Newsgroup: it.comp.os.linux.sys
Titolo: squid autenticazione+

Uso samba 3 per cerare il dominio MYDOM  e  squid 2.5 per
l'autenticazione utenti verso internet
con winbind attivo
squid.conf:
auth_param ntlm program /usr/bin/ntlm_auth
--helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 5
auth_param ntlm max_challenge_reuses 0
auth_param ntlm max_challenge_lifetime 15 minutes
auth_param ntlm use_ntlm_negotiate on
auth_param basic program /usr/bin/ntlm_auth
--helper-protocol=squid-2.5-basic
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off
...
Quando da un cient cerco di andare su internet ottengo (
/var/log/squid/cache.log)
[2006/12/04 15:43:53, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(672)
  Got user=[myuser] domain=[MYDOM] workstation=[PC2] len1=24 len2=24
[2006/12/04 15:43:53, 3] utils/ntlm_auth.c:winbind_pw_check(429)
  Login for user [MYDOM]\[myuser]@[PC2] failed due to [No logon
servers]
2006/12/04 15:43:53| comm_poll: 1+0 FDs ready
2006/12/04 15:43:53| comm_poll: FD 10 ready for reading
2006/12/04 15:43:53| cbdataValid: 0xb28d098
2006/12/04 15:43:53| helperStatefulHandleRead: 30 bytes from
ntlmauthenticator #1.
2006/12/04 15:43:53| commSetSelect: FD 10 type 1
2006/12/04 15:43:53| helperStatefulHandleRead: end of reply found
2006/12/04 15:43:53| cbdataValid: 0xb4826d0
2006/12/04 15:43:53| authenticateNTLMHandleReply: Helper: '0xb28d098'
{NA NT_STATUS_NO_LOGON_SERVERS}
2006/12/04 15:43:53| cbdataValid: 0xb34acf0
2006/12/04 15:43:53| authenticateNTLMResetServer: releasing server
'0xb28d098'
2006/12/04 15:43:53| helperStatefulReleaseServer: 0xb28d098
2006/12/04 15:43:53| helperStatefulReset: 0xb28d098
2006/12/04 15:43:53| authenticateNTLMHelperServerReset: resetting
challenge details
2006/12/04 15:43:53| StatefulGetFirstAvailable: Running servers 5.
2006/12/04 15:43:53| authenticateNTLMHelperServerAvailable: not
starving - returning 1
2006/12/04 15:43:53| authenticateNTLMHandleReply: Error validating user
via NTLM. Error returned 'NA NT_STATUS_NO_LOGON_SERVERS'
2006/12/04 15:43:53| authenticateValidateUser: Validating Auth_user
request '0xdbaeac0'.
2006/12/04 15:43:53| authenticateValidateUser: Validated Auth_user
request '0xdbaeac0'.
2006/12/04 15:43:53| cbdataValid: 0xb280df8
2006/12/04 15:43:53| aclCheck: checking 'http_access allow password'
2006/12/04 15:43:53| aclMatchAclList: checking password
2006/12/04 15:43:53| aclMatchAcl: checking 'acl password proxy_auth
REQUIRED'
2006/12/04 15:43:53| authenticateAuthenticate: header NTLM
TlRMTVNTUAADAAAAGAAYAHoAAAAYABgAkgAAABQAFABIAAAACgAKAFwAAAAUABQAZgAAAAAAAACqAAAABYKAogUAkwgAAAAPZQBnAG8AYgBpAGEAbgBjAGgAaQByAG8AcwBzAGkAQQBSAFQASQBTAFQASQBDAE8AMgBqM50j3g0izqM9r9ufn0CNuVR+QArhMaJWcvFKGq+KEiuM0AyOCszKr3kglaH70eo=.
2006/12/04 15:43:53| authenticateValidateUser: Validating Auth_user
request '0xdbaeac0'.
2006/12/04 15:43:53| authenticateValidateUser: Validated Auth_user
request '0xdbaeac0'.
2006/12/04 15:43:53| User not fully authenticated.
2006/12/04 15:43:53| authenticateNTLMAuthenticateUser: auth state ntlm
failed. NTLM
TlRMTVNTUAADAAAAGAAYAHoAAAAYABgAkgAAABQAFABIAAAACgAKAFwAAAAUABQAZgAAAAAAAACqAAAABYKAogUAkwgAAAAPZQBnAG8AYgBpAGEAbgBjAGgAaQByAG8AcwBzAGkAQQBSAFQASQBTAFQASQBDAE8AMgBqM50j3g0izqM9r9ufn0CNuVR+QArhMaJWcvFKGq+KEiuM0AyOCszKr3kglaH70eo=
2006/12/04 15:43:53| authenticateValidateUser: Validating Auth_user
request '0xdbaeac0'.
2006/12/04 15:43:53| authenticateValidateUser: Validated Auth_user
request '0xdbaeac0'.
2006/12/04 15:43:53| User not fully authenticated.
2006/12/04 15:43:53| authenticateAuthUserRequestUnlock auth_user
request '0xdbaeac0'.
2006/12/04 15:43:53| authenticateAuthUserRequestUnlock
auth_user_request '0xdbaeac0' now at '2'.
2006/12/04 15:43:53| aclMatchAcl: returning 0 sending authentication
challenge.
2006/12/04 15:43:53| aclMatchAclList: no match, returning 0
2006/12/04 15:43:53| aclCheck: requiring Proxy Auth header.
2006/12/04 15:43:53| aclCheck: match found, returning 2
2006/12/04 15:43:53| cbdataUnlock: 0xb280df8
2006/12/04 15:43:53| aclCheckCallback: answer=2
2006/12/04 15:43:53| cbdataValid: 0xd885218
2006/12/04 15:43:53| The request GET 
http://www.google.it/
 is DENIED,
because it matched 'password'
Perchè non mi fa accedere?
PS : la gestione utenti/password è fatta don smbpasswd
TIA
IK

 squid.conf:
Ciao
Non sono troppo pratico di autenticazione su squid, ma ho notato subito
questo messaggio:
2006/12/04 15:43:53| User not fully authenticated.
2006/12/04 15:43:53| authenticateAuthUserRequestUnlock auth_user
request '0xdbaeac0'.
Probabilmente il problema risiede qui.
Ciao
Giulio