Re: [squid-users] Using wb_group from Samba 3.0 with squid 2.5

From: Riccardo Fontana <dogbert@dont-contact.us>
Date: Thu, 02 Oct 2003 17:03:54 +0200

If I use the external_acl_type directive squid start but with a lot of
errors in the /var/log/messages like those showed in my previuos post.

Benjamin Indermühle wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Please give more details. The configurations line in squid.conf should be
>
> external_acl_type auth_user %LOGIN /your/path/to/wb_group
>
> try testing the helper from console
> /your/path/to/wb_group -d
>
> then
> DOMAIN\\USERNAME GROUP
>
> refer to the wb_group readme.txt for more syntax information which should be
> placed under
> your/squid/source/helpers/external_acl/winbind_group/wb_group
>
>
> be sure not to change separator in smb.conf
> squid group auth won't work with anything else than \\
>
> Benjamin Indermühle
>
> On Thursday 02 October 2003 16:18, Riccardo Fontana wrote:
>
>>I'm having problems using wb_group helper with Squid 2.5 and Samba 3.0
>>
>>I set up a test box with RH 8.0 and Squid 2.5 STABLE4 and Samba 3.0.0 as
>>instructed by Step-by-step guide find here:
>>
>>http://itmanagers.net/modules.php?name=News&file=article&sid=4
>>
>>I joined my linux box to my AD and tested it with wbinfo.
>>Squid works fine with an ACL like:
>>
>>acl test proxy_auth REQUIRED
>>
>>and let only authenticated user browse the internet.
>>
>>Now I'd like to setup an ACL based on group membership.
>>I've tryed to run wb_group (with -d option) but I get the following error:
>>
>>/wb_group[1950](wb_check_group.c:344): External ACL winbindd group
>>helper build Oct 2 2003, 13:09:22 starting up...
>>/wb_group[1950](wb_check_group.c:308): Can't contact winbindd. Dying
>>
>>while this is what appear in my /var/log/messages:
>>
>>Oct 2 16:08:38 urd winbindd[1809]: [2003/10/02 16:08:38, 0]
>>nsswitch/winbindd.c:process_loop(716)
>>Oct 2 16:08:38 urd winbindd[1809]: process_loop: Invalid request size
>>from pid 1950: 1304 bytes sent, should be 1568
>>
>>I've checked the permission of winbind named pipe.
>>What am I doing wrong ?
>
>
> - --
> *~*~* *~*~* We are connecting the world ! *~*~* *~*~*
> SolNet - Internet Solution Provider
> Bechburgstrasse 29, 4528 Zuchwil, Switzerland
> Phone: +41 32 686 82 82, Fax: +41 32 685 96 13
> WWW: http://www.solnet.ch - E-Mail:ib@solnet.ch
> *~*~* *~*~* *~*~* *~*~* *~*~* *~*~* *~*~* *~*~* *~*~*~*
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.2-rc1-SuSE (GNU/Linux)
>
> iD8DBQE/fDtz7pyPc1irZoIRAtp8AJ9W6tdRD3JXIbFT1u6c2QYr9bTkPACdF5jh
> YYr3mNtpQIjgYS8fc4Qtec4=
> =r5/R
> -----END PGP SIGNATURE-----
>
>
Received on Thu Oct 02 2003 - 09:03:58 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:20:16 MST