RE: [squid-users] Winbind problem

From: Tony Melia (DMS) <Tony.Melia@dont-contact.us>
Date: Tue, 22 Jul 2003 12:24:02 +1000

 I believe I have narrowed the problem to the way squid formats the request
when it sends it to the external helper. If the winbind seperator is set to
+ you can successfully get a response from wb_group on the command line,
same if the seperator is !, however if the seperator is set to \\ or \
wb_group gives an error. As squid sends the request with slashs, it gives
an error. Example cache.log below

2003/07/18 16:58:41| authenticateAuthUserRequestUnlock auth_user_request
'0x83efa58' now at '2'.
2003/07/18 16:58:41| aclMatchAclList: no match, returning 0
2003/07/18 16:58:41| NTLM HandleReply, telling stateful helper : 2
2003/07/18 16:58:41| authenticateNTLMHelperServerAvailable: not starving -
returning 1
(wb_group)[3044](wb_check_group.c:343): Got 'mydomain\\goodie ProxyUsers'
from Squid (length: 27).
(wb_group)[3044](wb_check_group.c:231): Warning: Can't enum user groups.
2003/07/18 16:58:42| aclCheck: checking 'http_access allow myProxyUsers'

If squid could be changed to give 'mydomain+goodie ProxyUsers' instead, this
would solve my problem. Does squid 'look' at the winbind seperator in
smb.conf? As I think this may be where it stems from, since if it knew what
seperator was being used, it would use it and not just use a slash.

Regards,
Tony

-----Original Message-----
From: Henrik Nordstrom
To: Tony Melia (DMS); 'squid-users@squid-cache.org'
Sent: 22/07/2003 11:29 AM
Subject: Re: [squid-users] Winbind problem

On Tuesday 22 July 2003 02.57, Henrik Nordstrom wrote:
> On Monday 21 July 2003 23.10, Tony Melia (DMS) wrote:
> > I give 'mydomain\\administrator ProxyUsers'
>
> You should give mydomain\administrator

Nevermind that. I am only a bit tired. mydomain\\administrator it
should be...

Regards
Henrik

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org
If you need commercial Squid support or cost effective Squid or
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, info@marasystems.com
Downs MicroSystems Pty Ltd
145 Margaret Street
Toowoomba Qld 4350
Ph. (07) 4639 3344 Fax (07) 4639 3820
Important Disclaimer and Warning
Downs MicroSystems does not represent or warrant that any attached files are
free from computer viruses or other defects. The attached files are
provided, and may only be used, on the basis that the user assumes all
responsibility for any loss, damage or consequences resulting directly or
indirectly from use of the attached files. The liability of Downs
MicroSystems in any event is limited to either the resupply of the attached
files or the cost of having the attached files resupplied.
NOTE: The views expressed by the individual in this message do not
necessarily reflect those of the organisation.
Downs MicroSystems is committed to protecting the privacy of individuals,
and is bound by the principles of the Commonwealth Privacy Act (1988).
Should you wish to view our Privacy Policy, please visit
www.downsmicro.com.au.
The information contained in this message is confidential and may be legally
privileged. The message is intended solely for the addressee(s). If you are
not the intended recipient, you are hereby notified that any use,
dissemination, or reproduction is strictly prohibited and may be unlawful.
If you are not the intended recipient, please contact the sender by return
e-mail and destroy all copies of the original message.
Received on Mon Jul 21 2003 - 20:24:09 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:18:13 MST