I believe I have narrowed the problem to the way squid formats the request
when it sends it to the external helper. If the winbind seperator is set to
+ you can successfully get a response from wb_group on the command line,
same if the seperator is !, however if the seperator is set to \\ or \
wb_group gives an error. As squid sends the request with slashs, it gives
an error. Example cache.log below
2003/07/18 16:58:41| authenticateAuthUserRequestUnlock auth_user_request
'0x83efa58' now at '2'.
2003/07/18 16:58:41| aclMatchAclList: no match, returning 0
2003/07/18 16:58:41| NTLM HandleReply, telling stateful helper : 2
2003/07/18 16:58:41| authenticateNTLMHelperServerAvailable: not starving -
returning 1
(wb_group)[3044](wb_check_group.c:343): Got 'mydomain\\goodie ProxyUsers'
from Squid (length: 27).
(wb_group)[3044](wb_check_group.c:231): Warning: Can't enum user groups.
2003/07/18 16:58:42| aclCheck: checking 'http_access allow myProxyUsers'
If squid could be changed to give 'mydomain+goodie ProxyUsers' instead, this
would solve my problem. Does squid 'look' at the winbind seperator in
smb.conf? As I think this may be where it stems from, since if it knew what
seperator was being used, it would use it and not just use a slash.
Regards,
Tony
-----Original Message-----
From: Henrik Nordstrom
To: Tony Melia (DMS); 'squid-users@squid-cache.org'
Sent: 22/07/2003 11:29 AM
Subject: Re: [squid-users] Winbind problem
On Tuesday 22 July 2003 02.57, Henrik Nordstrom wrote:
> On Monday 21 July 2003 23.10, Tony Melia (DMS) wrote:
> > I give 'mydomain\\administrator ProxyUsers'
>
> You should give mydomain\administrator
Nevermind that. I am only a bit tired. mydomain\\administrator it
should be...
Regards
Henrik
-- Donations welcome if you consider my Free Squid support helpful. https://www.paypal.com/xclick/business=hno%40squid-cache.org If you need commercial Squid support or cost effective Squid or firewall appliances please refer to MARA Systems AB, Sweden http://www.marasystems.com/, info@marasystems.com Downs MicroSystems Pty Ltd 145 Margaret Street Toowoomba Qld 4350 Ph. (07) 4639 3344 Fax (07) 4639 3820 Important Disclaimer and Warning Downs MicroSystems does not represent or warrant that any attached files are free from computer viruses or other defects. The attached files are provided, and may only be used, on the basis that the user assumes all responsibility for any loss, damage or consequences resulting directly or indirectly from use of the attached files. The liability of Downs MicroSystems in any event is limited to either the resupply of the attached files or the cost of having the attached files resupplied. NOTE: The views expressed by the individual in this message do not necessarily reflect those of the organisation. Downs MicroSystems is committed to protecting the privacy of individuals, and is bound by the principles of the Commonwealth Privacy Act (1988). Should you wish to view our Privacy Policy, please visit www.downsmicro.com.au. The information contained in this message is confidential and may be legally privileged. The message is intended solely for the addressee(s). If you are not the intended recipient, you are hereby notified that any use, dissemination, or reproduction is strictly prohibited and may be unlawful. If you are not the intended recipient, please contact the sender by return e-mail and destroy all copies of the original message.Received on Mon Jul 21 2003 - 20:24:09 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:18:13 MST