squid+AD

[video]

добрый день
делал все по статье http://www.lissyara.su/?id=1375
не работает IE c ntlm авторизацией и все тут
mozila нормально авторизуется
не пойму где грабли
логи:
log.winbindd

Код: Выделить всё

refresh_sequence_number: RCMP seq number is now 416273
[2008/01/28 10:45:00, 10] nsswitch/winbindd_cache.c:centry_expired(540)
  centry_expired: Key SN/S-1-5-21-1212589486-3316442769-319541663-513 for domain RCMP is good.
[2008/01/28 10:45:00, 10] nsswitch/winbindd_cache.c:wcache_fetch(625)
  wcache_fetch: returning entry SN/S-1-5-21-1212589486-3316442769-319541663-513 for domain RCMP
[2008/01/28 10:45:00, 10] nsswitch/winbindd_cache.c:sid_to_name(1437)
  sid_to_name: [Cached] - cached name for domain RCMP status: NT_STATUS_OK
[2008/01/28 10:45:00, 10] nsswitch/winbindd_group.c:add_expanded_sid(94)
  Found name Domain Users, type 2
[2008/01/28 10:45:00, 10] nsswitch/winbindd_cache.c:refresh_sequence_number(466)
  refresh_sequence_number: RCMP time ok
[2008/01/28 10:45:00, 10] nsswitch/winbindd_cache.c:refresh_sequence_number(500)
  refresh_sequence_number: RCMP seq number is now 416273
[2008/01/28 10:45:00, 10] nsswitch/winbindd_cache.c:centry_expired(540)
  centry_expired: Key GM/S-1-5-21-1212589486-3316442769-319541663-513 for domain RCMP is good.
[2008/01/28 10:45:00, 10] nsswitch/winbindd_cache.c:wcache_fetch(625)
  wcache_fetch: returning entry GM/S-1-5-21-1212589486-3316442769-319541663-513 for domain RCMP
[2008/01/28 10:45:00, 10] nsswitch/winbindd_cache.c:lookup_groupmem(1875)
  lookup_groupmem: [Cached] - cached info for domain RCMP status: NT_STATUS_OK
[2008/01/28 10:45:00, 10] nsswitch/winbindd_group.c:fill_grent_mem(450)
  fill_grent_mem returning 1
[2008/01/28 10:45:00, 10] nsswitch/winbindd_group.c:winbindd_getgrent(1080)
  list_len = 426, mem_len = 0
[2008/01/28 10:45:00, 10] nsswitch/winbindd_group.c:winbindd_getgrent(1100)
  adding group num_entries = 19
[2008/01/28 10:45:00, 10] nsswitch/winbindd_group.c:winbindd_getgrent(961)
  entry_index = 2, num_entries = 2
[2008/01/28 10:45:00, 10] nsswitch/winbindd_group.c:winbindd_getgrent(968)
  freeing state info for domain BUILTIN
[2008/01/28 10:45:00, 10] nsswitch/winbindd_group.c:winbindd_getgrent(1138)
  returning 20 groups, length = 426
[2008/01/28 10:45:00, 10] nsswitch/winbindd.c:process_request(314)
  process_request: request fn GETGRENT
[2008/01/28 10:45:00, 3] nsswitch/winbindd_group.c:winbindd_getgrent(908)
  [ 1207]: getgrent
[2008/01/28 10:45:00, 10] nsswitch/winbindd.c:process_request(314)
  process_request: request fn SETGRENT
[2008/01/28 10:45:00, 3] nsswitch/winbindd_group.c:winbindd_setgrent_internal(714)
  [ 1207]: setgrent
[2008/01/28 10:45:00, 10] nsswitch/winbindd.c:process_request(314)
  process_request: request fn SETPWENT
[2008/01/28 10:45:00, 3] nsswitch/winbindd_user.c:winbindd_setpwent_internal(445)
  [ 1207]: setpwent

помогите плиз

[Хостинг HostFood.ru]

Тарифы на хостинг в России, от 12 рублей: https://www.host-food.ru/tariffs/hosting/
Тарифы на виртуальные сервера (VPS/VDS/KVM) в РФ, от 189 руб.: https://www.host-food.ru/tariffs/virtualny-server-vps/
Выделенные сервера, Россия, Москва, от 2000 рублей (HP Proliant G5, Intel Xeon E5430 (2.66GHz, Quad-Core, 12Mb), 8Gb RAM, 2x300Gb SAS HDD, P400i, 512Mb, BBU):
https://www.host-food.ru/tariffs/vydelennyi-server-ds/
Недорогие домены в популярных зонах: https://www.host-food.ru/domains/

[Alex Keda]

в конфиге, видимо...
который ты забыл показать..

[video]

smb.conf

Код: Выделить всё

[global]
   workgroup = RCMP
   security = ADS
   password server = PDC.RCMP.RU
   realm = RCMP.RU
   netbios name = ASR
   server string =  asrv
   log level = 10
   log file = /var/log/samba/log.%m
   max log size = 50000
   os level = 0

   winbind uid = 10000-20000
   winbind gid = 10000-20000
   winbind enum users = yes
   winbind enum groups = yes

   winbind use default domain = yes
   display charset = koi8-r
   unix charset = koi8-r
   dos charset = 866
   local master = no
   encrypt passwords = yes
   

squid.conf

Код: Выделить всё

auth_param ntlm program /usr/local/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 10
auth_param ntlm keep_alive on

auth_param basic program /usr/local/bin/ntlm_auth --helper-protocol=squid-2.5-basic
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours

acl NTLMauth proxy_auth REQUIRED
http_access allow NTLMauth

acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8

acl localnet src 10.0.0.0/8     # RFC1918 possible internal network
acl localnet src 172.16.0.0/12  # RFC1918 possible internal network
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network

acl SSL_ports port 443
acl Safe_ports port 80          # http
acl Safe_ports port 20          # ftp20
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT
# Only allow cachemgr access from localhost
http_access allow manager localhost
http_access deny manager
# Deny requests to unknown ports
http_access deny !Safe_ports
# Deny CONNECT to other than SSL ports
http_access deny CONNECT !SSL_ports

http_access allow localnet

# And finally deny all other access to this proxy
http_access deny all

icp_access allow localnet
icp_access deny all

htcp_access allow localnet
htcp_access deny all

http_port 192.168.2.85:3128

hierarchy_stoplist cgi-bin ?

cache_mem 8 MB
cache_dir ufs /usr/local/squid/cache 4096 16 256

access_log /usr/local/squid/logs/access.log squid
cache_log /usr/local/squid/logs/cache.log
cache_store_log /usr/local/squid/logs/store.log

acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY


refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern .               0       20%     4320
icp_port 0

coredump_dir /usr/local/squid/cache

Код: Выделить всё

wbinfo -p
Ping to winbindd succeeded on fd 4
aserv# wbinfo -t
checking the trust secret via RPC calls succeeded
aserv# ping rcmp.ru
PING rcmp.ru (192.168.2.81): 56 data bytes
64 bytes from 192.168.2.81: icmp_seq=0 ttl=128 time=0.241 ms
64 bytes from 192.168.2.81: icmp_seq=1 ttl=128 time=0.337 ms

[video]

странно вообще и ошибок не вижу, месяц назад также все делал все было гут
самое обидное что файерфокс нативно авторицуется а IE нет, лучшеб наоборот

[princeps]

А нафиг тебе IE? Забей на него, юзай файрфокс. По личному опыту скажу, что тетки обычно даже и не замечают, что у них браузер поменялся - они, в отличие от оперы, похожи и файрфокс при установке может закладки перетянуть.