mod_auth_ntlm_winbind build
Stefan Gohmann
gohmann at univention.de
Mon Feb 12 09:31:25 GMT 2007
Hello,
Am Montag, 12. Februar 2007 10:01 schrieb Kai Blin:
[..]
> This is using SPNEGO, is Firefox using NTLM? If yes, that's where we should
> start digging. What does IE do if you only allow NTLM authentication?
I use the htaccess example from the package:
AuthName "NTLM Authentication thingy"
NTLMAuth on
NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp"
NTLMBasicAuthoritative on
AuthType NTLM
require valid-user
I got the following log messages with the IE:
[Thu Jan 25 08:54:36 2007] [debug] mod_auth_ntlm_winbind.c(1021): [client
10.201.8.1] (2)No such file or directory: doing ntlm auth dance
[Thu Jan 25 08:54:36 2007] [debug] mod_auth_ntlm_winbind.c(487): [client
10.201.8.1] (2)No such file or directory: Using existing auth helper 4158
[Thu Jan 25 08:54:36 2007] [debug] mod_auth_ntlm_winbind.c(655): [client
10.201.8.1] (2)No such file or directory: creating auth user
[2007/01/25 08:54:36, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63)
Got NTLMSSP neg_flags=0xa0088207
[Thu Jan 25 08:54:36 2007] [debug] mod_auth_ntlm_winbind.c(744): [client
10.201.8.1] (2)No such file or directory: got response: TT
TlRMTVNTUAACAAAACAAIADAAAAAFgomgMjtlVCCWfFoAAAAAAAAAAJ4AngA4AAAAVABFAFMAVAACAAgAVABFAFMAVAABABYATQBFAE0AQgBFAFIALQA3ADcALQA1AAQAKgB0AGUAcwB0AC4AdQBuAGkAdgBlAG4AdABpAG8AbgAuAGwAbwBjAGEAbAADAEIAbQBlAG0AYgBlAHIALQA3ADcALQA1AC4AdABlAHMAdAAuAHUAbgBpAHYAZQBuAHQAaQBvAG4ALgBsAG8AYwBhAGwAAAAAAA==
[Thu Jan 25 08:54:36 2007] [debug] mod_auth_ntlm_winbind.c(414): [client
10.201.8.1] (2)No such file or directory: sending back
TlRMTVNTUAACAAAACAAIADAAAAAFgomgMjtlVCCWfFoAAAAAAAAAAJ4AngA4AAAAVABFAFMAVAACAAgAVABFAFMAVAABABYATQBFAE0AQgBFAFIALQA3ADcALQA1AAQAKgB0AGUAcwB0AC4AdQBuAGkAdgBlAG4AdABpAG8AbgAuAGwAbwBjAGEAbAADAEIAbQBlAG0AYgBlAHIALQA3ADcALQA1AC4AdABlAHMAdAAuAHUAbgBpAHYAZQBuAHQAaQBvAG4ALgBsAG8AYwBhAGwAAAAAAA==
The IE shows me, that he isn't able to show the site.
Cheers
Stefan
--
Stefan Gohmann Entwicklung gohmann at univention.de
Univention GmbH Linux for your Business fon: +49 421 22 232- 0
Mary-Somerville-Str.1 28359 Bremen fax: +49 421 22 232-99
http://www.univention.de
More information about the samba-technical
mailing list