mod_auth_ntlm_winbind build

Stefan Gohmann gohmann at univention.de
Mon Feb 12 08:11:19 GMT 2007


Hi Andrew,

Am Freitag, 9. Februar 2007 10:41 schrieb Andrew Bartlett:
[..]
> > For me, an ifdef statement works, see the attached patch.
>
> On apache1, is r->proxyreq a boolean?  Could we do
>
> #define PROXYREQ_PROXY true
> (or similar)

from the httpd.h file:

enum proxyreqtype {
    NOT_PROXY=0,
    STD_PROXY,
    PROXY_PASS
};

struct request_rec {
...
    enum proxyreqtype proxyreq;/* A proxy request (calculated during
                                 * post_read_request or translate_name) */
...
}

If I set 
 #define PROXYREQ_PROXY 1
the build works for me.

> Also, we really should fix the order to be r->proxyreq ==
> PROXYREQ_PROXY.  I was lazy when I committed the contributed patch, and
> it shows here.  We need a mod_ntlm_winbindd maintainer (or I need to
> defer to them, if someone else has actually taken up the reigns, and
> I've missed it...).

Now, I have some other problems. I have a Samba PDC and a Samba domain member 
with apache and mod_aut_ntlm_winbind. If I use the firefox under Linux to 
load a protected site I got a username/password prompt and I can autenticate 
as DOMAIN\user and the password.
With Windows XP and IE6 I got a username/password prompt and if I insert the 
username and password, I got the following messages:

[Thu Jan 25 08:11:54 2007] [debug] mod_auth_ntlm_winbind.c(485): [client 
10.201.8.1] (2)No such file or directory: Launched ntlm_helper, pid 2472
[Thu Jan 25 08:11:54 2007] [debug] mod_auth_ntlm_winbind.c(655): [client 
10.201.8.1] (2)No such file or directory: creating auth user
[2007/01/25 08:11:54, 1] utils/ntlm_auth.c:manage_gss_spnego_request(860)
[Thu Jan 25 08:11:54 2007] [debug] mod_auth_ntlm_winbind.c(744): [client 
10.201.8.1] (2)No such file or directory: got response: BH
[Thu Jan 25 08:11:54 2007] [debug] mod_auth_ntlm_winbind.c(750): [client 
10.201.8.1] failed to parse response from helper

I use Samba 3.0.23d and Apache 1.3.33-6sarge1. The htaccess file:
AuthName "NTLM Authentication thingy"
NTLMAuth on
NegotiateAuth on
NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp"
NegotiateAuthHelper "/usr/bin/ntlm_auth --helper-protocol=gss-spnego"
NTLMBasicAuthoritative on
AuthType NTLM
AuthType Negotiate
require valid-user

Any tips?

Cheers
Stefan

-- 
Stefan Gohmann         Entwicklung              gohmann at univention.de
Univention GmbH        Linux for your Business  fon: +49 421 22 232- 0
Mary-Somerville-Str.1  28359 Bremen             fax: +49 421 22 232-99
                       http://www.univention.de


More information about the samba-technical mailing list