Zentyal Forum, Linux Small Business Server

Zentyal Server => Installation and Upgrades => Topic started by: dmplus on January 26, 2011, 11:44:54 am

Title: Zentyal ntlm authentication problem
Post by: dmplus on January 26, 2011, 11:44:54 am
Hello,

I newly installed Zentyal 2.0-3 version on an HP DL140 G3 server. I want windows server 2003 standard sp2 active directory users access http via squid, so i installed zentyal office. I configured zentyal as a slave of windows active directory. All is fine, i can see all the ad users under zentyal-office users and groups tab. But when i test http access with one of the ad users, i see a prompt about authentication, asking username and password. Although i wrote the exact username, domain and password, it prompts again. I cant access the web page as i test if it was blocking. Squid doesn' t use ntlm?? I updated squid.conf file auth_param basic program /usr/lib/squid/ldap_auth -v 3 -b ou=Users,dc=xxxxxx,dc=com -u uid -h ldap://192.168.1.1:389 under this line acl authorized proxy_auth required and acl alldeny proxy proxy_auth vel vel is the user in alldeny group in windows ad.

Any help would be appreciated.
Title: Re: Zentyal ntlm authentication problem
Post by: jsalamero on January 30, 2011, 10:47:50 am
You don't need to modify anything on squid.conf. Can you try to login using ldapsearch against the host:port specified on squid.conf?
Title: Re: Zentyal ntlm authentication problem
Post by: dmplus on February 08, 2011, 03:16:21 pm
Hello jsalamero,

in squid conf file ;

auth_param basic realm Zentyal HTTP proxy
auth_param basic program /usr/lib/sqid/ldap_auth -v 3 -b ou=Users,dc=ubuntu -u uid -h ldap://127.0.0.1:389
acl authorized proxy_auth required


I tried ldapsearch command with the information given in squid.conf file "ldapsearch -v 3 -b ou=Users,dc=ubuntu -u uid -h ldap://127.0.0.1:389"
it prompts for username blank password, in this example i tried username=baris
and the result is
baris ********
ERR Success

Thank you in advance.
Title: Re: Zentyal ntlm authentication problem
Post by: dmplus on February 10, 2011, 09:34:34 am
Do you know anyone using Zentyal with windows domain users?