[Samba] Samba 3 beta 3 helpers and squid?

[Andrew Bartlett]

On Thu, 2003-08-07 at 21:28, daniel.jarboe at custserv.com wrote:
> On August 06, 2003 5:52 PM Andrew Bartlett wrote:
> > Yep - and I really should doco it better...
> > 
> > ntlm_auth --helper-protocol=xyz
> > 
> > where for squid xyz is one of:
> > 
> > squid-2.4-basic
> > squid-2.5-basic
> > squid-2.5-ntlmssp
> > 
> > The last one is the NTLM helper, naturally. 
> 
> So would these be the proper auth_param program lines to use samba 3's
> new ntlm_auth tool (2.5.STABLE3)?
> auth_param ntlm program /usr/bin/ntlm_auth
> --helper-protocol=squid-2.5-ntlmssp
> auth_param basic program /usr/bin/ntlm_auth
> --helper-protocol=squid-2.5-basic

Looks correct.

> Reason I ask is I get prompted for three box basic (User
> Name,Password,Domain)
> Adding --domain==MY_DOMAIN only fills in that box when IE falls to
> basic, and authentication always fails.

From my current understanding of the code, you will need to enter the
correct data in the client.  

However, if you can retest this with Windows servers, I am happy to
accept a bug in bugzilla.samba.org if the behaviour differs.  (We know
the behaviour needs to differ for SMB logins, so it doesn't surprise me)

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20030808/81ba8e37/attachment.bin