Hello, I've read quite often that there are problems with ntlm_auth helper (last one here http://www.dovecot.org/list/dovecot/2014-June/096561.html). But haven't found any confirmation, neither it's working for anybody else nor that it's known taht this issue needs debuging.
Like for ohers, my authentication tests from the commandline with ntlm_auth exactly give expected results. But initial authentication (with Outlook) fail at first, but after entering the user's password, nevertheless succeeds with mech=NTLM. See the attached ntlm-log.txt Can't exactly tell when this regression occured, one year ago nobody had to enter his password, it worked like intended with Outlook (which still is version 2010). Any idea how to debug? It could be also a regression in samba, both highly appreciated applications were upgraded at the same time… Thanks, -Harry
Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: INFO: Current debug levels: Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: all: 5 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: tdb: 5 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: printdrivers: 5 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: lanman: 5 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: smb: 5 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: rpc_parse: 5 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: rpc_srv: 5 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: rpc_cli: 5 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: passdb: 5 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: sam: 5 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: auth: 5 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: winbind: 5 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: vfs: 5 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: idmap: 5 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: quota: 5 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: acls: 5 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: locking: 5 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: msdfs: 5 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: dmapi: 5 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: registry: 5 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: scavenger: 5 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: dns: 5 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: ldb: 5 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: doing parameter max log size = 2048 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: doing parameter workgroup = OURS Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: doing parameter netbios name = OURMACHINE Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: doing parameter dos charset = CP850 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: doing parameter unix charset = UTF-8 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: doing parameter printing = bsd Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: doing parameter printcap name = /dev/null Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: doing parameter disable spoolss = yes Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: doing parameter load printers = no Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: doing parameter show add printer wizard = no Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: doing parameter kerberos method = system keytab Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: doing parameter security = ads Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: doing parameter winbind cache time = 30 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: doing parameter realm = OURS.ACME-ONLINE.DE Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: doing parameter idmap config * : backend = tdb Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: doing parameter idmap config * : range = 100000-1000999 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: doing parameter idmap config OURS : default = yes Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: doing parameter idmap config OURS : backend = rid Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: doing parameter idmap config OURS : range = 10000-20000 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: doing parameter idmap cache time = 30 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: doing parameter winbind rpc only = no Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: doing parameter winbind use default domain = yes Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: doing parameter winbind enum users = yes Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: doing parameter winbind enum groups = yes Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: doing parameter template homedir = /home/%U Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: doing parameter template shell = /bin/tcsh Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: pm_process() returned Yes Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: GENSEC backend 'gssapi_spnego' registered Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: GENSEC backend 'gssapi_krb5' registered Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: GENSEC backend 'gssapi_krb5_sasl' registered Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: GENSEC backend 'schannel' registered Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: GENSEC backend 'spnego' registered Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: GENSEC backend 'ntlmssp' registered Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: Starting GENSEC mechanism ntlmssp Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: Starting GENSEC mechanism ntlmssp Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: Got NTLMSSP neg_flags=0xa2088207 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_UNICODE Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_OEM Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: NTLMSSP_REQUEST_TARGET Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_NTLM Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_ALWAYS_SIGN Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_NTLM2 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_VERSION Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_128 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_56 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: Got user=[ntlmtestuser] domain=[] workstation=[TEST2B] len1=24 len2=260 Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: Login for user []\[ntlmtestuser]@[TEST2B] failed due to [Wrong Password] Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: ../auth/ntlmssp/ntlmssp_server.c:454: Checking NTLMSSP password for \ntlmtestuser failed: NT_STATUS_WRONG_PASSWORD Nov 5 16:29:38 OURMACHINE dovecot: auth: Error: GENSEC login failed: NT_STATUS_LOGON_FAILURE Nov 5 16:29:38 OURMACHINE dovecot: auth: ntlm(?,192.0.2.12,<Jcp3Px4HeACsGAIM>): user not authenticated: NT_STATUS_LOGON_FAILURE Nov 5 16:29:43 OURMACHINE dovecot: auth-worker: Error: Nov 5 16:29:43 OURMACHINE dovecot: auth-worker: Error: Nov 5 16:29:43 OURMACHINE dovecot: auth-worker(40298): pam(ntlmtestuser,192.0.2.12): pam_authenticate() failed: authentication error (password mismatch?) Nov 5 16:30:22 OURMACHINE dovecot: auth: Error: Starting GENSEC mechanism ntlmssp Nov 5 16:30:22 OURMACHINE dovecot: auth: Error: Starting GENSEC mechanism ntlmssp Nov 5 16:30:22 OURMACHINE dovecot: auth: Error: Got NTLMSSP neg_flags=0xa2088207 Nov 5 16:30:22 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_UNICODE Nov 5 16:30:22 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_OEM Nov 5 16:30:22 OURMACHINE dovecot: auth: Error: NTLMSSP_REQUEST_TARGET Nov 5 16:30:22 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_NTLM Nov 5 16:30:22 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_ALWAYS_SIGN Nov 5 16:30:22 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_NTLM2 Nov 5 16:30:22 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_VERSION Nov 5 16:30:22 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_128 Nov 5 16:30:22 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_56 Nov 5 16:30:22 OURMACHINE dovecot: auth: Error: Got user=[ntlmtestuser] domain=[] workstation=[TEST2B] len1=24 len2=260 Nov 5 16:30:22 OURMACHINE dovecot: auth: Error: NTLMSSP Sign/Seal - Initialising with flags: Nov 5 16:30:22 OURMACHINE dovecot: auth: Error: Got NTLMSSP neg_flags=0xa2088205 Nov 5 16:30:22 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_UNICODE Nov 5 16:30:22 OURMACHINE dovecot: auth: Error: NTLMSSP_REQUEST_TARGET Nov 5 16:30:22 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_NTLM Nov 5 16:30:22 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_ALWAYS_SIGN Nov 5 16:30:22 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_NTLM2 Nov 5 16:30:22 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_VERSION Nov 5 16:30:22 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_128 Nov 5 16:30:22 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_56 Nov 5 16:30:22 OURMACHINE dovecot: imap-login: Login: user=<ntlmtestuser>, method=NTLM, rip=192.0.2.12, lip=192.0.2.16, mpid=40302, TLS, session=<Jcp3Px4HeACsGAIM> Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: Starting GENSEC mechanism ntlmssp Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: Starting GENSEC mechanism ntlmssp Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: Got NTLMSSP neg_flags=0xa2088207 Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_UNICODE Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_OEM Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_REQUEST_TARGET Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_NTLM Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_ALWAYS_SIGN Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_NTLM2 Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_VERSION Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_128 Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_56 Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: Got user=[ntlmtestuser] domain=[] workstation=[TEST2B] len1=24 len2=260 Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP Sign/Seal - Initialising with flags: Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: Got NTLMSSP neg_flags=0xa2088205 Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_UNICODE Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_REQUEST_TARGET Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_NTLM Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_ALWAYS_SIGN Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_NTLM2 Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_VERSION Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_128 Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_56 Nov 5 16:30:23 OURMACHINE dovecot: imap-login: Login: user=<ntlmtestuser>, method=NTLM, rip=192.0.2.12, lip=192.0.2.16, mpid=40305, TLS, session=<ReEbQh4HbwCsGAIM> Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: Starting GENSEC mechanism ntlmssp Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: Starting GENSEC mechanism ntlmssp Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: Got NTLMSSP neg_flags=0xa2088207 Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_UNICODE Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_OEM Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_REQUEST_TARGET Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_NTLM Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_ALWAYS_SIGN Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_NTLM2 Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_VERSION Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_128 Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_56 Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: Got user=[ntlmtestuser] domain=[] workstation=[TEST2B] len1=24 len2=260 Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP Sign/Seal - Initialising with flags: Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: Got NTLMSSP neg_flags=0xa2088205 Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_UNICODE Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_REQUEST_TARGET Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_NTLM Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_ALWAYS_SIGN Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_NTLM2 Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_VERSION Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_128 Nov 5 16:30:23 OURMACHINE dovecot: auth: Error: NTLMSSP_NEGOTIATE_56 Nov 5 16:30:23 OURMACHINE dovecot: imap-login: Login: user=<ntlmtestuser>, method=NTLM, rip=192.0.2.12, lip=192.0.2.16, mpid=40308, TLS, session=<k1AhQh4HcQCsGAIM>
