[Samba] winbindd_privileged problem with 3.0.28a

[Dave Randolph]

Hi, all.

Has anyone else experienced issues with using ntlm_auth in 3.0.28a?  We have 
had squid set up to use ntlm_auth for quite some time & the latest update 
seems to break.  

I'm getting (in /var/log/messages)

Apr 23 10:13:51 cyclops (ntlm_auth):   Login for user [NSTARBANK]\[drandolph]@
[NSB_DAVELAPTOP] failed due to [winbind client not authorized to
 use winbindd_pam_auth_crap. Ensure permissions 
on /var/lib/samba/winbindd_privileged are set correctly.]
Apr 23 10:13:51 cyclops (ntlm_auth): [2008/04/23 10:13:51, 0] 
utils/ntlm_auth.c:manage_squid_ntlmssp_request(776)
Apr 23 10:13:51 cyclops (ntlm_auth): [2008/04/23 10:13:51, 0] 
utils/ntlm_auth.c:manage_squid_ntlmssp_request(776)
Apr 23 10:13:51 cyclops (ntlm_auth):   NTLMSSP BH: NT_STATUS_ACCESS_DENIED
Apr 23 10:13:51 cyclops (ntlm_auth):   NTLMSSP BH: NT_STATUS_ACCESS_DENIED

 I have checked and double-checked that the squid process is running as 
user "squid" and that "squid" is a member of the wbpriv group.  

Perms on the winbindd_privileged folder are:

drwxr-x---  2 root wbpriv    4096 2008-04-23 10:00 winbindd_privileged
[root at cyclops samba]# pwd
/var/lib/samba



If I fiddle with the perms then winbind won't even start & I'm kind of at a 
loss to explain what is going on as I can't find any bugs filed, etc.  I 
thought I'd ask here & see if the 3.0.28a broke for anyone else.

Thanks for any input.
dave