Re: [squid-users] Limit on AD group membership

From: Serassio Guido <guido.serassio@dont-contact.us>
Date: Thu, 03 Feb 2005 20:47:37 +0100

Hi,

At 23.10 02/02/2005, Jason Ide wrote:

>Hi
>
>can you post the question to squid users group (please read it and find if
>it is clear enough)
>
>We are using squid 2.5 and Samba suit 3.0.3 in conjunction with Active
>Directory and NTLM authentication.
>We also are using authorisation process for users based on active directory
>group membership.
>We have noticed that if user is a member of more 60-70 groups,
>squid/samba cannot determine his group membership.
>So as the result user is denied on squid proxy.
>If we limit number of the groups for the user to 40-50, the problem is
>solved.
>Does anyone know about any limitations in regards of group membership on
>Samba 3.0.3?

I don't know if there is such limit in Samba 3.0.3.

You should try the latest Samba 3.0.10 stable release, 3.0.3 was the first
Samba 3 release with a ntlm_auth Squid authenticator supporting Squid NTLM
NEGOTIATE.

Regards

Guido

-
========================================================
Guido Serassio
Acme Consulting S.r.l. - Microsoft Certified Partner
Via Gorizia, 69 10136 - Torino - ITALY
Tel. : +39.011.3249426 Fax. : +39.011.3293665
Email: guido.serassio@acmeconsulting.it
WWW: http://www.acmeconsulting.it/
Received on Thu Feb 03 2005 - 12:48:11 MST

This archive was generated by hypermail pre-2.1.9 : Tue Mar 01 2005 - 12:00:01 MST