That's because the authenticators need to verify WHERE to authenticate via
dns...so the look for the special SRV entries that AD has for _kerberos and
_ldap, if he can't get a response on those entries, then it is assumed that
they are unreachable.
On Thursday 21 April 2005 10:21 am, Babs wrote:
> Hi
> As the linuxbox access the Win2K box running ADS for
> getting the user authenticated using squid_ldap_auth,
> when the machine running DNS goes down linuxbox is
> not able to reach the Win2K box running ADS I suppose.
> As soon as the DNS system came back to life
> authentication is working fine. Anyone can tell me
> more why this happens?
> Thanx & regards
> Babs
>
> --- greylake <greylake@spunge.org> wrote:
> > What exactly did you have to do with your DNS ?
> >
> > On Mon, 2005-04-18 at 19:16, Babs wrote:
> > > Hi All!
> > > At last I found out whats causing this trouble. It
> >
> > is
> >
> > > my DNS was causing this whole problem. If you get
> >
> > this
> >
> > > error make sure your DNS is working properly. Even
> > > though I had specified the servers in hosts file
> >
> > still
> >
> > > somehow it was using my DNS which was pointing
> >
> > outside
> >
> > > my network. I thought this reply will help someone
> >
> > who
> >
> > > may get the same problem
> > >
> > > Thanx all of you there
> > > regards
> > > Babs
> > >
> > > --- Babs <arvbab@yahoo.com> wrote:
> > > > Hi
> > > > I am facing the same problem once again, the
> > > > authentication from the browser appears
> >
> > repeatedly
> >
> > > > and
> > > > gives a authentication error. cache.log reports
> > > > "Squid_Ldap_Auth error: Cant Contact LDAP
> >
> > Server".
> >
> > > > This time I made sure things are fine with Msbox
> >
> > and
> >
> > > > with a nmap, I could see the ldap ports in msbox
> >
> > and
> >
> > > > a
> > > > netstat shows me a connection established to
> >
> > msbox
> >
> > > > ldap port. Also I could successfully telnet into
> >
> > the
> >
> > > > msbox ldap port from squid box. Also I could use
> > > > ldapsearch tool without any trouble.
> > > > As previously Marc suggested to telnet msbox 445
> > > > port
> > > > is working without any problem. I restarted my
> >
> > msbox
> >
> > > > like the previously but this time I am still
> > > > getting
> > > > the same error.
> > > >
> > > > Anyone can give me some idea what might be the
> > > > problem?
> > > > Thanx in advance
> > > > Babs
> > >
> > > __________________________________
> > > Do you Yahoo!?
> > > Plan great trips with Yahoo! Travel: Now over
> >
> > 17,000 guides!
> >
> > > http://travel.yahoo.com/p-travelguide
>
> __________________________________________________
> Do You Yahoo!?
> Tired of spam? Yahoo! Mail has the best spam protection around
> http://mail.yahoo.com
-- Michael Wray AimConnect, an S4F Inc. Company 918.524.1010 ext 106 mwray@aimconnect.com http://www.aimconnect.comReceived on Thu Apr 21 2005 - 10:06:54 MDT
This archive was generated by hypermail pre-2.1.9 : Sun May 01 2005 - 12:00:04 MDT