Страница 1 из 1
samba+w2003+squid
Добавлено: 2007-12-13 13:04:36
bobo
Добрый день all.
Пытаюсь настроить данную связку по статье Лиса
http://www.lissyara.su/?id=1375
Версии софта
конфиги совпадают
Авторизация не проходит.
в логе винбинда ошибка
Код: Выделить всё
[2007/12/13 11:50:03, 1] libads/ldap_utils.c:ads_do_search_retry_internal(115)
ads reopen failed after error Referral
в логе сквида
Код: Выделить всё
1197539853.868 1120 10.180.255.10 TCP_DENIED/407 1790 GET http://bash.org.ru/ - NONE/- text/html
Натыкайте носом куда смотреть.
Всем спасибо
Re: samba+w2003+squid
Добавлено: 2007-12-13 14:31:57
Alex Keda
покажи конфиги...
или у тя в лдап какие-то ссылки корявые, или в конфигах напортачил...
Re: samba+w2003+squid
Добавлено: 2007-12-13 18:24:57
Гость
Код: Выделить всё
cat /usr/local/etc/smb.conf
[global]
workgroup = DUK
server string = proxy server for xxx
netbios name =xxx
security = ads
realm = DUK.ROOT.LOCAL
password server = 10.180.10.15
encrypt passwords = yes
#winbind separator = +
winbind use default domain = yes
winbind uid = 10000-20000
winbind gid = 10000-20000
winbind enum users = yes
winbind enum groups = yes
log file = /var/log/samba/log.%m
max log size = 50000
local master = no
hosts allow = 10.xxx. 127.0.0.1
template shell=/bin/csh
display charset = koi8-r
unix charset = koi8-r
dos charset = 866
squid.conf
Код: Выделить всё
http_port 10.180.x.x:3128
icp_port 0
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
#------------------------------------
cache_mem 1024 MB
maximum_object_size 8092 KB
maximum_object_size_in_memory 512 KB
cache_dir ufs /var/data/squid/cache 50000 64 512
cache_access_log /var/data/squid/logs/access.log
cache_log /var/data/squid/logs/error.log
cache_mgr support@
cache_store_log none
error_directory /usr/local/etc/squid/errors/Russian-1251
visible_hostname proxyakhz
tcp_outgoing_address 195.184.211.222
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
coredump_dir /var/data/squid/logs/
pid_filename /var/run/squid.pid
auth_param ntlm program /usr/local/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 30
auth_param basic program /usr/local/bin/ntlm_auth --helper-protocol=squid-2.5-basic
auth_param basic children 4
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
external_acl_type nt_group %LOGIN /usr/local/libexec/squid/wbinfo_group.pl
acl inet_users external nt_group inet_users
acl inet_icq external nt_group inet_icq
acl inet_full external nt_group inet_full
acl inet_analit external nt_group inet_analit
acl inet_restrict external nt_group inet_restrict
acl inet_connect external nt_group inet_connect
acl MYDOMAIN proxy_auth REQUIRED
acl SSL_ports port 443 563
acl SSL_for_client_banks port 910 8443 4500
acl safe_ports port 80 # http
acl safe_ports port 21 # ftp
acl safe_ports port 443 # ssl
acl ICQ_ports port 5190 # ICQ
acl CONNECT method CONNECT
acl manager proto cache_object
acl all src 0.0.0.0/0.0.0.0
acl localhost src 127.0.0.1/255.255.255.255
acl mydomain_site dstdomain "/usr/local/etc/squid/db/allow_all.txt"
acl bad_url url_regex "/usr/local/etc/squid/db/deny_url.txt"
acl deny_domains dstdomain "/usr/local/etc/squid/db/deny_domains.txt"
acl client_banks dst "/usr/local/etc/squid/db/clinet_banks.txt"
acl bad_networks dst "/usr/local/etc/squid/db/bad_networks.txt"
acl not_autorized src "/usr/local/etc/squid/db/not_autorized.txt"
acl domains_for_restrict dstdomain "/usr/local/etc/squid/db/domains_for_restrict.txt"
deny_info ERR_ACCESS_DENIED bad_url
deny_info ERR_ACCESS_DENIED bad_networks
deny_info ERR_ACCESS_DENIED deny_domains
deny_info ERR_ACCESS_DENIED safe_ports
deny_info ERR_ACCESS_DENIED SSL_ports
http_access allow manager localhost
http_access deny manager
http_access allow client_banks
http_access allow not_autorized
http_access allow MYDOMAIN mydomain_site
http_access allow inet_full all
http_access deny bad_url
http_access allow inet_icq ICQ_ports
http_access deny bad_networks
http_access deny deny_domains
http_access deny CONNECT !SSL_ports
http_access deny !safe_ports
http_access allow inet_users
http_access allow inet_restrict domains_for_restrict
deny_info ERR_ACCESS_DENIED all
http_access allow all
Re: samba+w2003+squid
Добавлено: 2007-12-13 19:35:15
Гость
еще в логе сквида наблюдается вот такая ошибка
Код: Выделить всё
authenticateNTLMHandleReply: Error validating user via NTLM. Error returned 'BH NT_STATUS_ACCESS_DENIED'
2007/12/13 18:31:30| authenticateNTLMHandleReply: Error validating user via NTLM. Error returned 'BH NT_STATUS_ACCESS_DENIED'
Re: samba+w2003+squid
Добавлено: 2007-12-13 19:38:41
Гость
извиняюсь за флуд с конфигом сквида, постил в попыхах
ниже моя версия
Код: Выделить всё
# TAG: http_port
http_port 10.180.30.158:3128
icp_port 0
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
#------------------------------------
cache_mem 1024 MB
maximum_object_size 8092 KB
maximum_object_size_in_memory 512 KB
cache_dir ufs /var/data/squid/cache 50000 64 512
cache_access_log /var/data/squid/logs/access.log
cache_log /var/data/squid/logs/error.log
cache_mgr support@duk.root.local
cache_store_log none
append_domain .dook.local
error_directory /usr/local/etc/squid/errors/Russian-1251
visible_hostname proxyakhz.duk.root.local
tcp_outgoing_address 195.184.211.222
coredump_dir /var/data/squid/logs/
pid_filename /var/run/squid.pid
cache_effective_user squid
cache_effective_group squid
#------------------------------------
auth_param ntlm program /usr/local/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 20
auth_param basic program /usr/local/bin/ntlm_auth --helper-protocol=squid-2.5-basic
auth_param basic children 4
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
external_acl_type nt_group %LOGIN /usr/local/libexec/squid/wbinfo_group.pl
#-----------------------------------
acl DUK proxy_auth REQUIRED
acl all src 0.0.0.0/0.0.0.0
http_access allow DUK
http_access deny all
Re: samba+w2003+squid
Добавлено: 2007-12-14 13:00:40
Гость
up
Re: samba+w2003+squid
Добавлено: 2010-01-06 13:03:06
Akela
Я понимаю тема конечно старая но для меня актуальная.
Код: Выделить всё
libads/ldap_utils.c:ads_do_search_retry_internal(115)
ads reopen failed after error Referral
Помогите на что обратить внимание при такой ошибкив логах . Заранее блогадорствую.
Re: samba+w2003+squid
Добавлено: 2010-01-06 13:20:04
ADRE
попробуй: portupgrade -rf samba3