On Wed, 07 Apr 2010 22:44:02 +0200, David Touzeau <david@xxxxxxxxxx> wrote: > Dear > > I have installed samba + winbidd on the Squid computer and configure it > has PDC > > squid is compiled has : > Squid Cache: Version 3.0.STABLE24 > configure options: '--prefix=/usr' '--includedir=/include' > '--mandir=/share/man' '--infodir=/share/info' '--sysconfdir=/etc' > '--localstatedir=/var' '--libexecdir=/lib/squid3' > '--disable-maintainer-mode' '--disable-dependency-tracking' '--srcdir=.' > '--datadir=/usr/share/squid3' '--sysconfdir=/etc/squid3' > '--mandir=/usr/share/man' '--enable-gnuregex' > '--enable-removal-policy=heap' '--enable-follow-x-forwarded-for' > '--with-maxfd=32000' '--with-large-files' '--disable-dlmalloc' > '--with-pthreads' '--enable-esi' '--enable-storeio=aufs,diskd,ufs' > '--with-aufs-threads=10' '--with-maxfd=16384' '--enable-useragent-log' > '--enable-referer-log' '--enable-x-accelerator-vary' '--with-dl' > '--enable-basic-auth-helpers=LDAP' '--enable-truncate' > '--enable-linux-netfilter' '--enable-auth=basic,digest,ntlm' > '--enable-digest-auth-helpers=ldap,password' > '--enable-external-acl-helpers=ip_user,ldap_group,unix_group,wbinfo_group' > '--enable-basic-auth-helpers=LDAP,MSNT,multi-domain-NTLM,SMB' > '--enable-ntlm-auth-helpers=SMB,no_check' '--with-default-user=squid' > '--enable-icap-client' '--enable-cache-digests' '--enable-icap-support' > '--enable-poll' '--enable-epoll' '--enable-async-io' > '--enable-delay-pools' '--enable-ssl' 'CFLAGS=-DNUMTHREADS=60 -O3 -pipe > -fomit-frame-pointer -funroll-loops -ffast-math -fno-exceptions' > > > > NTLM events in debug mode are : > > ntlm-auth[18942](ntlm_auth.c:444): sending 'BH Helper detected protocol > error' to squid > ntlm-auth[18942](ntlm_auth.c:287): managing request > ntlm-auth[18942](ntlm_auth.c:293): ntlm authenticator. Got > 'david.touzeau 54321' from Squid > ntlm-auth[18942](ntlm_auth.c:444): sending 'BH Helper detected protocol > error' to squid > ntlm-auth[18942](ntlm_auth.c:287): managing request > ntlm-auth[18942](ntlm_auth.c:293): ntlm authenticator. Got > 'david.touzeau 54321' from Squid > ntlm-auth[18942](ntlm_auth.c:444): sending 'BH Helper detected protocol > error' to squid > ntlm-auth[18942](ntlm_auth.c:287): managing request > ntlm-auth[18942](ntlm_auth.c:293): ntlm authenticator. Got > 'david.touzeau 54321' from Squid > ntlm-auth[18942](ntlm_auth.c:444): sending 'BH Helper detected protocol > error' to squid > > Here it is my squid conf > > auth_param ntlm program /usr/lib/squid3/ntlm_auth -d > WORKGROUP/debian503-http > auth_param basic program /usr/lib/squid3/ntlm_auth -d > WORKGROUP/debian503-http > auth_param ntlm children 5 > auth_param basic children 5 > auth_param basic realm Squid proxy-caching web server > #--------- NTLM ACL settings > acl ntlm_users proxy_auth REQUIRED > > has smb.conf is > > [global] > workgroup=WORKGROUP > netbios name=debian503-http > server string=%h server > disable netbios=no > > > How can i resolve it ? Try the ntlm_auth helper provided by Samba. The squid one does not do full NTLM. Amos
