Error validating user via ntlm

14.04.1 My ubuntu server installed Squid to perform http_proxy. 2016/05/05 | ERROR: NTLM Authentication Helper '0x7fb54812af68' crashed! 2016/05/05 | ERROR: NTLM Authentication validating user. And there are some error log in the /var/log/syslog: ...

error validating user via ntlm-83

Error returned ' BH NT_STATUS_UNSUCCESSFUL NT_STATUS_UNSUCCESSFUL' Eventually I tracked the cause down to the following: I was (incorrectly) assuming that the /run/samba/winbindd_privileged directory was being used by ntlm_auth.

This directory is set up by the /etc/init.d/winbind script and looks like so: drwxr-x--- 2 root winbindd_priv 40 Jul 9 /run/samba/winbindd_privileged But the contents of this directory is empty: # ls -l /run/samba/winbindd_privileged/ total 0 Instead, there is another directory that I found like so: drwxr-x--- 2 root root 4096 Jul 10 /var/lib/samba/winbindd_privileged This directory contains the socket file needed: # ls -l /var/lib/samba/winbindd_privileged/ total 0 srwxrwxrwx 1 root root 0 Jul 10 pipe I corrected the group permission on the directory so it looks like: drwxr-x--- 2 root winbindd_priv 4096 Jul 10 /var/lib/samba/winbindd_privileged I restarted squid, and authentication started working correctly.

Or all winbind products need to be correctly configured (at compile time? -- System Information: Debian Release: jessie/sid APT prefers testing APT policy: (990, 'testing'), (500, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 3.14-1-amd64 (SMP w/1 CPU core) Locale: LANG=en_AU. UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages winbind depends on: ii libbsd0 0.6.0-2 ii libc6 2.19-4 ii libcomerr2 1.42.10-1.1 ii libkrb5-26-heimdal 1.6~rc2 dfsg-7 ii libldap-2.4-2 2.4.39-1 ii libpopt0 1.16-8 ii libtalloc2 2.1.1-1 ii libtdb1 1.3.0-1.1 ii libtevent0 0.9.21-1 ii libwbclient0 2:4.1.9 dfsg-1 ii multiarch-support 2.19-4 ii samba 2:4.1.9 dfsg-1 ii samba-libs 2:4.1.9 dfsg-1 winbind recommends no packages.

) to use /run/samba/winbindd_privileged and then remove the /var/lib/samba/winbindd_privileged directory. Versions of packages winbind suggests: ii libnss-winbind 2:4.1.9 dfsg-1 ii libpam-winbind 2:4.1.9 dfsg-1 -- no debconf information I've just upgraded to jessie, (samba/winbind 2:4.2.14 dfsg-0 deb8u2), and i can confirm the bug.

Service Principal Name An SPN for SQL Server is composed of the following elements: • Service Class: This identifies the general class of service. • Host: This is the fully qualified domain name DNS of the computer that is running SQL Server.

• Port: This is the port number that the service is listening on.

Error returned ' BH Internal error' 2016/05/09 | WARNING: ntlmauthenticator #1 exited Errors in syslog: May 9 optsquidproxy kernel: [228590.127125] ntlm_auth[8850]: segfault at 8 ip 00007f201ec729b0 sp 00007ffda249aae8 error 4 in libsamba-running an Apache2 server with NTLM authentication against an AD, stopped working with 500 Internal Server error since the Samba upgrade.

Apache config: Auth Type NTLM Auth Name "..." NTLMAuth on NTLMAuth Helper "/usr/bin/ntlm_auth --helper-We're getting the same thing on 16.04 - narrowed it down to the same segfault.

So the problem is there is both the following directories: /run/samba/winbindd_privileged /var/lib/samba/winbindd_privileged Only the second one is where the socket is created.

Tags: , ,