Ralf,
The lines:
2010/02/08 20:59:08| squid_kerb_auth: received type 1 NTLM token
mean that your browser is not using Kerberos authentication, why you get the
popup.
Markus
"Ralf Fruehauf" <r.fruehwacht_at_googlemail.com> wrote in message
news:4B706E39.9050805_at_googlemail.com...
> Am 05.02.2010 19:03, schrieb Markus Moeller:
>> If you have only a directory not an executable then you don't really
>> have squid_kerb_ldap installed.
>>
>> The script is a standalone script somewhere on your filesystem accesible
>> by the squid process.
>>
>> Markus
>>
>> "Ralf Fruehauf" <r.fruehwacht_at_googlemail.com> wrote in message
>> news:ff35590e1002050714q1bd0432bje929e968189242b2_at_mail.gmail.com...
>>> For my understanding:
>>>
>>> i take this script and put it into my /etc/init.d/squid start script?
>>>
>>> With strace, i thought, i need a executably file/program, but i have
>>> no squid_kerb_ldap file, only a directory!?
>>> Sorry, for this simple question.
>>>
>>> Rainer
>>>
>>
>>
> Ok, that was my mistake, i had a problem during the make command with
> squid_kerb_ldap, now,
> i have a squid_kerb_ldap file and squid successfully starts, that is some
> progress at least.
>
> Now, i have a problem with the authenticating. The registration box
> appears on the screen,
> but he don't accept my user/passwort entry. The user is located in the
> SQUID_USERS group
> in my Active Directory. After 4 until 5 attempts, i get a error - Cache
> Access Denied -
> "Sorry, you are not currently allowed to request http://www.google.de/
> from this cache until you have authenticated yourself."
> ______________________________________________________________________________________________
>
> access.log:
>
> 1265659148.810 2 192.168.100.130 TCP_DENIED/407 2462 GET
> http://www.google.de/ - NONE/- text/html
> 1265659148.856 1 192.168.100.130 TCP_DENIED/407 2565 GET
> http://www.google.de/ - NONE/- text/html
> 1265659158.206 1 192.168.100.130 TCP_DENIED/407 2565 GET
> http://www.google.de/ - NONE/- text/html
>
> ______________________________________________________________________________________________
>
> cache.log:
>
> 2010/02/08 20:38:35| Starting Squid Cache version 3.0.STABLE18 for
> i686-pc-linux-gnu...
> 2010/02/08 20:38:35| Process ID 2292
> 2010/02/08 20:38:35| With 1024 file descriptors available
> 2010/02/08 20:38:35| DNS Socket created at 0.0.0.0, port 46847, FD 7
> 2010/02/08 20:38:35| Adding domain homebase.local from /etc/resolv.conf
> 2010/02/08 20:38:35| Adding domain homebase.local from /etc/resolv.conf
> 2010/02/08 20:38:35| Adding nameserver 192.168.100.1 from /etc/resolv.conf
> 2010/02/08 20:38:35| Adding nameserver 192.168.100.254 from
> /etc/resolv.conf
> 2010/02/08 20:38:35| helperOpenServers: Starting 10/10 'squid_kerb_auth'
> processes
> 2010/02/08 20:38:36| helperOpenServers: Starting 5/5 'squid_kerb_ldap'
> processes
> 2010/02/08 20:38:36| squid_kerb_ldap: Starting version 1.1.2
> 2010/02/08 20:38:36| squid_kerb_ldap: Group list SQUID_USERS
> 2010/02/08 20:38:36| squid_kerb_ldap: Group SQUID_USERS Domain NULL
> 2010/02/08 20:38:36| squid_kerb_ldap: Netbios list NULL
> 2010/02/08 20:38:36| squid_kerb_ldap: No netbios names defined.
> 2010/02/08 20:38:36| squid_kerb_ldap: Starting version 1.1.2
> 2010/02/08 20:38:36| squid_kerb_ldap: Group list SQUID_USERS
> 2010/02/08 20:38:36| squid_kerb_ldap: Group SQUID_USERS Domain NULL
> 2010/02/08 20:38:36| squid_kerb_ldap: Netbios list NULL
> 2010/02/08 20:38:36| squid_kerb_ldap: No netbios names defined.
> 2010/02/08 20:38:36| squid_kerb_ldap: Starting version 1.1.2
> 2010/02/08 20:38:36| squid_kerb_ldap: Group list SQUID_USERS
> 2010/02/08 20:38:36| squid_kerb_ldap: Group SQUID_USERS Domain NULL
> 2010/02/08 20:38:36| squid_kerb_ldap: Netbios list NULL
> 2010/02/08 20:38:36| squid_kerb_ldap: No netbios names defined.
> 2010/02/08 20:38:36| squid_kerb_ldap: Starting version 1.1.2
> 2010/02/08 20:38:36| squid_kerb_ldap: Group list SQUID_USERS
> 2010/02/08 20:38:36| squid_kerb_ldap: Group SQUID_USERS Domain NULL
> 2010/02/08 20:38:36| squid_kerb_ldap: Netbios list NULL
> 2010/02/08 20:38:36| squid_kerb_ldap: No netbios names defined.
> 2010/02/08 20:38:36| squid_kerb_ldap: Starting version 1.1.2
> 2010/02/08 20:38:36| squid_kerb_ldap: Group list SQUID_USERS
> 2010/02/08 20:38:36| squid_kerb_ldap: Group SQUID_USERS Domain NULL
> 2010/02/08 20:38:36| squid_kerb_ldap: Netbios list NULL
> 2010/02/08 20:38:36| squid_kerb_ldap: No netbios names defined.
> 2010/02/08 20:38:36| Unlinkd pipe opened on FD 27
> 2010/02/08 20:38:36| Swap maxSize 102400 + 8192 KB, estimated 8507 objects
> 2010/02/08 20:38:36| Target number of buckets: 425
> 2010/02/08 20:38:36| Using 8192 Store buckets
> 2010/02/08 20:38:36| Max Mem size: 8192 KB
> 2010/02/08 20:38:36| Max Swap size: 102400 KB
> 2010/02/08 20:38:36| Version 1 of swap file with LFS support detected...
> 2010/02/08 20:38:36| Rebuilding storage in /var/cache/squid-3.0 (CLEAN)
> 2010/02/08 20:38:36| Using Least Load store dir selection
> 2010/02/08 20:38:36| chdir: /opt/squid-3.0/var/cache: (2) No such file or
> directory
> 2010/02/08 20:38:36| Current Directory is /
> 2010/02/08 20:38:36| Loaded Icons.
> 2010/02/08 20:38:36| Accepting HTTP connections at 0.0.0.0, port 3128, FD
> 29.
> 2010/02/08 20:38:36| Accepting ICP messages at 0.0.0.0, port 3130, FD 30.
> 2010/02/08 20:38:36| HTCP Disabled.
> 2010/02/08 20:38:36| Ready to serve requests.
> 2010/02/08 20:38:36| Done reading /var/cache/squid-3.0 swaplog (0 entries)
> 2010/02/08 20:38:36| Finished rebuilding storage from disk.
> 2010/02/08 20:38:36| 0 Entries scanned
> 2010/02/08 20:38:36| 0 Invalid entries.
> 2010/02/08 20:38:36| 0 With invalid flags.
> 2010/02/08 20:38:36| 0 Objects loaded.
> 2010/02/08 20:38:36| 0 Objects expired.
> 2010/02/08 20:38:36| 0 Objects cancelled.
> 2010/02/08 20:38:36| 0 Duplicate URLs purged.
> 2010/02/08 20:38:36| 0 Swapfile clashes avoided.
> 2010/02/08 20:38:36| Took 0.07 seconds ( 0.00 objects/sec).
> 2010/02/08 20:38:36| Beginning Validation Procedure
> 2010/02/08 20:38:36| Completed Validation Procedure
> 2010/02/08 20:38:36| Validated 25 Entries
> 2010/02/08 20:38:36| store_swap_size = 0
> 2010/02/08 20:38:37| storeLateRelease: released 0 objects
> 2010/02/08 20:38:58| squid_kerb_auth: Got 'YR
> TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAGAHIXAAAADw==' from squid
> (length: 59).
> 2010/02/08 20:38:58| squid_kerb_auth: received type 1 NTLM token
> 2010/02/08 20:40:40| squid_kerb_auth: Got 'YR
> TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAGAHIXAAAADw==' from squid
> (length: 59).
> 2010/02/08 20:40:40| squid_kerb_auth: received type 1 NTLM token
> 2010/02/08 20:57:43| squid_kerb_auth: Got 'YR
> TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAGAHIXAAAADw==' from squid
> (length: 59).
> 2010/02/08 20:57:43| squid_kerb_auth: received type 1 NTLM token
> 2010/02/08 20:57:49| squid_kerb_auth: Got 'YR
> TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAGAHIXAAAADw==' from squid
> (length: 59).
> 2010/02/08 20:57:49| squid_kerb_auth: received type 1 NTLM token
> 2010/02/08 20:58:24| squid_kerb_auth: Got 'YR
> TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAGAHIXAAAADw==' from squid
> (length: 59).
> 2010/02/08 20:58:24| squid_kerb_auth: received type 1 NTLM token
> 2010/02/08 20:58:51| squid_kerb_auth: Got 'YR
> TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAGAHIXAAAADw==' from squid
> (length: 59).
> 2010/02/08 20:58:51| squid_kerb_auth: received type 1 NTLM token
> 2010/02/08 20:59:08| squid_kerb_auth: Got 'YR
> TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAGAHIXAAAADw==' from squid
> (length: 59).
> 2010/02/08 20:59:08| squid_kerb_auth: received type 1 NTLM token
> 2010/02/08 20:59:18| squid_kerb_auth: Got 'YR
> TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAGAHIXAAAADw==' from squid
> (length: 59).
> 2010/02/08 20:59:18| squid_kerb_auth: received type 1 NTLM token
> ______________________________________________________________________________________________
>
> store.log:
>
> 1265659148.810 RELEASE -1 FFFFFFFF 02BD860C9F7570381B44392E3E27E0D4 407
> 1265659148 0 -1 text/html 2094/2094 GET
> http://www.google.de/
> 1265659148.856 RELEASE -1 FFFFFFFF DF3324214B04A1A81662633DC3E4C78C 407
> 1265659148 0 -1 text/html 2197/2197 GET
> http://www.google.de/
> 1265659158.206 RELEASE -1 FFFFFFFF 3F2E3F4551C070C64EBEFEBB8AF6EECB 407
> 1265659158 0 -1 text/html 2197/2197 GET
> http://www.google.de/
>
> So, how can i localize this problem.
>
> Rainer
>
>
>
Received on Mon Feb 08 2010 - 23:14:37 MST
This archive was generated by hypermail 2.2.0 : Tue Feb 09 2010 - 12:00:04 MST