[Samba] ntlm_auth authentication to two different domains

[Andrew Bartlett]

On Tue, 2008-05-13 at 21:47 -0400, flubu at fastmail.fm wrote:
> Hi,
> 
> I'm wondering if it is possible to use NTLM authentication in squid for
> users in two different Windows domains. So basically, I would need that
> ntlm_auth --username=user_in_domain1 --domain=domain1
> and
> ntlm_auth --username=user_in_domain2 --domain=domain2
> work at the same time. Is that possible ? What would one need to
> configure to make this work ?

You need to make the domains trust each other.  The domain is specified
by the client, inside the NTLMSSP blob, not on the command line. 

Andrew Bartlett

-- 
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20080517/50ff43b9/attachment.bin