[squid-users] error windbind

Posta Esterna angelo.bruno at vigilfuoco.it
Thu Jul 30 14:49:02 UTC 2015


Thanx..

I don't understand a something...

Where do i need to find Samba? On the Proxy or on the AD Server?

I don't think i have to create a Samba server on the Proxy... is it true?

So how can i tell Squid to connect to the right Samba Server?




Il 24/07/2015 15.50, Amos Jeffries ha scritto:
> On 24/07/2015 11:24 p.m., Posta Esterna wrote:
>> Thanx Amos,
>> Squid was the first problem... using /usr/lib/squid/ntlm_auth instead of
>> /usr/bin/ntlm_auth
>>
>> About upgrading unfortunatelly i have only an old DELL P4 (10 years
>> old?) with 1GB of RAM... and for my fortune this is only the PROXY n°2
>> (the backup).... The PROXY n°1 goes well with a version of KERIO Control...
>>
> FWIW, I run a few customer sites with older hardware than that. Of
> course those dont service much traffic. But Squid-3.5 with small cache
> is not even taxing the hardware.
>
> Kind of my specialty hobby now. Running Squid on recycled and low-spec
> hardware :-)
>
>
>> I've still have problems....
>> it says:
>> ....
>> [2015/07/24 12:06:41, 0] utils/ntlm_auth.c:get_windbind_domain(146)
>>    could not obtain windbind domain name!
>> .....
>>
> That seems to be an internal winbind / Samba problem.
>
> Once you have the right helper Squids part is reduced to ferrying the
> HTTP Auth header contents to and from it.
>
>
> PS. Unless you are fighting with similarly ancient Windows 2K boxen I
> suggest looking into Negotiate/Kerberos (squid_kerb_auth etc should work
> okay with 2.6) instead of, or as well as, NTLM. Sometimes its a bit more
> painful to setup, but much more resource efficient _and_ secure.
>
> Amos
>
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users

-- 
VCTI Ing. Angelo Bruno



More information about the squid-users mailing list