[Samba] mod_auth_ntlm_winbind

[Scott Barnett]

I'm having some difficulties with mod_auth_ntlm_winbind. Winbind and
samba are configured and working well, I can create shares and set
permissions to AD groups. Wbinfo -u and wbinfo -g work fine.

Whenever I try and hit the folder with a web browser, it prompts for a
username and password and then comes back with a 401: authorization
required.

In the apache error log I get:

[2007/03/01 12:05:09, 1] libsmb/ntlmssp.c:ntlmssp_update(267)
  got NTLMSSP command 3, expected 1


If I turn on debugging (LogLevel debug), I get this in the virtual
host's error log:

[Thu Mar 01 12:19:27 2007] [debug] mod_auth_ntlm_winbind.c(1018):
[client 203.24.70.250] doing ntlm auth dance
[Thu Mar 01 12:19:27 2007] [debug] mod_auth_ntlm_winbind.c(484): [client
203.24.70.250] Using existing auth helper 4385
[Thu Mar 01 12:19:27 2007] [debug] mod_auth_ntlm_winbind.c(652): [client
203.24.70.250] creating auth user
[Thu Mar 01 12:19:27 2007] [debug] mod_auth_ntlm_winbind.c(703): [client
203.24.70.250] parsing reply from helper to YR
TlRMTVNTUAADAAAAGAAYAHAAAAAYABgAiAAAABQAFABIAAAADAAMAFwAAAAIAAgAaAAAAAAA
AACgAAAABYKIIgUBKAoAAAAPVABIAFUAUgBJAE4ARwBPAFcAQQBzAGMAbwB0AHQAYgBEAE8A
MAA0ALnvPVVaEdZ+AAAAAAAAAAAAAAAAAAAAANK+f6Fs0pgjQRzmh19+QPoj1/CyzmluwA==
\n
[Thu Mar 01 12:19:27 2007] [debug] mod_auth_ntlm_winbind.c(741): [client
203.24.70.250] got response: NA NT_STATUS_INVALID_PARAMETER
[Thu Mar 01 12:19:27 2007] [debug] mod_auth_ntlm_winbind.c(765): [client
203.24.70.250] user not authenticated: NT_STATUS_INVALID_PARAMETER


Any help or ideas would appreciated :)

Cheers, Scott.