ntlm_auth only works with PDC?

[Dave Augustus]

Comments embedded....

On Wed, 2004-01-07 at 15:59, Andrew Bartlett wrote:
> On Wed, Jan 07, 2004 at 11:32:57AM -0600, Dave Augustus wrote:
> > Hello fellow listers,
> > 
> > Using Samba V3 ntlm_auth with Squid2.5stable4, does it require that the
> > password server in smb.conf be the PDC all the time?
> > 
> > I tried to put all the DC's (both PDC and the 3 BDCs) in smb.conf but we
> > got an auth popups very often. When I switched it back to ONLY the PDC,
> > the problem seems greatly reduced (although the auth popups do still
> > occur, though not as often).
> 
> the whole point of the BDC is to be in sync with the PDC.  What is
> your PDC/BDC setup?  What are the errors that cause the auth popups?
> (add -d3 to your ntlm_auth config line)
> 

Would this show up in my log.winbindd?

I am seeing "connection refused on port 445" of our PDC in the winbind
log. It is a W2K server without AD. This doesn't sound normal but if it
is broken, how do I fix it? why would they be refeused?

--Dave

> > Ideas?
> > 
> > Bug?
> > 
> > setup:
> > Redhat 9
> > kerberos 1.3.1
> > Samba 3.0.0
> > Squid 2.5Stable4
> 
> You might want to try 3.0.2pre1, I did a lot of work on the ntlm_auth code.
> 
> Andrew Bartlett