I believe I have narrowed the problem to the way squid formats the request when it sends it to the external helper. If the winbind seperator is set to + you can successfully get a response from wb_group on the command line, same if the seperator is !, however if the seperator is set to \\ or \ wb_group gives an error. As squid sends the request with slashs, it gives an error. Example cache.log below
2003/07/18 16:58:41| authenticateAuthUserRequestUnlock auth_user_request '0x83efa58' now at '2'. 2003/07/18 16:58:41| aclMatchAclList: no match, returning 0 2003/07/18 16:58:41| NTLM HandleReply, telling stateful helper : 2 2003/07/18 16:58:41| authenticateNTLMHelperServerAvailable: not starving - returning 1 (wb_group)[3044](wb_check_group.c:343): Got 'mydomain\\goodie ProxyUsers' from Squid (length: 27). (wb_group)[3044](wb_check_group.c:231): Warning: Can't enum user groups. 2003/07/18 16:58:42| aclCheck: checking 'http_access allow myProxyUsers' If squid could be changed to give 'mydomain+goodie ProxyUsers' instead, this would solve my problem. Does squid 'look' at the winbind seperator in smb.conf? As I think this may be where it stems from, since if it knew what seperator was being used, it would use it and not just use a slash. Regards, Tony -----Original Message----- From: Henrik Nordstrom To: Tony Melia (DMS); '[EMAIL PROTECTED]' Sent: 22/07/2003 11:29 AM Subject: Re: [squid-users] Winbind problem On Tuesday 22 July 2003 02.57, Henrik Nordstrom wrote: > On Monday 21 July 2003 23.10, Tony Melia (DMS) wrote: > > I give 'mydomain\\administrator ProxyUsers' > > You should give mydomain\administrator Nevermind that. I am only a bit tired. mydomain\\administrator it should be... Regards Henrik -- Donations welcome if you consider my Free Squid support helpful. https://www.paypal.com/xclick/business=hno%40squid-cache.org If you need commercial Squid support or cost effective Squid or firewall appliances please refer to MARA Systems AB, Sweden http://www.marasystems.com/, [EMAIL PROTECTED] Downs MicroSystems Pty Ltd 145 Margaret Street Toowoomba Qld 4350 Ph. (07) 4639 3344 Fax (07) 4639 3820 Important Disclaimer and Warning Downs MicroSystems does not represent or warrant that any attached files are free from computer viruses or other defects. The attached files are provided, and may only be used, on the basis that the user assumes all responsibility for any loss, damage or consequences resulting directly or indirectly from use of the attached files. The liability of Downs MicroSystems in any event is limited to either the resupply of the attached files or the cost of having the attached files resupplied. NOTE: The views expressed by the individual in this message do not necessarily reflect those of the organisation. Downs MicroSystems is committed to protecting the privacy of individuals, and is bound by the principles of the Commonwealth Privacy Act (1988). Should you wish to view our Privacy Policy, please visit www.downsmicro.com.au. The information contained in this message is confidential and may be legally privileged. The message is intended solely for the addressee(s). If you are not the intended recipient, you are hereby notified that any use, dissemination, or reproduction is strictly prohibited and may be unlawful. If you are not the intended recipient, please contact the sender by return e-mail and destroy all copies of the original message.
