[squid-users] Re: Problem with SQUID_KERB_LDAP

2010-10-25 Thread DmitrySh
Markus Moeller wrote: Does it rin on the command line ? Do you have any process controls (selinux, apparmor) enabled ? No, no selinux and apparmor configured (maybe its installed by default, but not configured) it's a pure openSuse 11.3 You mean squid_kerb_auth? It's works fine

[squid-users] Re: Problem with SQUID_KERB_LDAP

2010-10-25 Thread DmitrySh
At this time i try to exclude LDAP authorization problem from whole process and comment this sting in squid.conf (come back to this when athentication issue will be solved) And the main problem is authentication problem with squid_kerb_auth helper. Here cache.log file piece where the probkem is

Re: [squid-users] Re: Problem with SQUID_KERB_LDAP

2010-10-25 Thread Nick Cairncross
. fpGHRVhvZk/kda8Vtvd618615TAA7y7E7ZN3DeUAEVD+fRErTlSbBlY/3uRdUzk6z+y3XhEBX1 9jNqd5CBe72CHRAh5CBC4GPkSyzbjWql5x9kfsBnoEK8Gc5VDXQPAVfAg= =' (decoded length: 1642). 2010/10/25 14:43:36| squid_kerb_auth: ERROR: gss_acquire_cred() failed: Unspecified GSS failure. Minor code may provide more inform

[squid-users] Re: Problem with SQUID_KERB_LDAP

2010-10-22 Thread DmitrySh
Hi guru's I try some weeks to configure my squid to auth with MS AD with squid_kerb_auth. As i understand squid_kerb_ldap is a new helper for ldap requests instead of squid_ldap_group, or am i wrong? My squid.conf look like this: auth_param negotiate program

[squid-users] Re: Problem with SQUID_KERB_LDAP

2010-10-22 Thread Markus Moeller
DmitrySh sbro...@inbox.lv wrote in message news:1287753284416-3007186.p...@n4.nabble.com... Hi guru's I try some weeks to configure my squid to auth with MS AD with squid_kerb_auth. As i understand squid_kerb_ldap is a new helper for ldap requests instead of squid_ldap_group, or am i

[squid-users] Re: Problem with SQUID_KERB_LDAP

2010-02-04 Thread Markus Moeller
Can you run squid_kerb_ldap with strace -f -F to see when the permission deny happens ? Just write a script squid_kerb_ldap_sh #/bin/sh strace -f -F -o /tmp/strace.out.$$ squid_kerb_ldap $* and change your config file to use that script. /tmp/strace.out.xxx should show where the permission