Re: [squid-users] Squid + domain AD

You must config krb5.conf

in w2k domains kdc is the first installed domain controller

----- Original Message -----
From: "yann guillemot" <yannguillemot@tele2.fr>
To: <squid-users@squid-cache.org>
Sent: Thursday, December 01, 2005 4:24 PM
Subject: [squid-users] Squid + domain AD

> Hi,
>
> Please help me...
> I have a problem with authentification.
>
> My config is :
>
> RedHat 3 ES
>
> Squid Cache: Version 2.5.STABLE12
> configure options: --disable-wccp
> --disable-ident-lookups
> --enable-auth=ntlm,basic
> --enable-basic-auth-helpers=winbind
> --enable-ntlm-auth-helpers=winbind
> --enable-external-acl-helpers=wbinfo_group,winbind_group
>
> samba-3.0.20b
> configure options --with-winbind
>
> My smb.conf is :
> [global]
> workgroup = domain
> password server = dcxxx1
> security = ads
> winbind uid = 10000-20000
> winbind gid = 10000-20000
> winbind use default domain = yes
> wins proxy = no
> wins server = xxxx
> dns proxy = no
> name resolve order = wins lmhosts host bcast
>
> [homes]
>
> [printers]
>
> I start the daemon nmbd and winbindd and we search to join
> my domain ad :
>
> ./net ads join -U toto
> domservice's password:
> [2005/12/01 13:57:34, 0]
> libads/kerberos.c:ads_kinit_password(146)
> kerberos_kinit_password toto@DOMAIN.AD failed: Cannot
> find KDC for requested realm
> [2005/12/01 13:57:34, 0] utils/net_ads.c:ads_startup(191)
> ads_connect: Cannot find KDC for requested realm
>
>
> Have you an idea ?
>
Received on Thu Dec 01 2005 - 07:27:34 MST