[squid-users] group authentication with NTLM more info

From: <Arno.STREULI@dont-contact.us>
Date: Thu, 16 Jun 2005 15:59:30 +0200

Well its look like this version of samba need the domain\group to works
fine.
So I just have to chaneg my ACl to reflect the group with the domain.

and voila !!

well not part of it:
Got d-ch\\clob D-CH\\SurfeursWebCH D-CH\\SurfeursWebCH-T
D-CHM\\SurfeursWebMCH D-CHI1\\SurfeursWebICH from squid
User: -d-ch\clob-
Group: -D-CH\SurfeursWebCH-
SID: -S-1-5-21-907243726-1387878072-1859928627-9560 Domain Group (2)-
GID: -10013-
Sending ERR to squid

ok maybe I'm not in the group 10013 but I'm in the 10001
(d-ch\\SurfeursWebCH-T) why it dosen test this one ?

Arno Streuli
Crédit Agricole (Suisse) SA
Chemin de Bérée 46-48, ch-1010 Lausanne 10
Tél. +41 58 321.5215 - Fax +41 58 321.5251
http://www.ca-suisse.com

__________________

Hello,
I just did an upgrade of my proxy from 2.5stable1 to 2.5stable9 8running
under solaris 9), and samba 3.0.5
and now the authentication of group is not working anymore.
Tha auth with the domain is fine, but the usage of external wbinfo_group.pl
is not any clue why ?
here is the debug given by the wbinfo_group.pl:
Got d-ch\\clob SurfeursWebCH SurfeursWebCH-T SurfeursWebGI SurfeursWebMCH
SurfeursWebICH from squid
User: -d-ch\clob-
Group: -SurfeursWebCH-
SID: -Could not lookup name SurfeursWebCH-
GID: -Could not convert sid Could not lookup name SurfeursWebCH to gid-
Sending ERR to squid

nothing had change on the NT side, but is somehint wrong about the '-' on
the SurfeurWebCH-T ?

thanks for any help

regards
Arno Streuli

******************************************************************
DISCLAIMER - E-MAIL
-------------------
The information contained in this E-Mail is intended for the named
recipient(s). It may contain certain privileged and confidential
information, or information which is otherwise protected from
disclosure. If you are not the intended recipient, you must not
copy,distribute or take any action in reliance on this information
 ******************************************************************

******************************************************************
DISCLAIMER - E-MAIL
-------------------
The information contained in this E-Mail is intended for the named
recipient(s). It may contain certain privileged and confidential
information, or information which is otherwise protected from
disclosure. If you are not the intended recipient, you must not
copy,distribute or take any action in reliance on this information
******************************************************************
Received on Thu Jun 16 2005 - 07:59:35 MDT

This archive was generated by hypermail pre-2.1.9 : Fri Jul 01 2005 - 12:00:02 MDT