Bug 697 - problem authenticating squid 2.5 stable 4 users through ntlm_auth
Summary: problem authenticating squid 2.5 stable 4 users through ntlm_auth
Alias: None
Product: Samba 3.0
Classification: Unclassified
Component: ntlm_auth tool (show other bugs)
Version: 3.0.0
Hardware: All Linux
: P3 major
Target Milestone: none
Assignee: Andrew Bartlett
QA Contact:
Depends on:
Reported: 2003-10-30 03:36 UTC by Kirill
Modified: 2005-11-14 09:26 UTC (History)
0 users

See Also:


Note You need to log in before you can comment on or make changes to this bug.
Description Kirill 2003-10-30 03:37:00 UTC
When using ntlm_auth supplied with samba to check user accounts in w2k domain
somtimes there are such errors in log.winbindd:

[2003/10/30 14:31:12, 5] nsswitch/winbindd.c:winbind_client_read(460)
  read failed on sock 22, pid 13955: EOF

at the same time a see TCP_DENIED entry in squid's log:

TCP_DENIED/407 1777 GET http://ru.samba.org/samba/images/bar1.gif - NONE/- 

Error (like in log.winbindd) occur frequently and it sometimes prevents users 
from surfing, sometimes no.
Comment 1 Kirill 2003-11-02 23:23:08 UTC
Also some debug messages from log.winbind when winbindd launched with -d 10:

[2003/11/03 10:09:46, 10] nsswitch/winbindd.c:process_request(305)
  process_request: request fn GETGRGID
[2003/11/03 10:09:46, 3] nsswitch/winbindd_group.c:winbindd_getgrgid(337)
  [ 9651]: getgrgid 1000
[2003/11/03 10:09:46, 10] nsswitch/winbindd.c:client_write(502)
  client_write: wrote 1300 bytes.
[2003/11/03 10:09:46, 10] nsswitch/winbindd.c:winbind_client_read(455)
  client_read: read 0 bytes. Need 1568 more for a full request.
[2003/11/03 10:09:46, 5] nsswitch/winbindd.c:winbind_client_read(460)
  read failed on sock 23, pid 9651: EOF
Comment 2 Gerald (Jerry) Carter (dead mail address) 2003-11-03 09:27:54 UTC
another bug for andrew
Comment 3 Kirill 2003-11-03 22:39:39 UTC
sorry, guys.
actually this was a bug in IE, which fails to properly authenticate through NTLM

some explanations can be found here:


and here is the patch for IE which fixes problem:

Comment 4 Andrew Bartlett 2003-11-06 15:35:58 UTC
Closed as a client bug.
Comment 5 Gerald (Jerry) Carter (dead mail address) 2005-11-14 09:26:52 UTC
database cleanup