[squid-users] Re: squid active directory integration

From: Sandeep <sandeep1.chowdhury_at_gmail.com>
Date: Wed, 4 Sep 2013 02:43:44 -0700 (PDT)

HI,

I try wbinfo_group.pl with default config and after that modified, But I
received error bellow.

---------------------------------------------------------------------------------------------------------------------------------------------
[root_at_SQUIDSRV01 squid]# echo “squidtest restrictedinet” |
/usr/lib64/squid/wbinfo_group.pl -d
Debugging mode ON.
Got “squidtest restrictedinet” from squid
failed to call wbcLookupName: WBC_ERR_DOMAIN_NOT_FOUND
Could not lookup name restrictedinet”
failed to call wbcStringToSid: WBC_ERR_INVALID_PARAM
Could not convert sid to gid
User: -“squidtest-
Group: -restrictedinet”-
SID: --
GID: --
Sending ERR to squid
ERR

--------------------------------------------------------------------------------------------------------------------------------------------

wbinfo -t
wbinfo -u
wbinfo -g works fine.

here is my smb.conf I have no Idea what is wrong.
--------------------------------------------------------------------------------------------------------------------------------------------
#--authconfig--start-line--

# Generated by authconfig on 2013/08/09 16:14:11
# DO NOT EDIT THIS SECTION (delimited by --start-line--/--end-line--)
# Any modification may be deleted or altered by authconfig in future

   workgroup = MYORG
   password server = 192.168.1.35
   realm = MYORG.EXAMPLE.LOCAL
   security = ads
   idmap config * : range = 16777216-33554431
   winbind separator = +
   template shell = /bin/false
   winbind use default domain = yes
   winbind offline logon = false

#--authconfig--end-line--
        kerberos method = dedicated keytab
        dedicated keytab file = /etc/squid/HTTP.keytab
        winbind enum groups = Yes
        winbind enum users = Yes
        idmap config * : range = 10000 - 20000
        idmap config * : backend = tdb
        idmap config myorg : backend = tdb
        idmap config myorg : range = 20000 - 20000000
        map untrusted to domain = Yes
        client ntlmv2 auth = Yes
        client lanman auth = No
        winbind normalize names = No
        winbind nested groups = Yes
        winbind nss info = rfc2307
        winbind reconnect delay = 30
        winbind cache time = 1800
        winbind refresh tickets = true
        allow trusted domains = Yes
        server signing = auto
        client signing = auto
        lm announce = No
        ntlm auth = no
        lanman auth = No
        preferred master = No
        wins support = No
        encrypt passwords = yes
        printing = bsd
        load printers = no
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

--------------------------------------------------------------------------------------------------------------------------------------------

--
View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-active-directory-integration-tp4661575p4661956.html
Sent from the Squid - Users mailing list archive at Nabble.com.
Received on Wed Sep 04 2013 - 09:44:25 MDT

This archive was generated by hypermail 2.2.0 : Wed Sep 04 2013 - 12:00:05 MDT