On Fri, 2005-10-14 at 10:14 -0300, Felipe Augusto van de Wiel wrote: > > Never saw this problem before, but looking at the logs, > looks like your group entry does not have the proper field set, > or the field is not right, in other words, it does not start > with a "S-" like all the SID's. > > It is not much help, but perhaps could be a start, > good luck! Kind regards,
3 brazilian guys talking in english :) i have this problem too, i had squid auth on an AD for a long time but suddenly this weekend, this kind of problem starts to occurs here, i have squid using ntlm_auth restricting access to some groups, if in ntlm_auth i substitute group name by SID itself, it works fine, i believe other people out there have the same problem some experience from myself /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic --require-membership-of=VILLAS+SQUID USER PASSWORD [2005/10/10 12:18:53, 0] utils/ntlm_auth.c:get_require_membership_sid(237) Winbindd lookupname failed to resolve VILLAS+SQUID into a SID! ERR /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic --require-membership-of=S-1-5-21-1390067357-573735546-682003330-1524 USER PASSWORD OK [EMAIL PROTECTED] root]# wbinfo -n "marcello.mezzanotti" S-1-5-21-1390067357-573735546-682003330-1316 User (1) [EMAIL PROTECTED] root]# wbinfo -n "Domain Users" Could not lookup name Domain Users [EMAIL PROTECTED] root]# wbinfo -g | grep Domain Domain Computers Domain Controllers Domain Admins Domain Users Domain Guests Exchange Domain Servers RTCHSDomainServices RTCDomainServerAdmins RTCDomainUserAdmins [EMAIL PROTECTED] root]# getent group | grep Domain Domain Computers:x:10006: Domain Controllers:x:10009: Domain Admins:x:10003:marcello.mezzanotti,eduardotec,alexandreb,Administrator Domain Users:x:10000:cristinag Domain Guests:x:10014:Guest Exchange Domain Servers:x:10017:MARTE$,MAIL$ RTCHSDomainServices:x:10008: RTCDomainServerAdmins:x:10030: RTCDomainUserAdmins:x:10031: -- Marcello Mezzanotti <[EMAIL PROTECTED]> Information Security UNIX / Linux / *BSD -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
