Hi,
I upgraded a working centos5.5 with squid using ntlm auth to centos 5.6 today. After doing so squid failed to authenticate. Downgrading samba3x to samba3x-3.3.8-0.52.el5_5.2 got things working again.
In the squid config I have, auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp in the squid config and this was working until the upgrade.
testparm shows no errors and the logs do not indicate a problem except that authentication fails.
With samba3x-3.5.4-0.70.el5_6.1.x86_64 installed the following command fails: /usr/bin/ntlm_auth --username=myuser with the following error:
[2011/06/09 10:21:19.538041, 2] winbindd/winbindd_pam.c:2001(winbindd_dual_pam_auth_crap) NTLM CRAP authentication for user [mydomain][myuser] returned NT_STATUS_INVALID_HANDLE (PAM: 4)
with samba3x-3.3.8-0.52.el5_5.2 I get the following:
(indy pts3) # /usr/bin/ntlm_auth --username=myuser password: NT_STATUS_OK: Success (0x0) (indy pts3) #
[2011/06/09 18:18:30, 2] passdb/pdb_ldap.c:init_sam_from_ldap(571) init_sam_from_ldap: Entry found for user: myuser [2011/06/09 18:18:30, 2] auth/auth.c:check_ntlm_password(308) check_ntlm_password: authentication for user [myuser] -> [myuser] -> [myuser] succeeded
Has anyone else seen this behavior?
Regards,