[Samba] mod_ntlm_winbind

[Aaron Browne]

On Wed, 2006-06-07 at 05:42 -0400, Ciro Iriarte wrote:
> Anybody using mod_ntlm_winbind?. I'm running SLES9 SP3 and i'mt having 
> problems using it, I did the following:

Yes. I am running it on Solaris 9 and 10.

> 
> Compilation:
> -----------------
> 
> So i went the apx2 route:
> 
> apxs -DAPACHE2 -c -i mod_ntlm_winbind.c <-- works

This is the same way I built the module.

> 
> Configuration
> --------------------
> 
> --.htaccess--
> AuthName "NTLM Authentication thingy"
> NTLMBasicAuth on
> NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp -d 
> 400"
> NTLMBasicAuthoritative on
> AuthType NTLM
> require valid-user

I added a Directory entry into my Apache conf file. The settings we have
are the same except I did not use "-d 400".

Check that /usr/bin/ntlm_auth exists.

> 
> --perms for apache2 user--
> setfacl -m u:wwwrun:rx /var/lib/samba/winbindd_privileged
> 
> Testing
> ----------
> 
> Well, accesing the page asks for user/password, if i give "usrjoe" + 
> "mypasswd" it gives me an 401 error code. If i enter "DOMAIN\usrjose" + 
> "mypassword", I get an 500 error code and find this in error_log:

You should not have to provide DOMAIN\<username> as Samba handles the
domain settings etc.

> 
> [Wed Jun 07 04:26:09 2006] [error] [client 10.129.7.146] (2)No such file or 
> directory: couldn't spawn child ntlm helper process: ntlm_auth, referer: 
> http://10.129.4.50/nagios/side.html

Seems to suggest a missing ntlm_auth binary file? As above, check
that /usr/bin/ntlm_auth exists.

> 
> I hope you understand my messed explanation, and help me if you have any 
> idea about my possible mistakes, i tried many configuration variations, but 
> these is the simplest one

Also, aside from all of this, have you joined the domain using Samba and
started nmbd and winbindd etc? Just things to check.

> 
> Ciro Iriarte 
> 
> 
>