From http://www.squid-cache.org/Doc/FAQ/FAQ-23.html * Test winbindd user authentication: # wbinfo -a mydomain\\myuser%mypasswd plaintext password authentication succeeded error code was NT_STATUS_OK (0x0) challenge/response password authentication succeeded error code was NT_STATUS_OK (0x0) NOTE: both plaintext and challenge/response should return "succeeded." If there is no "challenge/response" status returned then Samba was not built with "-- with-winbind-auth-challenge" and cannot support ntlm authentication. ** Samba stock ebuild fails this test! ** Reproducible: Always Steps to Reproduce: 1. 2. 3. Samba ebuild needs a USE flag to allow optional enabling of "--with-winbind- auth-challenge" compile flag for Squid users who want to use NTLM auth helpers.
fixed in samba-2.2.8_pre1