On 26/04/11 21:32, Olaf.Boldt@xxxxxxxxxxxxxx wrote:
Hello!
Since a few weeks I have Squid Version 2.7.STABLE7 on Ubuntu Server 10.04. All worked fine - different users in an AD-Group could reach the internet through my proxy. Because of this my Squid-configuration seems to be OK. Since the name of the AD-Group was changed it is no more possible to reach the internet through the proxy. The error is:
"Access control configuration prevents your request from being allowed at this time."
Switching to the old group name all works fine again, switching to the new one: the same error as above.
I changed the debug options and found this entry in cache.log:
"Could not convert sid S-1-5-21-3365863304-72330373-946326852-415981 to gid"
Is that a problem of Squid? Or is it a problem of Samba?
What to do?
The error is produces by winbind. So I doubt it is a Squid problem.
Check that AD has a SID "S-1-5-21-3365863304-72330373-946326852-415981".
Then check that SID has the correct group GID associated with it.
FWIW: Others mentioning this error years ago have had to do things like
patch, upgrade or re-install their samba or winbind binaries.
Amos
--
Please be using
Current Stable Squid 2.7.STABLE9 or 3.1.12
Beta testers wanted for 3.2.0.7 and 3.1.12.1
