HI, I try wbinfo_group.pl with default config and after that modified, But I received error bellow. --------------------------------------------------------------------------------------------------------------------------------------------- [root@SQUIDSRV01 squid]# echo “squidtest restrictedinet” | /usr/lib64/squid/wbinfo_group.pl -d Debugging mode ON. Got “squidtest restrictedinet” from squid failed to call wbcLookupName: WBC_ERR_DOMAIN_NOT_FOUND Could not lookup name restrictedinet” failed to call wbcStringToSid: WBC_ERR_INVALID_PARAM Could not convert sid to gid User: -“squidtest- Group: -restrictedinet”- SID: -- GID: -- Sending ERR to squid ERR -------------------------------------------------------------------------------------------------------------------------------------------- wbinfo -t wbinfo -u wbinfo -g works fine. here is my smb.conf I have no Idea what is wrong. -------------------------------------------------------------------------------------------------------------------------------------------- #--authconfig--start-line-- # Generated by authconfig on 2013/08/09 16:14:11 # DO NOT EDIT THIS SECTION (delimited by --start-line--/--end-line--) # Any modification may be deleted or altered by authconfig in future workgroup = MYORG password server = 192.168.1.35 realm = MYORG.EXAMPLE.LOCAL security = ads idmap config * : range = 16777216-33554431 winbind separator = + template shell = /bin/false winbind use default domain = yes winbind offline logon = false #--authconfig--end-line-- kerberos method = dedicated keytab dedicated keytab file = /etc/squid/HTTP.keytab winbind enum groups = Yes winbind enum users = Yes idmap config * : range = 10000 - 20000 idmap config * : backend = tdb idmap config myorg : backend = tdb idmap config myorg : range = 20000 - 20000000 map untrusted to domain = Yes client ntlmv2 auth = Yes client lanman auth = No winbind normalize names = No winbind nested groups = Yes winbind nss info = rfc2307 winbind reconnect delay = 30 winbind cache time = 1800 winbind refresh tickets = true allow trusted domains = Yes server signing = auto client signing = auto lm announce = No ntlm auth = no lanman auth = No preferred master = No wins support = No encrypt passwords = yes printing = bsd load printers = no socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 -------------------------------------------------------------------------------------------------------------------------------------------- -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-active-directory-integration-tp4661575p4661956.html Sent from the Squid - Users mailing list archive at Nabble.com.