Re: [squid-users] Can someone help me block samba users at a particular time.

Dear Amos,

I have managed to recompile squid with the basic auth helpers and
proxy_auth without any errors.

root_at_Studio-Server:~# /etc/init.d/squid reload
 * Reloading Squid configuration files
FATAL: auth_param basic program /usr/local/squid/bin/proxy_auth: (2)
No such file or directory
Squid Cache (Version 2.6.STABLE18): Terminated abnormally.
CPU Usage: 0.039 seconds = 0.028 user + 0.011 sys
Maximum Resident Size: 0 KB
Page faults with physical i/o: 0
Aborted

Here's what is happening. According to the wiki documentation, i have
to add the auth_param basic program /usr/local/squid/bin/ncsa_auth
/usr/local/squid/etc/passwd

If i am right, the basic program will be proxy_auth?
Also, i don't find any files under /usr/local/squid/bin?

wbinfo -a sscms\\root%password

plaintext password authentication failed
error code was NT_STATUS_NO_LOGON_SERVERS (0xc000005e)
error messsage was: No logon servers
Could not authenticate user sscms\root%solaris with plaintext password
challenge/response password authentication failed
error code was NT_STATUS_NO_LOGON_SERVERS (0xc000005e)
error messsage was: No logon servers
Could not authenticate user sscms\root with challenge/response

Regards,
Avinash

On Tue, Oct 14, 2008 at 7:31 AM, Amos Jeffries <squid3_at_treenet.co.nz> wrote:
>> Amos,
>>
>> I was not there when squid was compiled on the server, I am not able
>> to find the configure file for squid.
>
> "squid -v" will list the configure options squid was built with.
>
>> So, will removing squid and reinstalling work?
>
> It will. Though the removal should not be necessary.
> Simply re-building the source with the same location options and finishing
> with a "make install" should work. You need to be careful about using the
> same configure options for folder and file locations though.
>
> Amos
>
>>
>> Regards,
>> Avinash
>>
>>
>> On Fri, Oct 10, 2008 at 2:35 PM, Amos Jeffries <squid3_at_treenet.co.nz>
>> wrote:
>>> Avinash Rao wrote:
>>>>
>>>> Yes, I built squid myself. i downloaded the files from the squid site
>>>> and installed it.
>>>>
>>>> Are you asking me rebuild squid using these options --enable-auth
>>>> --enable-{auth type}-auth-helpers={helper names}
>>>>
>>>> Ok, let me try this and get back if necessary.
>>>
>>> Check the ones you have already. You may not need a full rebuild.
>>> If the helper you want to use and its auth type are missing then yes you
>>> will have to add hem and rebuild.
>>>
>>> Amos
>>>
>>>>
>>>>
>>>> Thanks so much for your time.
>>>> Avinash
>>>>
>>>>
>>>>
>>>>
>>>> On Wed, Oct 8, 2008 at 4:18 PM, Amos Jeffries <squid3_at_treenet.co.nz>
>>>> wrote:
>>>>>
>>>>> Avinash Rao wrote:
>>>>>>
>>>>>> I went through the documentation. I need help in installing the
>>>>>> auth_proxy
>>>>>> module. I didn't install squid from Synaptic Manager, i did it
>>>>>> manually!
>>>>>> so,
>>>>>> the helpers directory is missing on my system and i am not able to
>>>>>> find
>>>>>> the
>>>>>> squid authenticators.
>>>>>>
>>>>>> Is there anyway i can get this?
>>>>>>
>>>>> You built squid yourself?
>>>>>
>>>>> Add some configure options to build the helpers and squid auth
>>>>> components:
>>>>>
>>>>> --enable-auth
>>>>> --enable-{auth type}-auth-helpers={helper names}
>>>>>
>>>>> and rebuild.
>>>>>
>>>>> ./configure --help shows the options and how to find out whats
>>>>> available.
>>>>>
>>>>> Amos
>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> On Thu, Oct 2, 2008 at 10:24 AM, Avinash Rao <avinash.aol_at_gmail.com
>>>>>> <mailto:avinash.aol_at_gmail.com>> wrote:
>>>>>>
>>>>>> thanks and i will check it today.
>>>>>>
>>>>>> On Thu, Oct 2, 2008 at 9:09 AM, Amos Jeffries <squid3_at_treenet.co.nz
>>>>>> <mailto:squid3_at_treenet.co.nz>> wrote:
>>>>>> >
>>>>>> > > Amos,
>>>>>> > >
>>>>>> > > Thank you for the information. I will go through the doc, test
>>>>>> it and get
>>>>>> > > back if necessary.
>>>>>> > > If i wrote my requirement right in my last email, the samba
>>>>>> users can get
>>>>>> > > access to internet only between 18:00 - 20:00 Hrs everyday.
>>>>>> >
>>>>>> > Ah, sorry. you wrote it right. I read it wrong.
>>>>>> >
>>>>>> > The http_access line should be:
>>>>>> > http_access deny !deadHours sambaUsers
>>>>>> >
>>>>>> > and the name makes better sense being okayHours instead of
>>>>>> deadHours.
>>>>>> >
>>>>>> > Amos
>>>>>> >
>>>>>> > >
>>>>>> > > Thanks again
>>>>>> > > Avinash
>>>>>> > >
>>>>>> > > On Thu, Oct 2, 2008 at 7:42 AM, Amos Jeffries
>>>>>> <squid3_at_treenet.co.nz <mailto:squid3_at_treenet.co.nz>>
>>>>>> > > wrote:
>>>>>> > >
>>>>>> > >> > Hi all,
>>>>>> > >> >
>>>>>> > >> > I have configured the latest version of squid on Ubuntu
>>>>>> Studio 8.0 -
>>>>>> > >> > AMD 64bit. I have also configured samba.
>>>>>> > >> > I am in need of blocking the samba users from accessing the
>>>>>> internet
>>>>>> > >> > anytime except 18:00 - 20:00 Hrs everyday. How do i do
>>>>>> this?
>>>>>> > >> > The samba is configured as a PDC with WinXP clients.
>>>>>> > >> >
>>>>>> > >>
>>>>>> > >> Standard samba config.
>>>>>> > >> http://wiki.squid-cache.org/SquidFaq/ProxyAuthentication
>>>>>> > >>
>>>>>> > >> Then this at the appropriate place of your config:
>>>>>> > >>
>>>>>> > >> acl sambaUsers proxy_auth REQUIRED
>>>>>> > >> acl deadHours time 18:00-20:00
>>>>>> > >> http_access deny deadHours sambaUsers
>>>>>> > >>
>>>>>> > >>
>>>>>> > >> Amos
>>>>>> > >>
>>>>>> > >>
>>>>>> > >
>>>>>> >
>>>>>> >
>>>>>>
>>>>>>
>>>>>
>>>>> --
>>>>> Please use Squid 2.7.STABLE4 or 3.0.STABLE9
>>>>>
>>>
>>>
>>> --
>>> Please use Squid 2.7.STABLE4 or 3.0.STABLE9
>>>
>>
>
>
>
Received on Tue Oct 14 2008 - 08:36:35 MDT