Error winbindd_privileged are set correctly
After upgrading fedora squid proxy server, I have got an error message NT_STATUS_ACCESS_DENIED.
Then I checked the squid cache log and found out that the problem was because of improper permission
#tail -f /var/log/squid/cache.log
utils/ntlm_auth.c:558(winbind_pw_check)
Login for user [domain][user]@[desk01] failed due to [winbind client not authorized to use winbindd_pam_auth_crap. Ensure permissions on /var/lib/samba/winbindd_privileged are set correctly.]
utils/ntlm_auth.c:833(manage_squid_ntlmssp_request)
NTLMSSP BH: NT_STATUS_ACCESS_DENIED
Login for user [domain][user]@[desk01] failed due to [winbind client not authorized to use winbindd_pam_auth_crap. Ensure permissions on /var/lib/samba/winbindd_privileged are set correctly.]
utils/ntlm_auth.c:833(manage_squid_ntlmssp_request)
NTLMSSP BH: NT_STATUS_ACCESS_DENIED
After changing the the permission of winbindd_privileged directory, squid started working perfectly.
#cd /var/lib/samba/
#chown -R root.squid winbindd_privileged/
#service squid restart
#service winbind restart
#chown -R root.squid winbindd_privileged/
#service squid restart
#service winbind restart
THANK YOU POSTER!!!!
I have been working this problem for a very long time. This is the first time I have been guided to winbindd_privileged being in /var/lib/samba/ and this indeed fixed my problem.
Thanks again!
Same here!
Fixed for me on Centos 5.5
Thanks
Got this error..
authenticateNTLMHandleReply: Error validating user via NTLM. Error returned 'BH NT_STATUS_ACCESS_DENIED'
utils/ntlm_auth.c:896(manage_squid_ntlmssp_request_int)
NTLMSSP BH: NT_STATUS_ACCESS_DENIED
Now it is solved..Thanks
Great solution!!! Thanx!!!