On 19 Nov 2003, Dave Augustus wrote:

> Working in a Windows shop has it difficulties especially when trying to
> prove the case for Open Source...
> 
> I am hoping that Squid is it!
> 
> But I can't get the darn thing to authenticate to a W2k3 AD server due
> to changes in Samba that haven't migrated to Squid. I get a compile
> error with the -with-samba-sources directive. It fails with the 
> 
> gcc -DHAVE_CONFIG_H -I. -I. -I../../../include -I../../../include
> -I/usr/local/src/samba-3.0.0/source    -O3 -march=i686 -mcpu=i686
> -funroll-loops -fomit-frame-pointer -c `test -f wb_common.c || echo
> './'`wb_common.c

This is because the Squid helper you are trying to compile is for
Samba-2.2.X only.

Samba-3.X includes it's own helper, and thus you do not need the helper 
shipped with Squid for Samba-3.x. Instead you should use the helper which 
was installed as part of Samba-3.X.

Information on this can be found in the Squid FAQ, and has also been 
discussed a lot in the last months squid-users archives.

> So, is LDAP an alternative? What about NT Groups?

LDAP works fine for groups with MSAD. In fact MSAD is one of the LDAP 
directories the LDAP helpers to Squid was tested against during 
development.

What you don't get with LDAP is

a) NTLM support for single-sign-on.

b) The same ease of setting things up. A little more digging is required 
to get the LDAP parameters correct unless you know how MSAD and LDAP 
relates to each other..

Regards
Henrik

Reply via email to