Re: [squid-users] Re: Re:Problem with SQUID_KERB_LDAP

Am 05.02.2010 19:03, schrieb Markus Moeller:
> If you have only a directory not an executable then you don't really
> have squid_kerb_ldap installed.
>
> The script is a standalone script somewhere on your filesystem
> accesible by the squid process.
>
> Markus
>
> "Ralf Fruehauf" <r.fruehwacht_at_googlemail.com> wrote in message
> news:ff35590e1002050714q1bd0432bje929e968189242b2_at_mail.gmail.com...
>> For my understanding:
>>
>> i take this script and put it into my /etc/init.d/squid start script?
>>
>> With strace, i thought, i need a executably file/program, but i have
>> no squid_kerb_ldap file, only a directory!?
>> Sorry, for this simple question.
>>
>> Rainer
>>
>
>
Ok, that was my mistake, i had a problem during the make command with
squid_kerb_ldap, now,
i have a squid_kerb_ldap file and squid successfully starts, that is
some progress at least.

Now, i have a problem with the authenticating. The registration box
appears on the screen,
but he don't accept my user/passwort entry. The user is located in the
SQUID_USERS group
in my Active Directory. After 4 until 5 attempts, i get a error - Cache
Access Denied -
"Sorry, you are not currently allowed to request http://www.google.de/
from this cache until you have authenticated yourself."
______________________________________________________________________________________________

access.log:

1265659148.810 2 192.168.100.130 TCP_DENIED/407 2462 GET
http://www.google.de/ - NONE/- text/html
1265659148.856 1 192.168.100.130 TCP_DENIED/407 2565 GET
http://www.google.de/ - NONE/- text/html
1265659158.206 1 192.168.100.130 TCP_DENIED/407 2565 GET
http://www.google.de/ - NONE/- text/html

______________________________________________________________________________________________

cache.log:

2010/02/08 20:38:35| Starting Squid Cache version 3.0.STABLE18 for
i686-pc-linux-gnu...
2010/02/08 20:38:35| Process ID 2292
2010/02/08 20:38:35| With 1024 file descriptors available
2010/02/08 20:38:35| DNS Socket created at 0.0.0.0, port 46847, FD 7
2010/02/08 20:38:35| Adding domain homebase.local from /etc/resolv.conf
2010/02/08 20:38:35| Adding domain homebase.local from /etc/resolv.conf
2010/02/08 20:38:35| Adding nameserver 192.168.100.1 from /etc/resolv.conf
2010/02/08 20:38:35| Adding nameserver 192.168.100.254 from /etc/resolv.conf
2010/02/08 20:38:35| helperOpenServers: Starting 10/10 'squid_kerb_auth'
processes
2010/02/08 20:38:36| helperOpenServers: Starting 5/5 'squid_kerb_ldap'
processes
2010/02/08 20:38:36| squid_kerb_ldap: Starting version 1.1.2
2010/02/08 20:38:36| squid_kerb_ldap: Group list SQUID_USERS
2010/02/08 20:38:36| squid_kerb_ldap: Group SQUID_USERS Domain NULL
2010/02/08 20:38:36| squid_kerb_ldap: Netbios list NULL
2010/02/08 20:38:36| squid_kerb_ldap: No netbios names defined.
2010/02/08 20:38:36| squid_kerb_ldap: Starting version 1.1.2
2010/02/08 20:38:36| squid_kerb_ldap: Group list SQUID_USERS
2010/02/08 20:38:36| squid_kerb_ldap: Group SQUID_USERS Domain NULL
2010/02/08 20:38:36| squid_kerb_ldap: Netbios list NULL
2010/02/08 20:38:36| squid_kerb_ldap: No netbios names defined.
2010/02/08 20:38:36| squid_kerb_ldap: Starting version 1.1.2
2010/02/08 20:38:36| squid_kerb_ldap: Group list SQUID_USERS
2010/02/08 20:38:36| squid_kerb_ldap: Group SQUID_USERS Domain NULL
2010/02/08 20:38:36| squid_kerb_ldap: Netbios list NULL
2010/02/08 20:38:36| squid_kerb_ldap: No netbios names defined.
2010/02/08 20:38:36| squid_kerb_ldap: Starting version 1.1.2
2010/02/08 20:38:36| squid_kerb_ldap: Group list SQUID_USERS
2010/02/08 20:38:36| squid_kerb_ldap: Group SQUID_USERS Domain NULL
2010/02/08 20:38:36| squid_kerb_ldap: Netbios list NULL
2010/02/08 20:38:36| squid_kerb_ldap: No netbios names defined.
2010/02/08 20:38:36| squid_kerb_ldap: Starting version 1.1.2
2010/02/08 20:38:36| squid_kerb_ldap: Group list SQUID_USERS
2010/02/08 20:38:36| squid_kerb_ldap: Group SQUID_USERS Domain NULL
2010/02/08 20:38:36| squid_kerb_ldap: Netbios list NULL
2010/02/08 20:38:36| squid_kerb_ldap: No netbios names defined.
2010/02/08 20:38:36| Unlinkd pipe opened on FD 27
2010/02/08 20:38:36| Swap maxSize 102400 + 8192 KB, estimated 8507 objects
2010/02/08 20:38:36| Target number of buckets: 425
2010/02/08 20:38:36| Using 8192 Store buckets
2010/02/08 20:38:36| Max Mem size: 8192 KB
2010/02/08 20:38:36| Max Swap size: 102400 KB
2010/02/08 20:38:36| Version 1 of swap file with LFS support detected...
2010/02/08 20:38:36| Rebuilding storage in /var/cache/squid-3.0 (CLEAN)
2010/02/08 20:38:36| Using Least Load store dir selection
2010/02/08 20:38:36| chdir: /opt/squid-3.0/var/cache: (2) No such file
or directory
2010/02/08 20:38:36| Current Directory is /
2010/02/08 20:38:36| Loaded Icons.
2010/02/08 20:38:36| Accepting HTTP connections at 0.0.0.0, port 3128,
FD 29.
2010/02/08 20:38:36| Accepting ICP messages at 0.0.0.0, port 3130, FD 30.
2010/02/08 20:38:36| HTCP Disabled.
2010/02/08 20:38:36| Ready to serve requests.
2010/02/08 20:38:36| Done reading /var/cache/squid-3.0 swaplog (0 entries)
2010/02/08 20:38:36| Finished rebuilding storage from disk.
2010/02/08 20:38:36| 0 Entries scanned
2010/02/08 20:38:36| 0 Invalid entries.
2010/02/08 20:38:36| 0 With invalid flags.
2010/02/08 20:38:36| 0 Objects loaded.
2010/02/08 20:38:36| 0 Objects expired.
2010/02/08 20:38:36| 0 Objects cancelled.
2010/02/08 20:38:36| 0 Duplicate URLs purged.
2010/02/08 20:38:36| 0 Swapfile clashes avoided.
2010/02/08 20:38:36| Took 0.07 seconds ( 0.00 objects/sec).
2010/02/08 20:38:36| Beginning Validation Procedure
2010/02/08 20:38:36| Completed Validation Procedure
2010/02/08 20:38:36| Validated 25 Entries
2010/02/08 20:38:36| store_swap_size = 0
2010/02/08 20:38:37| storeLateRelease: released 0 objects
2010/02/08 20:38:58| squid_kerb_auth: Got 'YR
TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAGAHIXAAAADw==' from squid
(length: 59).
2010/02/08 20:38:58| squid_kerb_auth: received type 1 NTLM token
2010/02/08 20:40:40| squid_kerb_auth: Got 'YR
TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAGAHIXAAAADw==' from squid
(length: 59).
2010/02/08 20:40:40| squid_kerb_auth: received type 1 NTLM token
2010/02/08 20:57:43| squid_kerb_auth: Got 'YR
TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAGAHIXAAAADw==' from squid
(length: 59).
2010/02/08 20:57:43| squid_kerb_auth: received type 1 NTLM token
2010/02/08 20:57:49| squid_kerb_auth: Got 'YR
TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAGAHIXAAAADw==' from squid
(length: 59).
2010/02/08 20:57:49| squid_kerb_auth: received type 1 NTLM token
2010/02/08 20:58:24| squid_kerb_auth: Got 'YR
TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAGAHIXAAAADw==' from squid
(length: 59).
2010/02/08 20:58:24| squid_kerb_auth: received type 1 NTLM token
2010/02/08 20:58:51| squid_kerb_auth: Got 'YR
TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAGAHIXAAAADw==' from squid
(length: 59).
2010/02/08 20:58:51| squid_kerb_auth: received type 1 NTLM token
2010/02/08 20:59:08| squid_kerb_auth: Got 'YR
TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAGAHIXAAAADw==' from squid
(length: 59).
2010/02/08 20:59:08| squid_kerb_auth: received type 1 NTLM token
2010/02/08 20:59:18| squid_kerb_auth: Got 'YR
TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAGAHIXAAAADw==' from squid
(length: 59).
2010/02/08 20:59:18| squid_kerb_auth: received type 1 NTLM token
______________________________________________________________________________________________

store.log:

1265659148.810 RELEASE -1 FFFFFFFF 02BD860C9F7570381B44392E3E27E0D4 407
1265659148 0 -1 text/html 2094/2094 GET http://www.google.de/
1265659148.856 RELEASE -1 FFFFFFFF DF3324214B04A1A81662633DC3E4C78C 407
1265659148 0 -1 text/html 2197/2197 GET http://www.google.de/
1265659158.206 RELEASE -1 FFFFFFFF 3F2E3F4551C070C64EBEFEBB8AF6EECB 407
1265659158 0 -1 text/html 2197/2197 GET http://www.google.de/

So, how can i localize this problem.

Rainer
Received on Mon Feb 08 2010 - 20:04:50 MST