Re: [squid-users] Authentication on Active Directory

Nope, not a clue off the top of my head, sorry.

Adrian

On Tue, Nov 27, 2007, Ralf.Lutz@Heidelberg.de wrote:
> @Adrian: Thank you for youre fast answer. Maybe you can help me a bit with the configuration with Kerberos ?
>
> Most steps are working on my system:
>
> - I have a Kerberos ticket
> - wbinfo -g shows the groups in the AD
> - getent -g shows the groups in the AD, too
>
> But there?s a problem with the squid configuration:
>
> I have the following entrie in the squid.conf:
>
> external_acl_type www_group ttl=0 concurrency=5 %LOGIN /usr/lib/squid/squid_unix_group -g www
> external_acl_type ebay_group ttl=0 concurrency=5 %LOGIN /usr/lib/squid/squid_unix_group -g Ebay
>
> Users in the two groups www and Ebay should go to the internet. This worked on our "old" proxy with squid 2.5 without Kerberos.
>
> If I now start squid and use it as proxy, I get a TCP_DENIED in the access.log and in the cache.log the following entries:
>
> helper: Group does not exist 'Lutz'
> helper: Group does not exist 'X<AB>^D^H<F2><87>^D^H'
> helper: Group does not exist '<88>^W??y<97>^D^Hu<B8>v'
> helper: Group does not exist '<C9><C3>'
> helper: Group does not exist '<9C><8D><87>'
> helper: Group does not exist '<A0>6z'
> helper: Group does not exist '<E8>^W??<EC>]u'
> helper: Group does not exist '<8D><83><E8><FE><FF><FF><89>E<F0><8D><83><E8><FE><FF><FF>)E<F0><C1>}<F0>^B<8B>U
> <B6>'
> helper: Group does not exist '<81><C3>^?<D7>^P'
> helper: Group does not exist '_^\??<8A>^\??<9A>^\??<A5>^\??<B3>^\??<D3>^\??<E6>^\??<F0>^\??<B3>^^??<D6>^^??<F0>^^??<FF>
> ^^??^T^_??%^_??;^_??C^_??P^_??<81>^_??<A3>^_??<B8>^_??<CA>^_??'
> helper: Group does not exist '^C'
> helper: Group does not exist '<9C><8D><87>'
> helper: Group does not exist ''
> helper: Group does not exist 'Lutz'
> helper: Group does not exist 'X<AB>^D^H<F2><87>^D^H'
> helper: Group does not exist 'x6<97><BF>y<97>^D^Hu<B8>v'
> helper: Group does not exist '<C9><C3>'
> helper: Group does not exist '<9C><8D><87>'
> helper: Group does not exist '<A0>6z'
> helper: Group does not exist '<D8>6<97><BF><EC>]u'
> helper: Group does not e<B6>''<8D><83><E8><FE><FF><FF><89>E<F0><8D><83><E8><FE><FF><FF>)E<F0><C1>}<F0>^B<8B>U
> helper: Group does not exist '<81><C3>^?<D7>^P'
> helper: Group does not exist '_L<97><BF><8A>L<97><BF><9A>L<97><BF><A5>L<97><BF><B3>L<97><BF><D3>L<97><BF><E6>
> L<97><BF><F0>L<97><BF><B3>N<97><BF><D6>N<97><BF><F0>N<97><BF><FF>N<97><BF>^TO<97><BF>%O<97><BF>;O<97><BF>CO
> <97><BF>PO<97><BF><81>O<97><BF><A3>O<97><BF><B8>O<97><BF><CA>O<97><BF>'
> helper: Group does not exist '^C'
> helper: Group does not exist '<9C><8D><87>'
> helper: Group does not exist ''
>
> Have you an idea ?

-- 
- Xenion - http://www.xenion.com.au/ - VPS Hosting - Commercial Squid Support -
- $25/pm entry-level VPSes w/ capped bandwidth charges available in WA -