[CentOS] NTLM auth fails after upgrade to centos 5.6

Tom Diehl

tdiehl at rogueind.com
Thu Jun 9 22:24:01 UTC 2011


Hi,

I upgraded a working centos5.5 with squid using ntlm auth to centos 5.6 today.
After doing so squid failed to authenticate. Downgrading samba3x to 
samba3x-3.3.8-0.52.el5_5.2 got things working again.

In the squid config I have, 
auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
in the squid config and this was working until the upgrade.

testparm shows no errors and the logs do not indicate a problem except that
authentication fails.

With samba3x-3.5.4-0.70.el5_6.1.x86_64 installed the following command fails:
/usr/bin/ntlm_auth --username=myuser with the following error:

[2011/06/09 10:21:19.538041,  2] winbindd/winbindd_pam.c:2001(winbindd_dual_pam_auth_crap)
NTLM CRAP authentication for user [mydomain]\[myuser] returned NT_STATUS_INVALID_HANDLE (PAM: 4)

with samba3x-3.3.8-0.52.el5_5.2 I get the following:

(indy pts3) # /usr/bin/ntlm_auth --username=myuser
password: 
NT_STATUS_OK: Success (0x0)
(indy pts3) #

[2011/06/09 18:18:30,  2] passdb/pdb_ldap.c:init_sam_from_ldap(571)
   init_sam_from_ldap: Entry found for user: myuser
[2011/06/09 18:18:30,  2] auth/auth.c:check_ntlm_password(308)
   check_ntlm_password:  authentication for user [myuser] -> [myuser] -> [myuser] succeeded

Has anyone else seen this behavior?

Regards,

-- 
Tom Diehl       tdiehl at rogueind.com      Spamtrap address mtd123 at rogueind.com



More information about the CentOS mailing list