Re: AW: [squid-users] Authentication on Active Directory

On tis, 2007-11-27 at 12:31 +0100, Ralf.Lutz@Heidelberg.de wrote:
> @Adrian: Thank you for youre fast answer. Maybe you can help me a bit with the configuration with Kerberos ?
>
> Most steps are working on my system:
>
> - I have a Kerberos ticket
> - wbinfo -g shows the groups in the AD
> - getent -g shows the groups in the AD, too
>
> But there´s a problem with the squid configuration:
>
> I have the following entrie in the squid.conf:
>
> external_acl_type www_group ttl=0 concurrency=5 %LOGIN /usr/lib/squid/squid_unix_group -g www
> external_acl_type ebay_group ttl=0 concurrency=5 %LOGIN /usr/lib/squid/squid_unix_group -g Ebay

Try using wbinfo_group instead, querying Samba directly without using
NSS.

> helper: Group does not exist 'Lutz'
> helper: Group does not exist 'X<AB>^D^H<F2><87>^D^H'
> helper: Group does not exist '<88>^Wοy<97>^D^Hu<B8>v'

Smells like your copy of squid_unix_group may be a bit broken...

Regards
Henrik