[Samba] winbindd_privileged problem with 3.0.28a

Hi, all.

Has anyone else experienced issues with using ntlm_auth in 3.0.28a? We have
had squid set up to use ntlm_auth for quite some time & the latest update
seems to break.

I'm getting (in /var/log/messages)

Apr 23 10:13:51 cyclops (ntlm_auth): Login for user [NSTARBANK]\[drandolph]@
[NSB_DAVELAPTOP] failed due to [winbind client not authorized to
use winbindd_pam_auth_crap. Ensure permissions
on /var/lib/samba/winbindd_privileged are set correctly.]
Apr 23 10:13:51 cyclops (ntlm_auth): [2008/04/23 10:13:51, 0]
utils/ntlm_auth.c:manage_squid_ntlmssp_request(776)
Apr 23 10:13:51 cyclops (ntlm_auth): [2008/04/23 10:13:51, 0]
utils/ntlm_auth.c:manage_squid_ntlmssp_request(776)
Apr 23 10:13:51 cyclops (ntlm_auth): NTLMSSP BH: NT_STATUS_ACCESS_DENIED
Apr 23 10:13:51 cyclops (ntlm_auth): NTLMSSP BH: NT_STATUS_ACCESS_DENIED

I have checked and double-checked that the squid process is running as
user "squid" and that "squid" is a member of the wbpriv group.

Perms on the winbindd_privileged folder are:

drwxr-x--- 2 root wbpriv 4096 2008-04-23 10:00 winbindd_privileged
[root@cyclops samba]# pwd
/var/lib/samba



If I fiddle with the perms then winbind won't even start & I'm kind of at a
loss to explain what is going on as I can't find any bugs filed, etc. I
thought I'd ask here & see if the 3.0.28a broke for anyone else.

Thanks for any input.
dave

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba