Nope, not a clue off the top of my head, sorry. Adrian On Tue, Nov 27, 2007, Ralf.Lutz@xxxxxxxxxxxxx wrote: > @Adrian: Thank you for youre fast answer. Maybe you can help me a bit with the configuration with Kerberos ? > > Most steps are working on my system: > > - I have a Kerberos ticket > - wbinfo -g shows the groups in the AD > - getent -g shows the groups in the AD, too > > But there?s a problem with the squid configuration: > > I have the following entrie in the squid.conf: > > external_acl_type www_group ttl=0 concurrency=5 %LOGIN /usr/lib/squid/squid_unix_group -g www > external_acl_type ebay_group ttl=0 concurrency=5 %LOGIN /usr/lib/squid/squid_unix_group -g Ebay > > Users in the two groups www and Ebay should go to the internet. This worked on our "old" proxy with squid 2.5 without Kerberos. > > If I now start squid and use it as proxy, I get a TCP_DENIED in the access.log and in the cache.log the following entries: > > helper: Group does not exist 'Lutz' > helper: Group does not exist 'X<AB>^D^H<F2><87>^D^H' > helper: Group does not exist '<88>^W??y<97>^D^Hu<B8>v' > helper: Group does not exist '<C9><C3>' > helper: Group does not exist '<9C><8D><87>' > helper: Group does not exist '<A0>6z' > helper: Group does not exist '<E8>^W??<EC>]u' > helper: Group does not exist '<8D><83><E8><FE><FF><FF><89>E<F0><8D><83><E8><FE><FF><FF>)E<F0><C1>}<F0>^B<8B>U > <B6>' > helper: Group does not exist '<81><C3>^?<D7>^P' > helper: Group does not exist '_^\??<8A>^\??<9A>^\??<A5>^\??<B3>^\??<D3>^\??<E6>^\??<F0>^\??<B3>^^??<D6>^^??<F0>^^??<FF> > ^^??^T^_??%^_??;^_??C^_??P^_??<81>^_??<A3>^_??<B8>^_??<CA>^_??' > helper: Group does not exist '^C' > helper: Group does not exist '<9C><8D><87>' > helper: Group does not exist '' > helper: Group does not exist 'Lutz' > helper: Group does not exist 'X<AB>^D^H<F2><87>^D^H' > helper: Group does not exist 'x6<97><BF>y<97>^D^Hu<B8>v' > helper: Group does not exist '<C9><C3>' > helper: Group does not exist '<9C><8D><87>' > helper: Group does not exist '<A0>6z' > helper: Group does not exist '<D8>6<97><BF><EC>]u' > helper: Group does not e<B6>''<8D><83><E8><FE><FF><FF><89>E<F0><8D><83><E8><FE><FF><FF>)E<F0><C1>}<F0>^B<8B>U > helper: Group does not exist '<81><C3>^?<D7>^P' > helper: Group does not exist '_L<97><BF><8A>L<97><BF><9A>L<97><BF><A5>L<97><BF><B3>L<97><BF><D3>L<97><BF><E6> > L<97><BF><F0>L<97><BF><B3>N<97><BF><D6>N<97><BF><F0>N<97><BF><FF>N<97><BF>^TO<97><BF>%O<97><BF>;O<97><BF>CO > <97><BF>PO<97><BF><81>O<97><BF><A3>O<97><BF><B8>O<97><BF><CA>O<97><BF>' > helper: Group does not exist '^C' > helper: Group does not exist '<9C><8D><87>' > helper: Group does not exist '' > > Have you an idea ? -- - Xenion - http://www.xenion.com.au/ - VPS Hosting - Commercial Squid Support - - $25/pm entry-level VPSes w/ capped bandwidth charges available in WA -
