RE: [squid-users] SquidNT 2.6 mswin_check_lm_group.exe problem

Hi,

I have exactly the same problem trying to upgrade from 2.5stable14 to 2.6stable1

with 2.5,i have no problems and i have this lines in cache.log :

/win32_check_group.exe[3888]: Got 'domain\\user Internet_interdit' from Squid (length: 31).
/win32_check_group.exe[3888]: Valid_Global_Groups: checking group membership of 'domain\user'.
/win32_check_group.exe[3888]: Using '\\DC1' as DC for 'domain' local domain.
/win32_check_group.exe[3888]: Using '\\DC1' as DC for 'domain' user's domain.
/win32_check_group.exe[3888]: Windows group: Admins du domaine, Squid group: Internet_interdit
/win32_check_group.exe[3888]: Windows group: Utilisa. du domaine, Squid group: Internet_interdit
/win32_check_group.exe[3888]: Windows group: BTB Si�ge, Squid group: Internet_interdit
/win32_check_group.exe[3888]: Windows group: Users_TSE, Squid group: Internet_interdit
/win32_check_group.exe[3888]: Windows group: dsiexploitation, Squid group: Internet_interdit
/win32_check_group.exe[3888]: Windows group: Owa, Squid group: Internet_interdit
/win32_check_group.exe[3888]: Windows group: Internet_complet, Squid group: Internet_interdit
/win32_check_group.exe[3888]: Got 'domain\\user Internet_complet' from Squid (length: 30).
/win32_check_group.exe[3888]: Valid_Global_Groups: checking group membership of 'domain\user'.
/win32_check_group.exe[3888]: Using '\\DC1' as DC for 'domain' local domain.
/win32_check_group.exe[3888]: Using '\\DC1' as DC for 'domain' user's domain.
/win32_check_group.exe[3888]: Windows group: Admins du domaine, Squid group: Internet_complet
/win32_check_group.exe[3888]: Windows group: Utilisa. du domaine, Squid group: Internet_complet
/win32_check_group.exe[3888]: Windows group: BTB Si�ge, Squid group: Internet_complet
/win32_check_group.exe[3888]: Windows group: Users_TSE, Squid group: Internet_complet
/win32_check_group.exe[3888]: Windows group: dsiexploitation, Squid group: Internet_complet
/win32_check_group.exe[3888]: Windows group: Owa, Squid group: Internet_complet
/win32_check_group.exe[3888]: Windows group: Internet_complet, Squid group: Internet_complet

in 2.6 i have this lines in cache.log:

/mswin_check_lm_group.exe[2944]: Got 'domain%5cuser Internet_interdit' from Squid (length: 32).
/mswin_check_lm_group.exe[2944]: Valid_Global_Groups: checking group membership of 'domain\domain%5cuser'.
/mswin_check_lm_group.exe[2944]: Using '\\DC1' as DC for 'domain' local domain.
/mswin_check_lm_group.exe[2944]: Using '\\DC1' as DC for 'domain' user's domain.
/mswin_check_lm_group.exe NetUserGetGroups() failed.'
/mswin_check_lm_group.exe[2936]: Got 'domain%5cuser Internet_complet' from Squid (length: 31).
/mswin_check_lm_group.exe[2936]: Valid_Global_Groups: checking group membership of 'domain\domain%5cuser'.
/mswin_check_lm_group.exe[2936]: Using '\\DC1' as DC for 'domain' local domain.
/mswin_check_lm_group.exe[2936]: Using '\\DC1' as DC for 'domain' user's domain.
/mswin_check_lm_group.exe NetUserGetGroups() failed.'

Thanks for your help.

Laurent.

-----Message d'origine-----
De : Guido Serassio [mailto:guido.serassio@acmeconsulting.it]
Envoy� : mardi 4 juillet 2006 20:23
� : Darren Worrall (Eclipse)
Cc : squid-users@squid-cache.org
Objet : RE: [squid-users] SquidNT 2.6 mswin_check_lm_group.exe problem

Hi,

At 19.42 04/07/2006, Darren Worrall (Eclipse) wrote:
> >It appears that the domain name is being passed twice (second line),
> >though I don't know if that's relevant. Any tips?
>
>This is correct, "local domain" is the machine domain, while " user's
>domain" is user domain, not always the same ....
>
>Try testing the helper from the command line.
>
>And, "Pre-Windows 2000-compatible Access" is enabled in your domain ?
>
>Regards
>
>Guido
>

First, put ALWAYS the squid-users mailing list in CC.

>What is the syntax for the command?

Just read the mswin_check_lm_group.txt file in the docs directory .....

>And I'm not sure what you mean by
>Pre-Windows 2000 compatibility for the whole domain? It's a group that I
>could add individual objects too, but I wasn't aware there was a domain
>wide setting for it?

You can find some info here:

http://support.microsoft.com/kb/257988/en-us
http://support.microsoft.com/kb/303973/en-us

Regards

Guido

-
========================================================
Guido Serassio
Acme Consulting S.r.l. - Microsoft Certified Partner
Via Lucia Savarino, 1 10098 - Rivoli (TO) - ITALY
Tel. : +39.011.9530135 Fax. : +39.011.9781115
Email: guido.serassio@acmeconsulting.it
WWW: http://www.acmeconsulting.it/
Received on Wed Jul 05 2006 - 00:48:18 MDT