RE: [squid-users] wb_group

You need to supply the account name and the group to the wb_group helper.

OK will be returned if the user provided is in the group provided.

ie DOMAIN\\username "Domain Users"

See if that helps

Regards
Jay

> -----Original Message-----
> From: Simon Bryan [mailto:sbryan@olmc.nsw.edu.au]
> Sent: Monday, 4 August 2003 9:13 AM
> To: squid-users@squid-cache.org
> Subject: [squid-users] wb_group
>
>
> Hi all,
> I am working my way through why the delay_pools do not work for
> me, I suspected
> winbind and have been rebuilding everything. I have an issue with
> wb_group that I
> can't resolve. If I use wb_group -d and enter a valid username I
> get a list of
> groups as below:
>
> student
> /wb_group[22779](wb_check_group.c:343): Got 'student' from Squid
> (length: 7).
> /wb_group[22779](wb_check_group.c:237):
> SID:S-1-5-21-8915387-1576539265-1404200075-513
> /wb_group[22779](wb_check_group.c:237):
> SID:S-1-5-21-8915387-1576539265-1404200075-3041
> /wb_group[22779](wb_check_group.c:237):
> SID:S-1-5-21-8915387-1576539265-1404200075-3530
> ERR
>
> However it always terminates with an ERR which seems to me what
> it must be sending
> to Squid so the users never fall into a group.
> I am using the Squid snapshot from 3rd August and Samba 2.2.8a, I
> have copied over
> the winbindd_nss.h file over the top of the Squid.
>
> Squid -v gives:
> Squid Cache: Version 2.5.STABLE3-20030803
> configure options: --enable-delay-pools --enable-auth=ntlm,basic
> --enable-basic-auth-helpers=winbind --enable-ntlm-helpers=winbind
>
>
> wb_info gives all the right answers.
>
> Any clues appreciated.
>
>
> As a second question, when using wb_group in an acl do you use
> the NT group name eg
> 'teachers' or the SID number as given by wb_group on the command line?
>
> Cheers,
>
> ____________________
> Simon Bryan
> IT Manager
> OLMC Parramatta
>
>
Received on Sun Aug 03 2003 - 20:02:09 MDT