On Wed, 2013-10-02 at 10:47 -0300, Silvio Aparecido wrote: > Hello, > > first, sorry by duplicated email, my last have write errors > > I'm having a little problem after logging into domain via samba, after a > few minutes the squid no longer authenticates the users through single > sign on and keeps asking for authentication in the browser without stopping.
> Error logs: > > [2013/10/01 19:39:44, 0] > utils/ntlm_auth.c:833(manage_squid_ntlmssp_request) > NTLMSSP BH: NT_STATUS_ACCESS_DENIED > 2013/10/01 19:39:44| authenticateNTLMHandleReply: Error validating user > via NTLM. Error returned 'BH NT_STATUS_ACCESS_DENIED' > > Login for user [SALE]\[wellington.gomes]@[TI-06] failed due to > [Access denied] > 2013/10/01 19:37:35| authenticateNTLMHandleReply: Error validating user > via NTLM. Error returned 'BH NT_STATUS_ACCESS_DENIED' > [2013/10/01 19:37:35, 0] > utils/ntlm_auth.c:833(manage_squid_ntlmssp_request) > NTLMSSP BH: NT_STATUS_ACCESS_DENIED > > [2013/10/01 19:36:52, 10] utils/ntlm_auth.c:2190(manage_squid_request) > NTLMSSP BH: NT_STATUS_ACCESS_DENIED > > [2013/10/01 10:30:12, 3] utils/ntlm_auth.c:329(check_plaintext_auth) > NT_STATUS_ACCESS_DENIED: Access denied (0xc0000022) What does wbinfo -P show? Are you correctly joined to the domain. Can you authenticate using wbinfo as root, and then as squid? What do the winbind logs show? Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba