Author Topic: Zentyal ntlm authentication problem  (Read 4274 times)

dmplus

  • Zen Apprentice
  • *
  • Posts: 4
  • Karma: +0/-0
    • View Profile
Zentyal ntlm authentication problem
« on: January 26, 2011, 11:44:54 am »
Hello,

I newly installed Zentyal 2.0-3 version on an HP DL140 G3 server. I want windows server 2003 standard sp2 active directory users access http via squid, so i installed zentyal office. I configured zentyal as a slave of windows active directory. All is fine, i can see all the ad users under zentyal-office users and groups tab. But when i test http access with one of the ad users, i see a prompt about authentication, asking username and password. Although i wrote the exact username, domain and password, it prompts again. I cant access the web page as i test if it was blocking. Squid doesn' t use ntlm?? I updated squid.conf file auth_param basic program /usr/lib/squid/ldap_auth -v 3 -b ou=Users,dc=xxxxxx,dc=com -u uid -h ldap://192.168.1.1:389 under this line acl authorized proxy_auth required and acl alldeny proxy proxy_auth vel vel is the user in alldeny group in windows ad.

Any help would be appreciated.
« Last Edit: January 26, 2011, 12:31:16 pm by dmplus »

jsalamero

  • Zentyal Staff
  • Zen Hero
  • *****
  • Posts: 1419
  • Karma: +45/-1
    • View Profile
Re: Zentyal ntlm authentication problem
« Reply #1 on: January 30, 2011, 10:47:50 am »
You don't need to modify anything on squid.conf. Can you try to login using ldapsearch against the host:port specified on squid.conf?

dmplus

  • Zen Apprentice
  • *
  • Posts: 4
  • Karma: +0/-0
    • View Profile
Re: Zentyal ntlm authentication problem
« Reply #2 on: February 08, 2011, 03:16:21 pm »
Hello jsalamero,

in squid conf file ;

auth_param basic realm Zentyal HTTP proxy
auth_param basic program /usr/lib/sqid/ldap_auth -v 3 -b ou=Users,dc=ubuntu -u uid -h ldap://127.0.0.1:389
acl authorized proxy_auth required


I tried ldapsearch command with the information given in squid.conf file "ldapsearch -v 3 -b ou=Users,dc=ubuntu -u uid -h ldap://127.0.0.1:389"
it prompts for username blank password, in this example i tried username=baris
and the result is
baris ********
ERR Success

Thank you in advance.

dmplus

  • Zen Apprentice
  • *
  • Posts: 4
  • Karma: +0/-0
    • View Profile
Re: Zentyal ntlm authentication problem
« Reply #3 on: February 10, 2011, 09:34:34 am »
Do you know anyone using Zentyal with windows domain users?