[squid-users] You MUST specify at least one Domain Controller.You can use either \ or / as separator between the domain name

Amos Jeffries squid3 at treenet.co.nz
Fri Dec 19 13:01:15 UTC 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 20/12/2014 11:25 a.m., Ahmed Allzaeem wrote:
> Hi guys im trygint to use Kerberos authentication between squid &
> AD.
> 
> I have configured ntp  , dns , winbind , samba and also joinf the
> squid to the AD domina
> 
> 
> 
> Now the issue I have is running squid
> 
> I added the following helpers below :
> 
> 
> 
> 
> #Kerberos config for squid
> 
> auth_param ntlm program /usr/lib/squid/ntlm_smb_lm_auth

This is *not* the Samba NTLM helper. This helper does not even perform
NTLMv1. It performs LM protocol (used for authenticating against
Windows 3.1 servers) using HTTP "NTLM" auth scheme headers.


> --helper-protocol=squid-2.5-basic

This is a command line parameter for the Samba ntlm_auth helper.

The samba helper still uses the name ntlm_auth. It is probably located
in /usr/bin/ or /usr/local/bin/.

Amos
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (MingW32)

iQEcBAEBAgAGBQJUlCGbAAoJELJo5wb/XPRj1awIAI0+646wnDRvjed2bSw7Cote
9tIBA0j7VLF0wcWx1HLpViLhatq2ep7S/isz0pkGwUgcX3w20f1sXfuM3MbdGYH6
Gh3lRCsOaXqRhIQY80pNjfQKs75oGn8Zelqlm3DmJjxCcFLOtj/5Du1CASquajJ5
26T11+HZ9EJ4rwG+LXN3nAXRjcoEGdIt09VmiCLGukHN1FvkFo7Ms0CR0i7urTYD
IQUI4uoObQJVq+vY9gJyzhyEdWJqvK9Q1fM7fUptCcaIGMhkM70Ue8RLu4YUWH82
GzXTf+Hdt7zfnyq0ALusvGOiXyQ3UFcYRfijBuhfEAjPd2Vr2F/7oCoGueieFb8=
=48pC
-----END PGP SIGNATURE-----


More information about the squid-users mailing list