[Samba] Squid/ntlm_auth issues with two user accounts (all other accounts on the domain work).

[Matthew Macdonald-Wallace]

On Wed, 11 Jun 2008 13:50:45 +0100
Matthew Macdonald-Wallace <lists at truthisfreedom.org.uk> wrote:

> The only difference I can see between the two users is that in the
> first (successful) one, there is data in the "pass" field and in the
> second account there is not.

Hi all,

Mark sent me a quick note on the above (thanks Mark!) and I now get the
following error on the accounts that don't work:

==========================

ntlm-auth[8705](ntlm_auth.c:284): managing request
ntlm-auth[8705](ntlm_auth.c:290): ntlm authenticator. Got 'YR
TlRMTVNTUAABAAAAB7IIog0ADQAvAAAABwAHACgAAAAFASgKAAAAD09GRklDRTJDQVJJQkJFQU4tQUJT'
from Squid 
ntlm-auth[8705](ntlm_auth.c:239): obtain_challenge: selecting
DOMAIN\DC (attempt #1) 
ntlm-auth[8705](ntlm_auth.c:251): attempting challenge retrieval
ntlm-auth[8705](libntlmssp.c:119): Connecting to server DC
domain DOMAIN 
ntlm-auth[8705](ntlm_auth.c:253): make_challenge retuned 0x80537e0
ntlm-auth[8705](ntlm_auth.c:255): Got it
ntlm-auth[8705](ntlm_auth.c:437): sending 'TT
TlRMTVNTUAACAAAADQANACgAAACCgkEAfnufN5M1ntEAAAAAAAAAAENBUklCQkVBTi1BQlM='
to squid 
ntlm-auth[8705](ntlm_auth.c:284): managing request
ntlm-auth[8705](ntlm_auth.c:290): ntlm authenticator. Got 'KK
TlRMTVNTUAADAAAAGAAYAGsAAAAYABgAgwAAAA0ADQBIAAAADwAPAFUAAAAHAAcAZAAAAAAAAACbAAAABoIAAgUBKAoAAAAPQ0FSSUJCRUFOLUFCU0JFQVRSSUNFLkJVVExFUk9GRklDRTK7ivPZ+YV5gruK89n5hXmCu4rz2fmFeYLZDO98sQRKF2fOAo6s7/TlqolY69sHTTc='
from Squid 
ntlm-auth[8705](libntlmssp.c:268): Empty LM pass detection: user:
'FIRSTNAME.LASTNAME', ours:'e�,T�i<�%�FG2$G]�I�B�����hq��Vq;=gu�Server
returned a non-zero SMB Error Class and Code.', his:
'������������������Jg����媉X�M7'(length: 24)
ntlm-auth[8705](libntlmssp.c:280): Empty NT pass detection: user:
'FIRSTNAME.LASTNAME', ours:'B�����hq��Vq;=gu�Server returned a non-zero
SMB Error Class and Code.', his: '���Jg����媉X�M7'(length: 24)
ntlm-auth[8705](libntlmssp.c:294): checking domain: 'DOMAIN',
user: 'FIRSTNAME.LASTNAME', pass='���������������'
ntlm-auth[8705](libntlmssp.c:297): Login attempt had result -1
ntlm-auth[8705](ntlm_auth.c:350): No creds. SMBlib error 1, SMB error
class 1, SMB error code 5, NB error 0 
ntlm-auth[8705](ntlm_auth.c:371): DOS error
ntlm-auth[8705](ntlm_auth.c:376): sending 'NA Access denied' to squid

=======================

If people can tell me which squid/samba conf files they need to see,
let me know and I'll post them to the list as well.

Kind regards,

Matt
-- 
Matthew Macdonald-Wallace
matthew at truthisfreedom.org.uk
http://www.truthisfreedom.org.uk/