Newsgroup: it.comp.os.linux.sys
Titolo: squid e winbind non si parlano ?

Ciao a tutti,
vorrei premettere che sono un super-principiante con Linux
ma ho un pò di esperienza su altri sistemi unix-like, abbiate pazienza.
Ho configurato squid per autenticarsi su un DC ADS W2K e permettere la
navigazione ad un gruppo "Internet" AD (tanto per una prima prova)
ma non funziona nulla.
In cache.log trovo cose così:
(wb_ntlmauth)[30928](wb_ntlm_auth.c:393): target domain is AdsMyDomain
(wb_ntlmauth)[30928](wb_ntlm_auth.c:416): Can't contact winbindd. Dying
2006/09/26 15:26:06| helperOpenServers: Starting 10 'wb_group' processes
(wb_group)[30929](wb_check_group.c:344): External ACL winbindd group helper build Dec 31 2005, 23:37:40 starting up...
(wb_group)[30929](wb_check_group.c:346): Warning: running in case insensitive mode !!!
(wb_group)[30929](wb_check_group.c:308): Can't contact winbindd. Dying
La macchina fa anche da file server ed è quindi parte del dominio ADS (in
cui si autenticano gli utenti), sembra funzionare perfettamente.
Avete bisogno dello squid.conf per dare una possibile diagnosi ?
L'unica cosa che poteva essere scazzata erano questi permessi (a giudicare
dal cache.log) ma sembrano essere ok:
[root@server ~]# ls -l /var/cache/samba/
total 564
-rw-------  1 root root    8192 Aug 10 17:19 account_policy.tdb
-rw-r--r--  1 root root    8192 Sep 25 10:05 brlock.tdb
-rw-r--r--  1 root root     228 Sep 26 15:48 browse.dat
-rw-r--r--  1 root root   49152 Sep 25 17:55 connections.tdb
-rw-r--r--  1 root root    8192 Aug 11 08:26 gencache.tdb
-rw-------  1 root root    8192 Aug 10 17:19 group_mapping.tdb
-rw-r--r--  1 root root   32768 Sep 25 15:14 locking.tdb
-rw-------  1 root root     696 Sep 22 15:10 messages.tdb
-rw-r--r--  1 root root    3939 Sep 26 04:02 namelist.debug
-rw-------  1 root root   24576 Sep  8 17:38 netsamlogon_cache.tdb
-rw-------  1 root root    8192 Aug 10 17:19 ntdrivers.tdb
-rw-------  1 root root     696 Aug 10 17:19 ntforms.tdb
-rw-------  1 root root    8192 Aug 10 17:19 ntprinters.tdb
drwxr-xr-x  2 root root    4096 Aug 10 17:19 printing
-rw-------  1 root root    8192 Aug 10 17:19 registry.tdb
-rw-r--r--  1 root root   57344 Sep 25 15:13 sessionid.tdb
-rw-------  1 root root    8192 Aug 10 17:19 share_info.tdb
-rw-r--r--  1 root root   16384 Sep 25 10:28 unexpected.tdb
-rw-------  1 root root  262144 Sep 25 11:13 winbindd_cache.tdb
-rw-r--r--  1 root root   32768 Aug 14 11:24 winbindd_idmap.tdb
drwxr-x---  2 root squid   4096 Sep 25 10:12 winbindd_privileged
[root@server ~]# ls -l /var/cache/samba/winbindd_privileged/
total 0
srwxrwxrwx  1 root root 0 Sep 25 10:12 pipe
[root@server ~]# ps aux|grep -i winbind
root     26659  0.0  0.3 10384 3604 ?        Ss   Sep25   0:01 winbindd
root     26660  0.0  0.2 10124 2936 ?        S    Sep25   0:00 winbindd
root     31080  0.0  0.0  4800  648 pts/0    R+   16:03   0:00 grep -i winbind
[root@server ~]# netstat -anp|grep -i winbind
tcp        0      0 
192.168.13.13:48991
 
192.168.13.15:445
           ESTABLISHED 26659/winbindd
tcp        0      0 
192.168.13.13:33080
 
192.168.13.15:389
           ESTABLISHED 26660/winbindd
tcp        0      0 
192.168.13.13:40726
 
192.168.13.15:389
           ESTABLISHED 26659/winbindd
tcp        0      0 
192.168.13.13:34080
 
192.168.13.15:445
           ESTABLISHED 26660/winbindd
unix  2      [ ACC ]     STREAM     LISTENING     33931  26659/winbindd      /var/run/winbindd/pipe
unix  2      [ ACC ]     STREAM     LISTENING     33933  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     67429  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     67425  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     67064  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     67060  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     66917  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     66913  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     64289  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     64190  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     64186  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     63120  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     63062  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     62999  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     62995  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     62633  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     62629  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     62595  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     62585  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     62570  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     62566  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     62490  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     62480  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     62220  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     62216  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     62067  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     62063  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     62054  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     62044  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     61950  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     61946  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     61927  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     61923  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     61822  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     61818  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     61801  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     61797  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     61651  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     61647  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     46160  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     46156  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  2      [ ]         DGRAM                    34772  26659/winbindd
unix  3      [ ]         STREAM     CONNECTED     34720  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
unix  3      [ ]         STREAM     CONNECTED     34710  26659/winbindd      /var/cache/samba/winbindd_privileged/pipe
Che ne dite ?
Mi basta anche un "Dai un'occhiata qui o là", grazie.
P.S.
Sono nel ng giusto o dovevo postare su i.c.o.l.software ?

> (wb_ntlmauth)[30928](wb_ntlm_auth.c:393): target domain is AdsMyDomain
Non so quale versione di samba e squid tu stia usando, ma probabilmente
stai usando l'autenticatore sbagliato. Controlla che tu non debba usare
ntlm_auth.
I permessi di accesso al socket di winbindd potrebbero essere piuttosto
restrittivi, agisci di conseguenza.
Fabio

bio ha scritto:

Sembra un tipico problema di helper: si deve usare ntlm_auth (quello 
fornito con samba 3) e wbinfo_group (che se non erro è un preogramma perl).
A dire il vero ci sono un pò pochi elementi per fare la diagnosi...