ntlm_auth

Name

ntlm_auth — tool to allow external access to Winbind's NTLM authentication function

Synopsis

ntlm_auth [-d debuglevel] [-l logdir] [-s <smb config file>]

DESCRIPTION

This tool is part of the samba(7) suite.

ntlm_auth is a helper utility that authenticates +ntlm_auth

Name

ntlm_auth — tool to allow external access to Winbind's NTLM authentication function

Synopsis

ntlm_auth [-d debuglevel] [-l logdir] [-s <smb config file>]

DESCRIPTION

This tool is part of the samba(7) suite.

ntlm_auth is a helper utility that authenticates users using NT/LM authentication. It returns 0 if the users is authenticated successfully and 1 if access was denied. ntlm_auth uses winbind to access the user and authentication data for a domain. This utility is only intended to be used by other programs (currently Squid and mod_ntlm_winbind) -

OPERATIONAL REQUIREMENTS

The winbindd(8) daemon must be operational for many of these commands to function.

Some of these commands also require access to the directory winbindd_privileged in $LOCKDIR. This should be done either by running this command as root or providing group access to the winbindd_privileged directory. For - security reasons, this directory should not be world-accessable.

OPTIONS

--helper-protocol=PROTO: + security reasons, this directory should not be world-accessable.

OPTIONS

--helper-protocol=PROTO

Operate as a stdio-based helper. Valid helper protocols are:

squid-2.4-basic

Server-side helper for use with Squid 2.4's basic (plaintext) @@ -59,13 +59,13 @@ period . indicates that one side has finished supplying data to the other. (Which in turn could cause the helper to authenticate the - user).

Curently implemented parameters from the + user).

Currently implemented parameters from the external program to the helper are:

Warning

Implementors should take care to base64 encode any data (such as usernames/passwords) that may contain malicous user data, such as a newline. They may also need to decode strings from the helper, which likewise may have been base64 encoded.

Username

The username, expected to be in Samba's unix charset. -

Example 1.

Username: bob

Example 2.

Username:: Ym9i

NT-Domain

The user's domain, expected to be in +

Example 1.

Username: bob

Example 2.

Username:: Ym9i

NT-Domain

The user's domain, expected to be in Samba's unix charset.

Example 3.

NT-Domain: WORKGROUP

Example 4.

NT-Domain:: V09SS0dST1VQ

Full-Username

The fully qualified username, expected to be in Samba's unix charset and qualified with the -- cgit v1.2.3