > http://www.ca-indosuez.ch > > > > > ****************************************************************** > DISCLAIMER - E-MAIL > ------------------- > The information contained in this E-Mail is intended for the named > recipient(s). It may contain certain privileged and confidential > information, or information which is otherwise protected from > disclosure. If you are not the intended recipient, you must not > copy,distribute or take any action in reliance on this information > ****************************************************************** -- Mark Taylor Sirius www.siriusit.co.uk Tel +44 (0)1784 463644
