[squid-users] Squid instalaltion for NTLM error

Tevfik Ceydeliler tevfik.ceydeliler at gmail.com
Thu Sep 26 10:34:49 UTC 2019


Hi
In
https://wiki.squid-cache.org/ConfigExamples/Authenticate/WindowsActiveDirectory#Kerberos
page,
there is directive to add crontab:

05  4  *   *   *     net rpc changetrustpw -d 1 | logger -t changetrustpw

when I run this command as:
net rpc changetrustpw -d 5
I get an error:
rocessing section "[global]"
Registered MSG_REQ_POOL_USAGE
Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
lp_load_ex: refreshing parameters
Initialising global parameters
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
Processing section "[global]"
added interface ens192:1 ip=10.65.12.246 bcast=10.65.12.255
netmask=255.255.255.192
added interface ens192:0 ip=10.65.12.247 bcast=10.65.12.255
netmask=255.255.255.192
added interface ens192 ip=10.65.12.250 bcast=10.65.12.255
netmask=255.255.255.192
Connecting to 10.65.12.254 at port 445
got OID=1.3.6.1.4.1.311.2.2.30
got OID=1.2.840.48018.1.2.2
GENSEC backend 'gssapi_spnego' registered
GENSEC backend 'gssapi_krb5' registered
GENSEC backend 'gssapi_krb5_sasl' registered
GENSEC backend 'spnego' registered
GENSEC backend 'schannel' registered
GENSEC backend 'naclrpc_as_system' registered
GENSEC backend 'sasl-EXTERNAL' registered
GENSEC backend 'ntlmssp' registered
GENSEC backend 'ntlmssp_resume_ccache' registered
GENSEC backend 'http_basic' registered
GENSEC backend 'http_ntlm' registered
GENSEC backend 'http_negotiate' registered
Got challenge flags:
Got NTLMSSP neg_flags=0x62898215
NTLMSSP: Set final flags:
Got NTLMSSP neg_flags=0x62008a15
NTLMSSP Sign/Seal - Initialising with flags:
Got NTLMSSP neg_flags=0x62008a15
SPNEGO login failed: {Access Denied} A process has requested access to an
object but has not been granted those access rights.
Cannot connect to server (anonymously).  Error was NT_STATUS_ACCESS_DENIED
Connection failed: NT_STATUS_ACCESS_DENIED
failed to make ipc connection: NT_STATUS_ACCESS_DENIED
return code = -1

I search it but there is nothing appropriate solution about failed to make
ipc connection: NT_STATUS_ACCESS_DENIED

error
What is missing?
Regards.

-- 
Tevfik Ceydeliler
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20190926/67eabbba/attachment.html>


More information about the squid-users mailing list