Re: [squid-users] Freebsd testing with squid. User authentication works, now trying to get group based auth.

On Fri, 2005-08-05 at 19:03 +0200, Henrik Nordstrom wrote:
> On Thu, 28 Jul 2005, Derrick MacPherson wrote:
>
> > Whats wrong with this?
> >
> > ./wbinfo_group.pl
> > dmacpherson eng
> > Got dmacpherson eng from squid
> > User: -dmacpherson-
> > Group: -eng-
> > SID: -S-1-5-21-1058564242-1277044956-825688854-1160 Domain Group (2)-
> > GID: -Could not convert sid
> > S-1-5-21-1058564242-1277044956-825688854-1160 Domain Group (2) to gid-
> > Sending ERR to squid
>
> >From which Squid version is this wbinfo_group.pl?
>
> > Where can I start checking?
>
> Look in wbinfo_group.pl for the wbinfo commands it is executing. Then try
> doing the same from the command line to see what you get.

Thanks Henrik, I got it figured out.

auth_param ntlm program /usr/local/bin/ntlm_auth \
        --helper-protocol=squid-2.5-ntlmssp
auth_param basic program /usr/local/bin/ntlm_auth \
        --helper-protocol=squid-2.5-basic
external_acl_type nt_group ttl=60 concurrency=5\
         %LOGIN /usr/local/libexec/squid/wbinfo_group.pl

acl AuthorizedUsers proxy_auth REQUIRED
acl groupmembers external nt_group "Internet Access"
http_access allow AuthorizedUsers groupmembers
Received on Fri Aug 05 2005 - 11:18:12 MDT