[Samba] Problem with mod_ntlm_winbind
Plant, Dean
dean.plant at roke.co.uk
Wed Jul 5 16:51:19 GMT 2006
I'm playing with the mod_ntlm_winbind from
http://download.samba.org/ftp/unpacked/lorikeet/mod_ntlm_winbind/ on
Centos 4.3 but running into problems when trying to authenticate via the
browser. IE says it cannot find the server when trying to access
http://server/auth Firefox pops up an authentication box but this also
does not work.
Can anyone point me into what I might be doing wrong or may have missed.
My test box is also running squid which is successfully using ntlm_auth
for transparent authentication.
The mod_ntlm_winbind module seemed to compile correctly and I added
apache to the squid group so it could access the
/var/cache/samba/winbindd_privileged directory as user apache and I have
added to httpd.conf the following
LoadModule ntlm_winbind_module modules/mod_ntlm_winbind.so
and
<Directory "/var/www/html/auth">
AuthName "NTLM Authentication test"
NTLMAuth on
NTLMAuthHelper "/usr/bin/ntlm_auth
--helper-protocol=squid-2.5-ntlmssp"
NTLMBasicAuthoritative on
AuthType NTLM
require valid-user
</Directory>
Winbind processes running when trying to connect
apache 16343 16335 0 16:50 ? 00:00:00 /usr/bin/ntlm_auth
--helper-protocol=squid-2.5-ntlmssp
apache 16344 16336 0 16:50 ? 00:00:00 /usr/bin/ntlm_auth
--helper-protocol=squid-2.5-ntlmssp
Error from /var/log/httpd/error_log
[2006/07/05 16:50:53, 1] libsmb/ntlmssp.c:ntlmssp_update(252)
got NTLMSSP command 3, expected 1
Error from /var/log/samba/winbindd.log
[2006/07/05 16:50:02, 1]
nsswitch/winbindd_group.c:winbindd_getgroups(1032)
user 'apache' does not exist
Thanks
Dean
More information about the samba
mailing list