This is a discussion on HELP: SQUID+NTLM Authentication+FC5 within the Squid Users forums, part of the Web Server and Related Forums category; I am working on Fedora core 5 2.6.15-1.2054_FC5 and gcc version 4.1.0 . For starting ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
I am working on Fedora core 5 2.6.15-1.2054_FC5 and gcc
version 4.1.0 . For starting to install squid i started with 3 phases :- 1) Install Windows 2k3 server and make it a domain controller with AD account with domain joining permissions . 2) Install Samba binary with sources . 3) Install Squid . For samba , i chose to samba version 3.0.25b and squid version 2.6.STABLE14 version . In the 1st phase , i went about setting up a win2k3 server and made it a domain controller and created an AD user and password . I also switched off 2 policies in win2k3 server , 1) smb signing 2) secure channel policy . Both were not suited for my needs . In the 2nd phase , i chose to install the samba sources . I went through a couple of posts regarding squid + ntlm setup procedure . Both the posts had made it compulsory to rebuilt the samba sources and samba sources are required for squid installation . I downloaded the samba package and copied to /opt directory . I Compiled Samba with following options. ../configure --with-winbind --with-winbind-auth-challenge --with- configdir=/etc/samba make make install I also made a samba start-up script below - ************************************************** ****** #!/sbin/sh # # Copyright (c) 2001 by Sun Microsystems, Inc # All rights reserved. # #ident "@(#)samba 1.1 01/09/24 SMI" case "$1" in start) [ -f /etc/sfw/smb.conf ] || exit 0 /usr/sfw/sbin/smbd -D /usr/sfw/sbin/nmbd -D /usr/local/samba/sbin/winbindd -D ;; stop) pkill smbd pkill nmbd pkill winbindd ;; *) echo "Usage: $0 { start | stop }" exit 1 ;; esac exit 0 Then i ran the following commands :- ln -s /etc/init.d/samba /etc/rc2.d/S99sambastart ln -s /usr/lib/libnss_winbind.so /usr/lib/libnss_winbind.so.1 ln -s /usr/lib/libnss_winbind.so /usr/lib/nss_winbind.so.1 ln -s /usr/lib/libnss_winbind.so /usr/lib/nss_winbind.so.2 my /etc/samba/smb.conf file is ************************************************** ************* [global] workgroup = supplicant netbios name = server server string = SambaServer #hosts allow = 10.0.0.0/8 127.0.0.1 #guest account = pcguest log file = /log/samba/log/log.%m max log size = 50 log level = 3 passdb:5 auth:10 winbind:10 max log size = 1500 security = domain idmap uid = 15000-20000 idmap gid = 15000-20000 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 local master = no os level = 20 domain master = no password server = 10.116.21.150 encrypt passwords = no winbind use default domain = Yes winbind uid = 10000-65000 winbind gid = 10000-65000 [homes] comment = Home Directories browseable = no writable = yes [printers] ************************************************** ********************* Then i added my system to domain supplicant using the following command net rpc join -S wipro-f2poxi2vk -USUPPLICANT/dennis It asked :- Enter password : <password> Joined domain SUPPLICANT Then to confirm the installation of samba with AD integration - wbinfo -a SUPPLICANT\\dennis%'ntlm@123' , and output was plaintext password authentication succeeded challenge/response password authentication succeeded then , #wbinfo -p , output was Ping to winbindd succeeded on fd 4 #wbinfo -t , output was checking the trust secret via RPC calls succeded when actually the output should have been "Secret good " But , when i did #wbinfo -g , output was Error for looking up groups . I also tried , #wbinfo -u , output was Error for looking up users . Also in the win2k3 server on the AD user's and computers page , my computer name is present confirming that i have finally added myself to the domain . But it is not able to lookup for groups . I do not know Why ? With this problem i decided to contine with the proceeding with the 3rd phase , installation of squid . I downloaded squid and moved to /opt directory . For compilation #./configure --prefix=/usr --enable-async-io --exec_prefix=/usr -- bindir=/usr/sbin --libexecdir=/usr/lib/squid --localstatedir=/var -- sysconfdir=/etc/squid --infodir=/usr/share/info --mandir=/usr/share/ man --enable-gnuregex --with-pthreads --enable- storeio="aufs,diskd,ufs,null" -enable-poll --enable-delay-pools -- enable-carp --enable-snmp --enable-icmp --enable-basic-auth- helpers="LDAP,NCSA,PAM" --disable-ident-lookups --disable-wccp -- enable-external-acl-helpers="ldap_group,unix_group,wbinfo_group" -- enable-auth="ntlm,basic" --enable-basic-auth-helpers="winbind" -- enable-ntlm-auth-helpers="winbind,SMB" --with-winbind-auth-challenge -- with-samba-sources="/opt/samba-3.0.10/source" while configure , it errors out ************* checking for gcc... gcc checking for C compiler default output file name... a.out checking whether the C compiler works... yes checking whether we are cross compiling... no checking for suffix of executables... checking for suffix of object files... o checking whether we are using the GNU C compiler... yes checking whether gcc accepts -g... yes checking for gcc option to accept ANSI C... none needed checking for style of include used by make... GNU checking dependency style of gcc... gcc3 checking whether gcc and cc understand -c and -o together... yes checking build system type... i686-pc-linux-gnu checking host system type... i686-pc-linux-gnu checking for pkg-config... /usr/bin/pkg-config With pthreads Store modules built: aufs diskd ufs null Removal policies built: lru ICMP enabled Delay pools enabled Web Cache Coordination V1 Protocol disabled SNMP monitoring enabled Forcing poll() to be enabled Disabling Ident Lookups Auth scheme modules built: ntlm basic ERROR: Basic auth helper winbind does not exists ************* My winbind is perfectly running as a daemon . My winbind version is 3.0.21b-2 . I do not know where i have gone wrong in both the errors while squid installation . to summarize the error is have , 1) wbinfo -g - Error looking up groups 2) ./configure <with mentioned options> erroring out because ERROR: Basic auth helper winbind does not exists Could any one please help me ! I read many docs regarding Squid +NTLM setup and FAQ's and help blogs ! |
![]() |
| Thread Tools | |
| Display Modes | |
|
|