Re: [squid-users] 2.6-STABLE1 problem with wbinfo_group.pl

From: Covington, Chris <Chris.Covington@dont-contact.us>
Date: Wed, 12 Jul 2006 10:27:36 -0400

On Wed, Jul 12, 2006 at 10:06:21AM -0400, Covington, Chris wrote:
> On Wed, Jul 12, 2006 at 10:25:48AM +0200, Guido Serassio wrote:
> > Hi,
> >
> > At 17.43 11/07/2006, Covington, Chris wrote:
> >
> > >Hi all,
> > >
> > >I've got a perfectly functional samba 3.0.22 (Gentoo Linux 2.6.16) where
> > >wbinfo_group.pl works perfectly with 2.5-STABLE14 but not with
> > >2.6-STABLE1:
> > >
> > >I get the following in cache.log:
> > >
> > >Could not convert sid S-1-5-21-789336058-725345543-682003330-1106 to gid
> > >Could not get groups for user 0
> > >
> > >However:
> > >
> > >grendel squid # wbinfo -n ccovington
> > >S-1-5-21-789336058-725345543-682003330-1106 User (1)
> > >
> > >I tried using 2.5-STABLE14's wbinfo_group.pl with 2.6-STABLE1 to no
> > >avail. Any advice? I am calling wbinfo_group.pl as follows:
> >
> > Squid 2.5 external ACL helpers must be invoked adding the protocol=2.5
> > option.
> >
> > Let me to know if it works with 2.5 helper.
>
> OK, I tried calling the 2.5 wbinfo_group.pl as follows:
>
> external_acl_type ntlm_group ttl=0 concurrency=5 %LOGIN
> /usr/lib/squid/wbinfo_group25.pl -protocol=2.5
>
> Is that the proper syntax?
>
> I still get:
>
> Could not convert sid S-1-5-21-789336058-725345543-682003330-500 to gid
> Could not get groups for user 0

Here the 2.6 helper error is in debug mode:

Debugging mode ON.
Got 0 ccovington Internet_Access_None from squid
Could not convert sid S-1-5-21-789336058-725345543-682003330-1106 to gid
User: -0-
Group: -ccovington-
SID: -S-1-5-21-789336058-725345543-682003330-1106-
GID: --
Could not get groups for user 0
Sending OK to squid

Shouldn't the "Group:" be something other than ccovington, the username?

---
Chris Covington
IT
Plus One Health Management
75 Maiden Lane Suite 801
NY, NY 10038
646-312-6269
http://www.plusoneactive.com
Received on Wed Jul 12 2006 - 08:27:45 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Aug 01 2006 - 12:00:01 MDT