I turned on debugging on wb_ntlmauth
2002/10/31 01:18:14| The reply for GET http://msn.com is ALLOWED, because it matched 'all'
(wb_ntlmauth)[6305](wb_ntlm_auth.c:292): Got 'YR' from squid.
(wb_ntlmauth)[6305](wb_ntlm_auth.c:72): sending 'TT TlRMTVNTUAACAAAABwAHACgAAACCgkEAbPmwIlTeXQ0AAAAAAAAAAFNUVURFTlQ=' to squid
2002/10/31 01:18:14| The request GET http://msn.com is DENIED, because it matched 'students'
2002/10/31 01:18:14| The reply for GET http://msn.com is ALLOWED, because it matched 'all'
2002/10/31 01:18:14| clientReadRequest: FD 26: no data to process ((11) Resource temporarily unavailable)
(wb_ntlmauth)[6305](wb_ntlm_auth.c:292): Got 'KK TlRMTVNTUAADAAAAGAAYAFIAAAAAAAAAagAAAAcABwA0AAAACAAIADsAAAAPAA8AQwAAAFNUVURFTlRBTkRSRVdTVElUQURNSU5fU1RVREVOVLZE6Qy02jCOD/+8c5G6NSeEqNhdF5FJOd==' from squid.
(wb_ntlmauth)[6305](wb_ntlm_auth.c:226): no nthash
(wb_ntlmauth)[6305](wb_ntlm_auth.c:239): Checking user 'DOMAIN\USERNAME' lmhash len =24, have_nthash=0, nthash len=0
(wb_ntlmauth)[6305](wb_ntlm_auth.c:246): winbindd result: 1
(wb_ntlmauth)[6305](wb_ntlm_auth.c:66): sending 'AF domain\username' to squid
2002/10/31 01:18:14| authenticateAuthUserRequestSetIp: user 'domain\username' has been seen at a new IP address (x.x.x.x)
2002/10/31 01:18:14| The request GET http://msn.com is ALLOWED, because it matched 'students'
FATAL: Received Segment Violation...dying.
2002/10/31 01:18:14| storeDirWriteCleanLogs: Starting...
2002/10/31 01:18:14| WARNING: Closing open FD 27
2002/10/31 01:18:14| 65536 entries written so far.
2002/10/31 01:18:14| 131072 entries written so far.
2002/10/31 01:18:14| 196608 entries written so far.
2002/10/31 01:18:14| 262144 entries written so far.
2002/10/31 01:18:14| 327680 entries written so far.
2002/10/31 01:18:14| 393216 entries written so far.
2002/10/31 01:18:14| 458752 entries written so far.
2002/10/31 01:18:14| 524288 entries written so far.
2002/10/31 01:18:14| 589824 entries written so far.
2002/10/31 01:18:14| xrename: renaming /var/spool/squid/swap.state.clean to /var/spool/squid/swap.state
2002/10/31 01:18:15| Finished. Wrote 611534 entries.
2002/10/31 01:18:15| Took 0.8 seconds (798216.0 entries/sec).
CPU Usage: 13.875 seconds = 7.941 user + 5.934 sys
Maximum Resident Size: 0 KB
Page faults with physical i/o: 406
Memory usage for squid via mallinfo():
total space in arena: 59296 KB
Ordinary blocks: 59274 KB 8 blks
Small blocks: 0 KB 0 blks
Holding blocks: 584 KB 3 blks
Free Small blocks: 0 KB
Free Ordinary blocks: 22 KB
Total in use: 59858 KB 101%
Total free: 22 KB 0%
(wb_ntlmauth)[6305](wb_ntlm_auth.c:272): fgets() failed! dying..... errno=22 (Invalid argument)
(wb_ntlmauth)[6306](wb_ntlm_auth.c:272): fgets() failed! dying..... errno=0 (Success)
(wb_ntlmauth)[6307](wb_ntlm_auth.c:272): fgets() failed! dying..... errno=0 (Success)
(wb_ntlmauth)[6308](wb_ntlm_auth.c:272): fgets() failed! dying..... errno=0 (Success)
(wb_ntlmauth)[6309](wb_ntlm_auth.c:272): fgets() failed! dying..... errno=0 (Success)
(wb_auth)[6310](wb_basic_auth.c:109): fgets() failed! dying..... errno=0 (Success)
(wb_auth)[6311](wb_basic_auth.c:109): fgets() failed! dying..... errno=0 (Success)
> -----Original Message-----
> From: Andrew Loughnan
> Sent: Thursday, 31 October 2002 12:57 AM
> To: Squid-Users (E-mail)
> Subject: [squid-users] What the .... ?
>
>
> I keep getting these errors whenever I try to go anywhere
> using IE and W2k domain
> Using squid 2.5 on RH 7.3 (Just installed and testing at present)
>
> I can wbinfo -t secret is good, wbinfo -a
> DOMAIN\\username%pass and it returns both plaintext and
> challenge response as working
> I have an upstream proxy server that requires each user to
> login to but I want to be able to authenticate users locally
> as well, transparently if possible.
>
> Any help appreciated
>
> [tail /var/log/messages]
> Oct 31 00:45:56 linux squid[5352]: Squid Parent: child
> process 5607 exited due to signal 6
> Oct 31 00:45:59 linux squid[5352]: Squid Parent: child
> process 5711 started
> Oct 31 00:46:12 linux squid[5352]: Squid Parent: child
> process 5711 exited due to signal 6
> Oct 31 00:46:15 linux squid[5352]: Squid Parent: child
> process 5750 started
>
> [tail /var/log/squid/cache.log]
> (wb_ntlmauth)[5728](wb_ntlm_auth.c:272): fgets() failed!
> dying..... errno=0 (Success)
> (wb_ntlmauth)[5729](wb_ntlm_auth.c:272): fgets() failed!
> dying..... errno=0 (Success)
> (wb_ntlmauth)[5730](wb_ntlm_auth.c:272): fgets() failed!
> dying..... errno=0 (Success)
> (wb_ntlmauth)[5731](wb_ntlm_auth.c:272): fgets() failed!
> dying..... errno=0 (Success)
> (wb_ntlmauth)[5732](wb_ntlm_auth.c:272): fgets() failed!
> dying..... errno=0 (Success)
> (wb_auth)[5733](wb_basic_auth.c:109): fgets() failed!
> dying..... errno=0 (Success)
> (wb_auth)[5734](wb_basic_auth.c:109): fgets() failed!
> dying..... errno=0 (Success)
> (wb_auth)[5735](wb_basic_auth.c:109): fgets() failed!
> dying..... errno=0 (Success)
> (wb_auth)[5736](wb_basic_auth.c:109): fgets() failed!
> dying..... errno=0 (Success)
> (wb_auth)[5737](wb_basic_auth.c:109): fgets() failed!
> dying..... errno=0 (Success)
>
> [proxy.conf]
> cache_peer proxy.sjcs.melb.catholic.edu.au parent 3128 0
> no-query default login=PASS
> auth_param ntlm program /usr/lib/squid/wb_ntlmauth
> auth_param ntlm children 5
> auth_param ntlm max_challenge_reuses 0
> auth_param ntlm max_challenge_lifetime 2 minutes
>
> auth_param basic program /usr/lib/squid/wb_auth
> auth_param basic children 5
> auth_param basic realm SJC Student - You are logging onto a
> Monitored Internet Service
> auth_param basic credentialsttl 2 hours
> acl students proxy_auth REQUIRED
> external_acl_type NT_global_group %LOGIN /usr/lib/squid/wb_group
> acl FullAccess external NT_global_group proxyauth
> never_direct allow students
> never_direct allow all
> Thanks
>
> Andrew Loughnan, MCP
> Computer Services Manager
> St Joseph's College
> 135 Aphrasia St
> Geelong, Victoria Australia
> 3220
> Ph +61 3 5226-8100
> DD +61 3 5226-8165
> Fax +61 3 5221-6983
> E-mail: <<mailto:andrewl@sjc.vic.edu.au>>
> WWW: <<http://www.sjc.vic.edu.au>>
>
>
>
Received on Wed Oct 30 2002 - 07:18:48 MST
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:10:57 MST