sön 2006-02-26 klockan 08:39 +0530 skrev updatemyself .:
> i was trying to setup a squid proxy server with the wb_group authentication.
> in my windows 2003 ADS i am having a group called "internet"
> i need to give internet access for the ppl belongs to that group
> can anyone help me.. how i ca
On 2/26/06, updatemyself . <[EMAIL PROTECTED]> wrote:
> Hai All,
>
> i was trying to setup a squid proxy server with the wb_group authentication.
> in my windows 2003 ADS i am having a group called "internet"
> i need to give internet access for the ppl belongs to that group
>
> in my corrent confi
Hai All,
i was trying to setup a squid proxy server with the wb_group authentication.
in my windows 2003 ADS i am having a group called "internet"
i need to give internet access for the ppl belongs to that group
in my corrent configuration all users in my domain can authenticate to squid...
I am
On Thu, 29 Apr 2004, Roman Rathler wrote:
> in the meanwhile i got it running using the wbinfo_group.pl helper. There is a bug
> in the perl script that comes with the fedora package
> squid-2.5.STABLE3-1.fc1 when it tries converting groupSID to groupGID...
As far as I know this is fixed in 2.
Begin forwarded Message from Roman Rathler,
Thu, 29 Apr 2004 11:06:01 +0200 (METDST):
Hi,
in the meanwhile i got it running using the wbinfo_group.pl helper.
There is a bug in the perl script that comes with the fedora package
squid-2.5.STABLE3-1.fc1 when it tries converting groupSID to groupGID.
On Wed, 28 Apr 2004, Roman Rathler wrote:
> I have a squid up and running with samba-3 using the fedora packages
> (squid-2.5.STABLE3-1.fc1). authentication against the ads works fine from squid for
> basic and ntlm authentication. now i want to build some acls using groups from the
> active di
>-- Mensaje original --
>From: Roman Rathler <[EMAIL PROTECTED]>
>To: [EMAIL PROTECTED]
>Date: Wed, 28 Apr 2004 10:11:59 +0200 (METDST)
>Subject: [squid-users] wb_group issues
>
>
>Hi,
>
>for sure I am not the only one having this problem and maybe it a rtfm-
Hi,
for sure I am not the only one having this problem and maybe it a rtfm-thing, but i
wasn't able to find it and I searched a lot.
I have a squid up and running with samba-3 using the fedora packages
(squid-2.5.STABLE3-1.fc1). authentication against the ads works fine from squid for
basic a
On Tue, 2 Dec 2003, Mark Pelkoski wrote:
> Nothing in the smbd.log file.
winbind is logging to the log.winbindd log file, not smbd.log.
> This message shows up randomly giving no notice to any particular user.
> Just curious if this is any issue or not.
If you do not have any complaints from us
PROTECTED]
Subject: RE: [squid-users] Wb_group error message in cache.log
Not really..
Does it happen for all users or just some?
Is there any log messages from Samba in the Samba or messages log files?
Regards
Henrik
On Tue, 2 Dec 2003, Mark Pelkoski wrote:
> DOES ANYBODY HAVE AN I
oski
> Sent: Wednesday, November 26, 2003 10:27 AM
> To: [EMAIL PROTECTED]
> Subject: [squid-users] Wb_group error message in cache.log
>
>
> List,
> I keep seeing this error in my cache.log a couple of times a day. Is
> this normal or do I have a problem? I require my users
DOES ANYBODY HAVE AN IDEA ABOUT THIS???
-Original Message-
From: Mark Pelkoski
Sent: Wednesday, November 26, 2003 10:27 AM
To: [EMAIL PROTECTED]
Subject: [squid-users] Wb_group error message in cache.log
List,
I keep seeing this error in my cache.log a couple of times a day. Is
this
List,
I keep seeing this error in my cache.log a couple of times a day. Is
this normal or do I have a problem? I require my users to belong to a
certain NT group in order to use Squid. I wasn't seeing it when I tested
it with 70 users. Now I have 800+ users.
(wb_group)[9464](wb_check_group.c:231):
On Fri, 31 Oct 2003, Lombardo Federico wrote:
> but wbinfo_group is a perl script, I've a lot of users... I'm afraid that
> will slow down authentication process, isn't it ?
Not really. The speed difference is marginal, and in both cases the
results are aggressively cached by Squid.
> wb_group i
gt;
Cc: <[EMAIL PROTECTED]>
Sent: Friday, October 31, 2003 12:48 PM
Subject: Re: [squid-users] wb_group and samba 3
> On Fri, 31 Oct 2003, Lombardo Federico wrote:
>
> > I need wb_group to work under samba 3.
>
> Won't work. wb_group is a Samba-2.X helper.
>
> For Sa
On Fri, 31 Oct 2003, Lombardo Federico wrote:
> I need wb_group to work under samba 3.
Won't work. wb_group is a Samba-2.X helper.
For Samba-3 you can use the wbinfo_group helper which is Samba version
neutral.
Regards
Henrik
I need wb_group to work under samba 3.
Compiling it with the samba 3 libraries give this error_
[EMAIL PROTECTED] winbind_group]# make
source='wb_common.c' object='wb_common.o' libtool=no \
depfile='.deps/wb_common.Po' tmpdepfile='.deps/wb_common.TPo' \
depmode=gcc3 /bin/sh ../../../cfgaux/depcom
>I'm having issues using wb_group from Stable3, both the version
>compile from source and the SRPM. I have an earlier version of
>wb_group that works perfectly from Stable1, here is my results
Interesting - I got:
$ ./wb_group -d -c
/wb_group[25429](wb_check_group.c:321): External ACL winbindd g
I had a similar problem if I had Squid running. I would halt squid and test
wb_group and all would work right then.
>-Original Message-
>From: Alex Short [mailto:[EMAIL PROTECTED]
>Sent: Friday, August 29, 2003 4:26 PM
>To: [EMAIL PROTECTED]
>Subject: [squid-
I'm having issues using wb_group from Stable3, both the version compile
from source and the SRPM. I have an earlier version of wb_group that
works perfectly from Stable1, here is my results
/usr/lib/squid/wb_group -d -c
/wb_group[22948](wb_check_group.c:321): External ACL winbindd group helper
Henrik,
Thanks so much that worked.
Later.
On Wed, 2003-08-20 at 17:23, Henrik Nordstrom wrote:
> On Wednesday 20 August 2003 23.24, Edward Mann wrote:
> > I am running squid 2.5.STABLE3, samba 2.2.8a with wb_group.
> > wb_group is working fine, but what i want to know is if there is a
> > way
On Wednesday 20 August 2003 23.24, Edward Mann wrote:
> I am running squid 2.5.STABLE3, samba 2.2.8a with wb_group.
> wb_group is working fine, but what i want to know is if there is a
> way that i can setup the configuration so that if the user is not
> in the group the wb_group helper will put th
I am running squid 2.5.STABLE3, samba 2.2.8a with wb_group. wb_group is
working fine, but what i want to know is if there is a way that i can
setup the configuration so that if the user is not in the group the
wb_group helper will put them back to basic and IE will give them the
login box? They kee
o" <[EMAIL PROTECTED]>;
<[EMAIL PROTECTED]>
Sent: Tuesday, August 19, 2003 12:30 AM
Subject: Re: Res: Re: Res: Re: [squid-users] --> wb_group cache time
> On Monday 18 August 2003 20.02, Alex Carlos Braga Antão wrote:
> > Where do I find the wb_group helpers to squid wo
On Monday 18 August 2003 20.02, Alex Carlos Braga Antão wrote:
> Where do I find the wb_group helpers to squid work with Samba 3.0?
The wbinfo based helper should work I think
(helpers/external/wbinfo_group).
The wb_auth and wb_ntlm_auth are both replaced by the Samba ntlm_auth
helper in Samba-
, 18 de agosto de 2003 13:23:16
Para: Alex Carlos Braga Antão; [EMAIL PROTECTED]
Assunto: Re: Res: Re: [squid-users] --> wb_group cache time
On Monday 18 August 2003 15.06, Alex Carlos Braga Antão wrote:
> I configure ttl=60 (1 minute) to test, but nothing happens. It
> only works if
On Monday 18 August 2003 15.06, Alex Carlos Braga Antão wrote:
> I configure ttl=60 (1 minute) to test, but nothing happens. It
> only works if I restart SAMBA.
Then the problem is somewhere in Samba. Most likely winbind has cached
the group memberships, not querying the domain again.
> How
On Monday 18 August 2003 15.31, Alex Carlos Braga Antão wrote:
> What really means the negative_ttl on the external_acl
How long to remember negative lookups, i.e. a user not being member of
a group in case of group lookups.
Regards
Henrik
--
Donations welcome if you consider my Free
los Braga Antão"
Cc: [EMAIL PROTECTED]
Assunto: Re: Res: Re: [squid-users] --> wb_group cache time
Hi,
Il 15.06 18/08/2003 Alex Carlos Braga Antão ha scritto:
>Hello again,
>
> I have wb_group configured here, but I´m still getting some strange
>problems.
>
> I can
Hi,
Il 15.06 18/08/2003 Alex Carlos Braga Antão ha scritto:
Hello again,
I have wb_group configured here, but I´m still getting some strange
problems.
I can browse with a user in the group Internet, but if I remove this
user from the group, the user still can browse.
I configure ttl
Hello again,
I have wb_group configured here, but I´m still getting some strange
problems.
I can browse with a user in the group Internet, but if I remove this
user from the group, the user still can browse.
I configure ttl=60 (1 minute) to test, but nothing happens. It only
works if I
Wednesday, August 13, 2003 8:52 PM
Subject: Re: [squid-users] wb_group problem
> On Wed, 13 Aug 2003, Aleksandr Shcherbakov wrote:
>
> > wbinfo says:
> > wbinfo -r
> > Could not get groups for user
> > wbinfo -r
> > Could not get groups for user
>
> T
Hi!
I want to use winbind authentication and control access via group (I have
w2k domain - Active Directory).
I configured smb (2-2-8a) and squid (2.5.STABLE3, compiled with samba
sources) using http://www.squid-cache.org/Doc/FAQ/FAQ-23.html#ss23.5.
I have added to smb.conf:
winbind enum users = y
On Wed, 13 Aug 2003, Aleksandr Shcherbakov wrote:
> wbinfo says:
> wbinfo -r
> Could not get groups for user
> wbinfo -r
> Could not get groups for user
Then I think there is a problem with your winbind installation somewhere.
Maybe it is not fully joined to the domain or something, I do not
On Wed, 13 Aug 2003, [koi8-r] áÌÅËÓÁÎÄÒ ýÅÒÂÁËÏ× wrote:
> I try to run wb_group -d...
> I give 'mydomain\user group' - fail with (wb_check_group.c:231) - Waring:
> Can't enum user groups.
> I give 'mydomain\\user group' - fail with same message.
> 'user group' - the same.
What does wbinfo say abo
> The only good way I can see to do this is to match against
> the authenticated username. Use a script to calculate which
> users in access.log are over their limit, then dump those
> to a file that you match on using a proxy_auth acl.
>
> acl overused proxy_auth "/path/to/file"
Were already doin
y, August 13, 2003 6:18 PM
Subject: Re: [squid-users] wb_group problem
> On Wed, 13 Aug 2003, [koi8-r] aIAEOAIAO yAOAAEI? wrote:
>
> > I try to run wb_group -d...
> > I give 'mydomain\user group' - fail with (wb_check_group.c:231) -
Waring:
> > Can't enum user
L PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Wednesday, August 13, 2003 8:52 PM
Subject: Re: [squid-users] wb_group problem
> On Wed, 13 Aug 2003, Aleksandr Shcherbakov wrote:
>
> > wbinfo says:
> > wbinfo -r
> > Could not get groups for user
> > wbinfo -r
y, August 13, 2003 6:18 PM
Subject: Re: [squid-users] wb_group problem
> On Wed, 13 Aug 2003, [koi8-r] áÌÅËÓÁÎÄÒ ýÅÒÂÁËÏ× wrote:
>
> > I try to run wb_group -d...
> > I give 'mydomain\user group' - fail with (wb_check_group.c:231) -
Waring:
> > Can't enum user
> I finally remembered to check the cache log for details
> :-( arg. OK so the groups are being read correctly now.
Good.
> This particular configuration leads to everyone at full
> speed, which is a better default option!
> For the 'overused' acl, should i be using external_auth or
> RFC391
Henrik Nordstrom said:
>
>
> Another thing to note is delay_access is not too happy about external
> acl types or other acl types which may require an external lookup of
> any kind. But it should work pretty good (but still not perfect) if
> you force the same acls to be evaluated in http_access.
> Hmm, just noticed the -d in that line, don't know whether that has just slipped in
> while testing or not.
There is a readme.txt in the winbind_group directory explaining the
available command line options and required squid.conf syntax.
> I can't use the proxy from home so will check that out
> I have this as my external_acl_directive:
> external_acl_type wb_group %LOGIN /usr/local/squid/libexec/wb_group -d
> Can you pass paramaters like that? eg could I use -c ?
Yes - in fact, that's what I do. My config is:
external_acl_type NT_global_group ttl=300 %LOGIN
/opt/squid/libexec/wb_gro
Henrik Nordstrom said:
> On Monday 04 August 2003 05.20, Simon Bryan wrote:
>
>> Yes it works from the command line OK with that syntax. Does Squid
>> do that automatically? If not how do you configure the acl? I have
>> the following at the moment:
>>
>> acl winauth external wb_group wwwusers
>> a
On Monday 04 August 2003 05.20, Simon Bryan wrote:
> Yes it works from the command line OK with that syntax. Does Squid
> do that automatically? If not how do you configure the acl? I have
> the following at the moment:
>
> acl winauth external wb_group wwwusers
> acl banned external wb_group bann
Original Message-
> From: Simon Bryan [mailto:[EMAIL PROTECTED]
> Sent: Monday, 4 August 2003 11:20 AM
> To: [EMAIL PROTECTED]
> Cc: [EMAIL PROTECTED]
> Subject: RE: [squid-users] wb_group
>
>
> Jay Turner said:
> > You need to supply the account name and the group to
s
> Jay
>
>> -Original Message-
>> From: Simon Bryan [mailto:[EMAIL PROTECTED]
>> Sent: Monday, 4 August 2003 9:13 AM
>> To: [EMAIL PROTECTED]
>> Subject: [squid-users] wb_group
>>
>>
>> Hi all,
>> I am working my way through why the delay_p
ROTECTED]
> Sent: Monday, 4 August 2003 9:13 AM
> To: [EMAIL PROTECTED]
> Subject: [squid-users] wb_group
>
>
> Hi all,
> I am working my way through why the delay_pools do not work for
> me, I suspected
> winbind and have been rebuilding everything. I have an issue with
rprisingly readable,
even for a non-programmer) what conditions cause this status to be
generated.
Regards,
Tony
-Original Message-
From: Simon Bryan [mailto:[EMAIL PROTECTED]
Sent: Monday, 4 August 2003 11:13
To: [EMAIL PROTECTED]
Subject: [squid-users] wb_group
Hi all,
I am working my w
Hi all,
I am working my way through why the delay_pools do not work for me, I suspected
winbind and have been rebuilding everything. I have an issue with wb_group that I
can't resolve. If I use wb_group -d and enter a valid username I get a list of
groups as below:
student
/wb_group[22779](wb_chec
Hi,
At 21.31 03/07/2003, Mark Pelkoski wrote:
List,
My wb_group dies from time to time. It was built from 2.5.2. Can I just
compile the wb_group external helper from 2.5.3 and replace the old one,
or do I have to re-compile and replace squid also with 2.5.3 for the new
wb_group to work? TIA.
-Mar
> My wb_group dies from time to time. It was built from 2.5.2. Can I just
> compile the wb_group external helper from 2.5.3 and replace the old one,
> or do I have to re-compile and replace squid also with 2.5.3 for the new
> wb_group to work? TIA.
You might as well just fully install 2.5STABLE3,
List,
My wb_group dies from time to time. It was built from 2.5.2. Can I just
compile the wb_group external helper from 2.5.3 and replace the old one,
or do I have to re-compile and replace squid also with 2.5.3 for the new
wb_group to work? TIA.
-Mark
Scenario:
+W2K A.D. Domain
+ squid 2.5 STABLE1. + wb_group as authenticator
Sometime appears that some users (is randomic!) have user locked on the
Domain Controller for accessing Internet using squid.
I've noticed that in squid access.log there are many ACCESS_DENIED from ip
machine since IE p
On Friday 28 February 2003 10.52, [EMAIL PROTECTED] wrote:
> Hello,
>
> I am using samba 2.2.7 and squid 2.5-stable1.
> I need that only people belonging to specific NT groups can have
> access to the intranet, or our intranet,...
>
> I've failed to make it work with wb_group as external helper, bu
Hello,
I am using samba 2.2.7 and squid 2.5-stable1.
I need that only people belonging to specific NT groups can have
access to the intranet, or our intranet,...
I've failed to make it work with wb_group as external helper, but it
is running fine with wbinfo_group.pl
Is there any impact to use t
Please read the patch description carefully..
acl ... "/path/to/included/file"
With the patch the included file may contain entries having spaces in
them.
squid.conf still may not contain spaces..
Regards
Henrik
tor 2003-02-27 klockan 10.02 skrev Jay Turner:
> Hi All,
>
> I have successfully
Hi All,
I have successfully got wb_group installed and running on my Squid2.5-STABLE1 install.
I am having a problem with NT domains that have a space in them (Domain Users).
I downloaded the squid-2.5.STABLE1-spaces.patch file and it appears to have applied
correctly:
patching file src/cache_
58 matches
Mail list logo
