When using ntlm_auth supplied with samba to check user accounts in w2k domain somtimes there are such errors in log.winbindd: [2003/10/30 14:31:12, 5] nsswitch/winbindd.c:winbind_client_read(460) read failed on sock 22, pid 13955: EOF at the same time a see TCP_DENIED entry in squid's log: TCP_DENIED/407 1777 GET http://ru.samba.org/samba/images/bar1.gif - NONE/- text/html Error (like in log.winbindd) occur frequently and it sometimes prevents users from surfing, sometimes no.
Also some debug messages from log.winbind when winbindd launched with -d 10: [2003/11/03 10:09:46, 10] nsswitch/winbindd.c:process_request(305) process_request: request fn GETGRGID [2003/11/03 10:09:46, 3] nsswitch/winbindd_group.c:winbindd_getgrgid(337) [ 9651]: getgrgid 1000 [2003/11/03 10:09:46, 10] nsswitch/winbindd.c:client_write(502) client_write: wrote 1300 bytes. [2003/11/03 10:09:46, 10] nsswitch/winbindd.c:winbind_client_read(455) client_read: read 0 bytes. Need 1568 more for a full request. [2003/11/03 10:09:46, 5] nsswitch/winbindd.c:winbind_client_read(460) read failed on sock 23, pid 9651: EOF
another bug for andrew
sorry, guys. actually this was a bug in IE, which fails to properly authenticate through NTLM some explanations can be found here: http://support.microsoft.com/default.aspx?scid=kb;EN-US;312176 and here is the patch for IE which fixes problem: http://support.microsoft.com/default.aspx?id=kb;en-us;331906
Closed as a client bug.
database cleanup