OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [suse-security] squid and active directory again ... squid doesn't get UserNames (solved)

From: Markus Feilner (listsfeilner-it.net)
Date: Mon Jan 17 2005 - 06:58:41 CST

Am Montag, 17. Januar 2005 12:41 schrieb Markus Feilner:
> Hello List,
> I am somewhat stuck here...
> I have successfully intregrated my linux box into the active
> directory domain and I can access the proxy squid on it perfectly.
> Now I want to combine the two services, like I did several times
> before, with no problem. [A perl skript is called which checks
> whether the user is in an active directory group which is allowed to
> acess the internet.]
> But this is the first time with suse 9.2, and now i run into
> problems: I get FATAL errors in my squid cache.log file.
> ------------------------
> FATAL: authenticateNTLMHandleReply: called with no result string
> Squid Cache (Version 2.5.STABLE6): Terminated abnormally.
> ------------------------------
> Normally, the browser should hand over the User name to squid, but it
> doesn't - see my access.log:
> ---------------------
> 1105959574.911 4 192.194.146.14 TCP_DENIED/407 1716 GET
> http://www.google.de/ - NONE/- text/html
> 1105959618.610 4 192.194.146.14 TCP_DENIED/407 1716 GET
> http://www.google.de/ - NONE/- text/html
> 1105960427.520 5 192.194.146.14 TCP_DENIED/407 1716 GET
> http://www.google.de/ - NONE/- text/html
> ---------------------
> here the log from a working system:
> --------------------
> 1105961962.811 162 192.16.110.16 TCP_MISS/304 217 GET
> http://www.n-tv.de/images/200501/5475522__.jpg domain\username
> DIRECT/217.27.2.150 -
> --------------------
> Can u help me?
> Has anybody experienced something similar?
> Does the SuSE Squid support NTLM ?
> I hope...
> ;-)
Ok, I found sth. similar in the archive which helped me!
I works now perfectly.
The link is:
http://www.squid-cache.org/mail-archive/squid-users/200406/0338.html
follow the thread...
> --
> Mit freundlichen Grüßen
> Markus Feilner
> ---------------------------
> Bitte beachten Sie unsere neuen Adressdaten! Vielen Dank.
> ---------------------------
> Feilner IT Linux & GIS
> Linux Solutions, Training, Seminare und Workshops - auch Inhouse
> Beraiterweg 4 93047 Regensburg
> fon +49 941 9465243 fax +49 941 9465244 mobil + +49 170 3027092
> mail mfeilnerfeilner-it.net web http://www.feilner-it.net

--
Mit freundlichen Grüßen
Markus Feilner
---------------------------
Bitte beachten Sie unsere neuen Adressdaten! Vielen Dank.
---------------------------
Feilner IT Linux & GIS
Linux Solutions, Training, Seminare und Workshops - auch Inhouse
Beraiterweg 4 93047 Regensburg
fon +49 941 9465243 fax +49 941 9465244 mobil + +49 170 3027092
mail mfeilnerfeilner-it.net web http://www.feilner-it.net

--
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-helpsuse.com
Security-related bug reports go to securitysuse.de, not here