Hi,
I'm using squid2.5 stable5 (ntlm_assert.patch) with samba 3.14a on RH9.
I want to use the wbinfo_group.pl plugin to authenicate users who are
member of a windows group called ProxyUsers. Samba, wbinfo etc .. all
appear to work fine. When i run wbinfo from the shell it also works
fine. However, when i use wbinfo_group.pl in squid i get the following
errors in my cache.log when trying to access the web as Administrator
(using tac)..
-g, --domain-groups Lists all domain groups
-u, --domain-users Lists all domain users
Usage: [OPTION...]
Invalid option
GID: -5008-
SID: -S-1-5-21-193554404-1789558652-91453608-1593 Domain Group (2)-
Group: -ProxyUsers-
User: -^@^@^@^@nistrator-
User = ^@^@^@^@nistrator, Group = ProxyUsers
Got ^@^@^@^@nistrator ProxyUsers from squid
Sending ERR to squid
GID: -5008-
SID: -S-1-5-21-193554404-1789558652-91453608-1593 Domain Group (2)-
Group: -ProxyUsers-
User: -À%nistrator-
User = À%nistrator, Group = ProxyUsers
Malformed UTF-8 character (unexpected non-continuation byte 0x25,
immediately af
ter start byte 0xc0) in pattern match (m//) at
/usr/local/squid/libexec/wbinfo_g
roup.pl line 56, <STDIN> line 6.
Got Ànistrator ProxyUsers from squid
The first 4 character of the administrator user appear to have been
corrupted. Other users are similar ?
Here are the relevant auth lines from my squid.conf
# authentication configuration - ntlm
auth_param ntlm program /usr/bin/ntlm_auth
--helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 10
auth_param ntlm max_challenge_reuses 5
auth_param ntlm max_challenge_lifetime 5 minutes
# authentication configuration - basic
# Used by browsers other than than the above
auth_param basic program /usr/bin/ntlm_auth
--helper-protocol=squid-2.5-basic
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
# external authentication application
external_acl_type nt_group ttl=0 concurrency=5 %LOGIN
/usr/local/squid/libexec/w
binfo_group.pl
# Authenticate Users who are members of the ProxyUsers group
acl InternetUsers external nt_group ProxyUsers
Any Idea's,
thanks
Ian
