[squid-users] [External] squid-users Digest, Vol 105, Issue 1

[Bobby Matznick]

Hello Adam, thanks for your reply. Yes, I am aware the executable is from Winbind, it is installed, and it does exist in the location where squid is looking for it. It doesn't seem to be able to access it though. I checked the Debian server I am running on currently while trying to upgrade this one and ntlm_auth is in the exact same location, /usr/bin/ntlm_auth. I did find that apparmor was turned on with the upgrade, I disable that but still see the same message.
Here is what I have in squid.conf
auth_param ntlm program /usr/bin/ntlm_auth -helper-protocol=squid-2.5-ntlmssp -require-membership-of="domain\\domain group"
auth_param ntlm children 250

ntlm_auth does exist at /usr/bin/ntlm_auth

log messages from /var/log/squid/cache.log

ipcCreate:? //usr/bin/ntlm_auth:? (13) Permission denied
WARNING: ntlmauthenticator #Hlpr253452 exited
ipcCreate:? //usr/bin/ntlm_auth:? (13) Permission denied
WARNING: ntlmauthenticator #Hlpr253452 exited
ipcCreate:? //usr/bin/ntlm_auth:? (13) Permission denied
WARNING: ntlmauthenticator #Hlpr253452 exited


Bobby


From: squid-users <squid-users-bounces at lists.squid-cache.org> On Behalf Of squid-users-request at lists.squid-cache.org
Sent: Tuesday, May 2, 2023 6:00 AM
To: squid-users at lists.squid-cache.org
Subject: [External] squid-users Digest, Vol 105, Issue 1

Caution: This is an external email and has a suspicious subject or content. Please take care when clicking links or opening attachments. When in doubt, contact your IT Department
Send squid-users mailing list submissions to
squid-users at lists.squid-cache.org<mailto:squid-users at lists.squid-cache.org>

To subscribe or unsubscribe via the World Wide Web, visit
http://lists.squid-cache.org/listinfo/squid-users<http://lists.squid-cache.org/listinfo/squid-users>
or, via email, send a message with subject or body 'help' to
squid-users-request at lists.squid-cache.org<mailto:squid-users-request at lists.squid-cache.org>

You can reach the person managing the list at
squid-users-owner at lists.squid-cache.org<mailto:squid-users-owner at lists.squid-cache.org>

When replying, please edit your Subject line so it is more specific
than "Re: Contents of squid-users digest..."


Today's Topics:

1. Re: Squid ntlm_authenticator #Hlpr254332 exited (Adam Majer)


----------------------------------------------------------------------

Message: 1
Date: Tue, 2 May 2023 12:31:38 +0200
From: Adam Majer <amajer at suse.de<mailto:amajer at suse.de>>
To: squid-users at lists.squid-cache.org<mailto:squid-users at lists.squid-cache.org>
Subject: Re: [squid-users] Squid ntlm_authenticator #Hlpr254332 exited
Message-ID: <3fcc9e52-f4f7-8a8c-6fd9-840b1b09a486 at suse.de<mailto:3fcc9e52-f4f7-8a8c-6fd9-840b1b09a486 at suse.de>>
Content-Type: text/plain; charset=UTF-8; format=flowed

On 4/28/23 21:05, Bobby Matznick wrote:
> Upgraded to Debian 11 and all that comes with that (updated all

Debian 12 is coming out in a month or so, so please try to upgrade sooner ;)

> Any help would be greatly appreciated. Thanks!!
>
> Squid cache log entries:
> ipcCreate:? //usr/bin/ntlm_auth:? (13) Permission denied
> WARNING: ntlmauthenticator #Hlpr253452 exited

/usr/bin/ntlm_auth doesn't exist in squid and didn't exist in the last
Debian version (buster) either. If it's your own script, it says that
it's simply not executable

I've found now that this file comes from package `winbind`. Do you have
it installed?

https://packages.debian.org/bullseye/winbind<https://packages.debian.org/bullseye/winbind>

Squid is not looking anywhere except what you have in squid.conf.

- Adam


------------------------------

Subject: Digest Footer

_______________________________________________
squid-users mailing list
squid-users at lists.squid-cache.org<mailto:squid-users at lists.squid-cache.org>
http://lists.squid-cache.org/listinfo/squid-users<http://lists.squid-cache.org/listinfo/squid-users>


------------------------------

End of squid-users Digest, Vol 105, Issue 1
*******************************************
CONFIDENTIALITY NOTICE: The information contained in and attached to this email is intended only for the confidential use of the person or entity to which the email is addressed. This email and any attachments may contain privileged and confidential information. If you are not the intended recipient, you are notified that you received this email in error and that any reading, retention, use or distribution of this email and attachments is strictly prohibited. If you received this email in error, you are requested to immediately notify us by calling 888-728-3550 or by return email and immediately and permanently delete the email and any attachments. Thank you.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20230502/c253ed9b/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0.jpg
Type: image/jpeg
Size: 6398 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20230502/c253ed9b/attachment-0001.jpg>