forum.lissyara.su

Код: Выделить всё

[17:06] /home/m0ps #net join -U m0ps
Enter m0ps's password:
Failed to join domain: failed to find DC for domain DOMAIN.LOCAL
ADS join did not work, falling back to RPC...
Unable to find a suitable server for domain DOMAIN
Unable to find a suitable server for domain DOMAIN

Код: Выделить всё

[17:18] /home/m0ps #net ads lookup
Information for Domain Controller: 10.10.110.103

Response Type: LOGON_SAM_LOGON_RESPONSE_EX
GUID: 94fd37ff-fc91-442d-8396-33b59abaa661
Flags:
        Is a PDC:                                   yes
        Is a GC of the forest:                      yes
        Is an LDAP server:                          yes
        Supports DS:                                yes
        Is running a KDC:                           yes
        Is running time services:                   yes
        Is the closest DC:                          yes
        Is writable:                                yes
        Has a hardware clock:                       yes
        Is a non-domain NC serviced by LDAP server: no
        Is NT6 DC that has some secrets:            no
        Is NT6 DC that has all secrets:             no
Forest:                 domain.local
Domain:                 domain.local
Domain Controller:      DC.domain.local
Pre-Win2k Domain:       DOMAIN
Pre-Win2k Hostname:     DC
Server Site Name :              Default-First-Site
Client Site Name :              Default-First-Site
NT Version: 5
LMNT Token: ffff
LM20 Token: ffff

Код: Выделить всё

1266587516.448      0 172.16.1.135 TCP_DENIED/407 409 HEAD http://download.windowsupdate.com/msdownload/update/software/secu/2010/01/windowsxp-kb978037-x86-express-rus_f74ec08c2567224531efa5eec2ac2e3efb600efb.cab - NONE/- text/html
1266587516.460      0 172.16.1.135 TCP_DENIED/407 639 HEAD http://download.windowsupdate.com/msdownload/update/software/secu/2010/01/windowsxp-kb978037-x86-express-rus_f74ec08c2567224531efa5eec2ac2e3efb600efb.cab - NONE/- text/html
1266587637.691      0 172.16.1.135 TCP_DENIED/407 409 HEAD http://download.windowsupdate.com/msdownload/update/software/secu/2010/01/windowsxp-kb977165-x86-rus_eaa5f69ef6c93b34b25251ab4fffbfdf14177a64.exe - NONE/- text/html
1266587637.707      0 172.16.1.135 TCP_DENIED/407 639 HEAD http://download.windowsupdate.com/msdownload/update/software/secu/2010/01/windowsxp-kb977165-x86-rus_eaa5f69ef6c93b34b25251ab4fffbfdf14177a64.exe - NONE/- text/html

Код: Выделить всё

auth_param ntlm program /usr/bin/ntlm_auth \
    --helper-protocol=squid-2.5-ntlmssp \
    --require-membership-of=S-1-5-21-2112778685-1447859232-1343371117-3669
auth_param ntlm children 10
#
auth_param basic program /usr/bin/ntlm_auth \
    --helper-protocol=squid-2.5-ntlmssp \
    --require-membership-of=S-1-5-21-2112778685-1447859232-1343371117-3669
auth_param basic children 10
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours

Код: Выделить всё

DOMAIN+Access_Internet

Код: Выделить всё

# 
# Main loop
#
while (<STDIN>) {
        chop;
        &debug ("Got $_ from squid");
        ($user, @groups) = split(/\s+/);
        $user =~ s/%([0-9a-fA-F][0-9a-fA-F])/pack("c",hex($1))/eg;
        # test for each group squid send in it's request
        foreach $group (@groups) {
                $group =~ s/%([0-9a-fA-F][0-9a-fA-F])/pack("c",hex($1))/eg;
                $group =~ s/_/ /g;
                $ans = &check($user, $group);
                last if $ans eq "OK";
        }
        &debug ("Sending $ans to squid");
        print "$ans\n";
}

Код: Выделить всё

smb.conf
winbind cache time = 5 (к примеру)

Код: Выделить всё

squid.conf
external_acl_type nt_group ttl=5 negative_ttl=5 %LOGIN  /usr/local/libexec/squid/wbinfo_group.pl

Код: Выделить всё

# wbinfo --authenticate=domain+user%user_pass

Код: Выделить всё

1337322196.918      8 192.168.1.100 TCP_DENIED/407 4292 GET http://www.yandex.ru/ - NONE/- text/html

Код: Выделить всё

# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference' and `info' packages installed, try:
# `info libc "Name Service Switch"' for information about this file.

passwd:         files winbind compat
group:          files winbind compat
shadow:         files winbind compat

hosts:          files dns
networks:       files

protocols:      db files
services:       db files
ethers:         db files
rpc:            db files

netgroup:       nis