AW: AW: AW: AW: AW: [squid-users] smb_auth

There are problems with (access to) file //PC01/NETLOGON/proxyauth.
Most likely user melvin has no read access to this file (see below).

Logon to your PDC via a windows computer and try to access proxyauth.
 
>
> here is the output:
>
> /usr/local/squid/bin/smb_auth -W SVR10 -U PC01 -d
> melvin ********
> Domain Name: SVR10 > correct
> Pass-through authentication: no
> Query address options: -U PC01 -R
> Domain controller IP address: 10.8.1.50 > correct
> Domain controller NETBIOS name: PC01 > correct
> Contents of //PC01/NETLOGON/proxyauth:

Should read:
Contents of //PC01/NETLOGON/proxyauth: allow
                                       ^^^^^^

Werner Rost

>
> thanks
>
> >From: Werner.Rost@zf.com
> >To: kewell1010@hotmail.com, Werner.Rost@zf.com,
> >squid-users@squid-cache.org
> >Subject: AW: AW: AW: AW: [squid-users] smb_auth
> >Date: Wed, 10 Dec 2003 09:22:14 +0100
> >
> >Please show us the output of your test
> >
> >/usr/local/bin/smb_auth -W yourdomain -U yourPDC -d
> >
> >Mit freundlichem Gruß/Yours sincerely
> >Werner Rost
> >GM-FIR - Netzwerk
> >
> >ZF Boge Elastmetall GmbH
> >Friesdorfer Str. 175, 53175 Bonn, Deutschland/Germany
> Telefon/Phone +49
> >228 3825 - 420, Telefax/Fax +49 228 3825 - 398 werner.rost@zf.com
> >
> >
> >
> >
> > > -----Ursprüngliche Nachricht-----
> > > Von: melvin melvin [mailto:kewell1010@hotmail.com]
> > > Gesendet: Mittwoch, 10. Dezember 2003 09:17
> > > An: Werner.Rost@zf.com; squid-users@squid-cache.org
> > > Betreff: RE: AW: AW: AW: [squid-users] smb_auth
> > >
> > >
> > > hi,
> > >
> > > i checked the output, every information about the DC IP
> address and
> > > the name is correct.
> > > don think there shld be any problems with my account username
> > > and password.
> > > i asked another user to tried it as well but still return the
> > > same err. i think there may be something wrong with my
> > > proxyauth file the proxyauth file is just a normal file
> > > without any extension with the word
> > > "allow" in it using notepad to create??
> > >
> > > thanks in advance
> > > mel
> > >
> > >
> > > >From: Werner.Rost@zf.com
> > > >To: kewell1010@hotmail.com, Werner.Rost@zf.com,
> > > >squid-users@squid-cache.org
> > > >Subject: AW: AW: AW: [squid-users] smb_auth
> > > >Date: Wed, 10 Dec 2003 08:43:39 +0100
> > > >
> > > >Please repeat the test with a user account that is
> > > >- a valid account on your NT domain
> > > >- is not disabled
> > > >- the password is not outdated
> > > >- has read access to the file NETLOGON/proxyauth
> > > >
> > > >Say this account is "melvin secret"
> > > >
> > > >Enter the command
> > > >/usr/local/bin/smb_auth -W yourdomain -U yourPDC -d
> > > >melvin secret <-- your input
> > > >
> > > >Now check carefully every value of the output:
> > > >
> > > >
> > > >Domain name: yourdomain
> > > > ^^^^^^^^^^
> > > >Pass-through authentication: no
> > > >Query address options: -U yourPDC -R
> > > > ^^^^^^^
> > > >Domain controller IP address: 10.1.3.17
> > > > ^^^^^^^^^ Is this really
> > > the ip of your
> > > >PDC?
> > > >Domain controller NETBIOS name: yourPDC
> > > > ^^^^^^^
> > > >Contents of //yourPDC/NETLOGON/proxyauth: allow
> > > > ^^^^^
> > > >OK
> > > >
> > > >
> > > >
> > > >
> > > >Does this test work for you? If not, what is the output of the
> > > >above command?
> > > >
> > > >Mit freundlichem Gruß/Yours sincerely
> > > >Werner Rost
> > > >GM-FIR - Netzwerk
> > > >
> > > >ZF Boge Elastmetall GmbH
> > > >Friesdorfer Str. 175, 53175 Bonn, Deutschland/Germany
> > > Telefon/Phone +49
> > > >228 3825 - 420, Telefax/Fax +49 228 3825 - 398 werner.rost@zf.com
> > > >
> > > >
> > > >
> > > >
> > > > > -----Ursprüngliche Nachricht-----
> > > > > Von: melvin melvin [mailto:kewell1010@hotmail.com]
> > > > > Gesendet: Mittwoch, 10. Dezember 2003 02:12
> > > > > An: Werner.Rost@zf.com; squid-users@squid-cache.org
> > > > > Betreff: RE: AW: AW: [squid-users] smb_auth
> > > > >
> > > > >
> > > > > > >Example for bad access: username + password is not
> correct or
> > > > > > >user has no read access to proxyauth:
> > > > > > >
> > > > > > >melvin wrongpassword
> > > > > > >Domain name: bogegod
> > > > > > >Pass-through authentication: no
> > > > > > >Query address options: -U gont-pdc01 -R
> > > > > > >Domain controller IP address: 10.23.4.141
> > > > > > >Domain controller NETBIOS name: GONT-PDC01
> > > > > > >Contents of //GONT-PDC01/NETLOGON/proxyauth:
> > > > > > >ERR <--- no success
> > > > >
> > > > > i had the proxyauth file in my netlogon directory,
> with one word
> > > > > allow inside it READ access to all domain users. however, i
> > > > > still cant get smb_auth to work even though the password and
> > > > > username is correct. is there any other reasons why this
> > > > > happens?
> > > > >
> > > > > thanks in advance
> > > > > mel
> > > > >
> > > > >
> ________________________________________________________________
> > > > > _
> > > > > Get MSN Hotmail alerts on your mobile.
> > > > > http://en-asiasms.mobile.msn.com/ac.aspx?cid=1002
> > > > >
> > >
> > > _________________________________________________________________
> > > Find gifts, buy online with MSN Shopping.
> > > http://shopping.msn.com.sg/
> > >
>
> _________________________________________________________________
> Find it on the web with MSN Search. http://search.msn.com.sg/
>
Received on Wed Dec 10 2003 - 01:43:22 MST