[Samba] Squid with AD Authendication problem (windows 2003)- please help

Sharik M sharikonline at yahoo.com
Wed Mar 9 19:07:43 MST 2011



 I have configured squid with AD authentication its working fine but I am 
getting lots of error for authentication failed.
 
 
squid-2.5.STABLE14-1.4E
samba-3.0.10-1.4E.11
 
 
 
Windows 2003 Domain Audit log failure.
 
 
Pre-authentication failed:
                User Name:            proxy$
                User ID:                  DOMAIN\proxy$
                Service Name:        krbtgt/DOMAIN.HOME
                Pre-Authentication Type:       0x0
                Failure Code:          0x19
                Client Address:       10.1.5.12
 
 
For more information, see Help and Support Center at 
http://go.microsoft.com/fwlink/events.asp.
 
 
 
 
 
 
 
/etc/samba/smb.conf
 
 
[global]
        workgroup = DOMAIN
        netbios name = PROXY
        realm = DOMAIN.HOME
        server string = Linux Samba Server
        security = ads
        encrypt passwords = Yes
        password server = 10.1.5.11
        log file = /var/log/samba/%m.log
        max log size = 0
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        preferred master = False
        local master = No
        domain master = False
        dns proxy = No
        wins server = 10.1.5.11
       # winbind separator = /
        winbind enum users = yes
        winbind enum groups = yes
        winbind use default domain = yes
        idmap uid = 10000-20000
        idmap gid = 10000-20000
        client schannel = no
 
log file = /var/log/samba/%m.log
max log size = 50
[homes]
   comment = Home Directories
   browseable = no
   writable = yes
[printers]
   comment = All Printers
   path = /var/spool/samba
   browseable = no
   guest ok = no
   writable = no
   printable = yes
 
 
/etc/krb5.conf
 
[logging]
 default = FILE:/var/log/krb5libs.log
 kdc = FILE:/var/log/krb5kdc.log
 admin_server = FILE:/var/log/kadmind.log
 
[libdefaults]
 #ticket_lifetime = 24000
 default_realm = DOMAIN.HOME
 dns_lookup_realm = false
 dns_lookup_kdc = false
 
[realms]
 DOMAIN.HOME = {
  kdc = 10.1.5.11
  admin_server = 10.1.5.11
  default_domain = DOMAIN.HOME
 }
 
[domain_realm]
 .DOMAIN.home = DOMAIN.HOME
 DOMAIN.home = DOMAIN.HOME
 
[kdc]
 profile = /var/kerberos/krb5kdc/kdc.conf
 
[appdefaults]
 pam = {
   debug = false
   ticket_lifetime = 36000
   renew_lifetime = 36000
   forwardable = true
   krb4_convert = false
 }


      


More information about the samba mailing list