Winbind works properly , my bad I was issuing sudo wbinfo -a <username> where it should been sudo wbinfo -a domain\\username Thanks for help. Regard On 18 March 2011 19:22, Go Wow <gowows@xxxxxxxxx> wrote: > After issuing the command gpasswd -a proxy winbindd_priv > > wbinfo -a <username> returns sucess for challenge/response but not for > plain text. No error given > > sudo wbinfo -a this.user > Enter this.user's password: > plaintext password authentication failed > Could not authenticate user this.user with plaintext password > Enter this.user's password: > challenge/response password authentication succeeded > > No error info in winbind log as well. > > > Regards > > > > > On 18 March 2011 17:14, Go Wow <gowows@xxxxxxxxx> wrote: >> Thanks Amos. >> >> I was going to try with cache_effective_user setting in squid.conf but >> I will try this config first. >> >> Will update you guys. >> >> >> Regards >> >> On 18 March 2011 17:06, Amos Jeffries <squid3@xxxxxxxxxxxxx> wrote: >>> On 19/03/11 00:15, Go Wow wrote: >>>> >>>> There is a script in /etc/init.d/winbind I tried editing it but still >>>> no luck. I check /etc/init.d/smbd but there is no mentioning about >>>> winbind. >>>> >>>> On 18 March 2011 15:02, Alex Crow wrote: >>>>> >>>>> On 18/03/11 10:47, Go Wow wrote: >>>>>> >>>>>> Just to kill my curiosity and resolve the issue I added proxy and root >>>>>> user to winbindd_priv group as well. But still damn winbind wont >>>>>> start. >>>>>> >>>>>> >>>>>> Regards >>>>> >>>>> Check /etc/init.d/winbind (or /etc/init.d/samba if you don't have >>>>> separate >>>>> scripts for winbind) to make sure it does not set permissions on the >>>>> directory. >>>>> >>>>> Some distributions seem to do this, I think it might even be in upstream >>>>> Samba. Just comment it out if it's doing it - it seems a stupid think to >>>>> put >>>>> in an init script to me. >>>>> >>>>> Cheers >>>>> >>>>> Alex >>>>> >>>>> >>> >>> The correct configuration is detailed here: >>> http://wiki.squid-cache.org/ConfigExamples/Authenticate/Ntlm#winbind_privileged_pipe_permissions >>> >>> One major gotcha: >>> RHEL and a few other OS patch a hard-coded value for this directive. So >>> that removing it from config still fails. In that case a full re-build >>> without the distro patch is required. >>> >>> Amos >>> -- >>> Please be using >>> Current Stable Squid 2.7.STABLE9 or 3.1.11 >>> Beta testers wanted for 3.2.0.5 >>> >> >
