Once you try that then try converting the opposite like so..

wbinfo --sid-to-uid (sid from previous step)

On 05/05/2011 03:16 PM, Aaron E. wrote:
See what wbinfo --name-to-sid (group) reports for both groups , also did
you change the ACL in squid to point to the new group?

On 05/05/2011 09:32 AM, olaf.bo...@hvbg.hessen.de wrote:
Hi!
More than a week ago I sent the below-mentioned message but did not
receive any answer.
I think that the subject heading was not correct, and so I changed it.
Hope that I will get an answer now.

Olaf

--------------------

Von: Boldt, Olaf (HVBG)
Gesendet: Mittwoch, 27. April 2011 14:58
An: 'samba@lists.samba.org'
Betreff: Problems with Squid and Active Directory

Hello!

Since a few weeks I have Squid Version 2.7.STABLE7 on Ubuntu Server
10.04. All worked fine - different users in an AD-Group could reach
the internet through my proxy. Because of this my Squid-configuration
seems to be OK. Since the name of the AD-Group was changed it is no
more possible to reach the internet through the proxy. The error is:
"Access control configuration prevents your request from being allowed
at this time."

Switching to the old group name all works fine again, switching to the
new one: the same error as above.

I changed the debug options and found this entry in cache.log:
"Could not convert sid S-1-5-21-3365863304-72330373-946326852-415981
to gid"

From the Squid Mailing List I got the answer that this is a problem of
Samba and/or winbind.
I have installed:
samba 2:3.4.7~dfsg-1ubuntu3.5
winbind 2:3.4.7~dfsg-1ubuntu3.5

What to do?

Thanks!
Olaf



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Reply via email to