[squid-users] NTLM wb_group auth and Squid 2.5 Stable 3 with SuSE

Dear Henrik, Dear list,

me again, i still have problems to authenticate an NT4Domain group:

I use SuSE 8.2 with Squid 2.5 Stable 3 from squid-cache.org and the latest
Samba, download from yesterday (first I used the original Samba rpm package
from SuSE)

I compiled squid with:
./configure --enable-auth="ntlm,basic" --enable-basic-auth-helpers="winbind"
--enable-ntlm-auth-helpers="winbind" =/usr/local/squid
./configure --enable-external-acl-helpers="winbind_group"
to get the wb_group binary helper.

I compiled Samba with the parameters, mentioned on the FAQ from
squid-cache.org:
--with-winbind
--with-winbind-auth-challenge

My smb.conf :
[global]
        workgroup = mydomain
        password server = myserver
        security = domain
        winbind separator= \ (I tried "+" "\" and "\\")
        winbind cache time=60
        winbind uid = 10000-20000
        winbind gid = 10000-20000
        winbind use default domain = yes
        winbind enum users = yes
        winbind enum groups = yes
        os level = 2
        time server = Yes
------------------
wbinfo -t test:
Secret is good
--------------------

My squid.conf is configured like this:

auth_param ntlm program /usr/local/squid/libexec/wb_ntlmauth
auth_param ntlm children 20
auth_param ntlm max_challenge_reuses 0
auth_param ntlm max_challenge_lifetime 2 minutes

auth_param basic program /usr/local/squid/libexec/wb_auth
auth_param basic children 15
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours

and this:

acl ProxyUsers external mydomain\Internet ProxyUsers
acl password proxy_auth REQUIRED

http_access allow password ProxyUsers
http_access allow localhost
http_access deny all

If i run wb_group from the console i get this error:
/wb_group[2384](wb_check_group.c:231): Warning: Can't enum user groups.
ERR

I also installed wb_auth and the only user authentication is working!
What am I doing wrong? Any help is appreciated.

Thanks in advance
Thomas
Received on Fri Aug 08 2003 - 01:30:18 MDT