--- Robert Vangel <vangelr@xxxxxxxx> wrote: > Nirina Michel wrote: >># Deny CONNECT to other than SSL ports >>http_access deny CONNECT !SSL_ports >>http_access allow localhost >>http_access allow lan >>#http_access allow unrestricted >>#http_access deny !Authenticated >> >>Hmm.. this allows your users access without >>requiring authentication.. > Even if I uncomment the last two lines, the > authentication dialog box doesn't appear. > > Comment out the `allow lan' line as well. It is > still being matched > before authentication is needed. Thanks, the dialog box now appears but the user I set in acl "unrestricted" can't be autheticated. In the logs I can see : winbind client not authorized to use winbindd_pam_auth_crap. Ensure permissions on /var/run/samba/winbindd_privileged are set correctly. But daemon winbindd is ran by root and the permissions on the directory and the file pipe are rwx for root. __________________________________________________________________ Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/