<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-ligatures:standardcontextual;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<style>
* {
box-sizing: border-box;
}
.row {
display: flex;
}
.column {
flex: 5.0%;
padding: 0px;
}
</style></head><body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Upgraded to Debian 11 and all that comes with that (updated all packages, squid, samba, winbindd, etc.) After upgrading I had no problems joining the windows domain, no issues with wbinfo -u or -g. In the squid logs I see the normal lines
appearing except there are no usernames associated with the requests, thus, they are all TCP_DENIED/407. No surprise there since the usernames aren’t coming through. When I look to the squid cache.log I see the following lines repeated over and over. My initial
thought is that this has something to do with samba or winbindd even though they are working…. The one odd thing I noticed is that on my older version of Debian, winbindd had two separate folders, /var/run/samba/winbindd_privileged and /var/lib/samba/winbindd_privileged.
Only the /var/lib/samba/winbindd_privileged folder contained the pipe though. After the upgrade I have /var/lib/samba/winbindd_privileged with a pipe present. There is no /var/run/samba/winbindd_privileged. However, there is a /var/run/samba/winbindd (this
also exists on the old system) folder that has a pipe. Is the winbindd_privileged folder with the pipe in /var/run/samba/winbindd_privileged/pipe necessary? How can I tell which one squid is actually trying to use? May have nothing to do with the errors I
am seeing but it does seem odd.<o:p></o:p></p>
<p class="MsoNormal">Any help would be greatly appreciated. Thanks!!<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Squid cache log entries:<o:p></o:p></p>
<p class="MsoNormal">ipcCreate: //usr/bin/ntlm_auth: (13) Permission denied<o:p></o:p></p>
<p class="MsoNormal">WARNING: ntlmauthenticator #Hlpr253452 exited<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Bobby<o:p></o:p></p>
</div>
<br><b><i></i></b>
<p style="color:black;"><b><i>
<table border="0" cellspacing="0" cellpadding="0"><tr><td><a href="http://www.pbandt.bank"><IMG border="0" src="cid:123042815052800576@us-mta-505.us.mimecast.lan" ></A></td></tr></table>
<font face="Times New Roman" size="2">
CONFIDENTIALITY NOTICE: The information contained in and attached to this email is intended only for the confidential use of the person or entity to which the email is addressed. This email and any attachments may contain privileged and confidential information. If you are not the intended recipient, you are notified that you received this email in error and that any reading, retention, use or distribution of this email and attachments is strictly prohibited. If you received this email in error, you are requested to immediately notify us by calling 888-728-3550 or by return email and immediately and permanently delete the email and any attachments. Thank you.
</font></i></b><i>
</i></p>
</body></html>