Hi,
I set up Squid 4.6 on Debian 10 and I'm having problems with browser
authentication on a Windows station.
I did the tests on the command line and apparently it's OK.
root@proxy:/etc/squid/acls# /usr/bin/ntlm_auth
--helper-protocol=squid-2.5-basic
Registered MSG_REQ_POOL_USAGE
Registered MSG_
I have migrated of Samba 4.2.1 to Samba 4.6.3 as DC, but now my Squid
authentication doesn't work.
In samba 4.2.1 is working properly.
This is my authentication block:
auth_param basic program /usr/lib/squid3/basic_ldap_auth -R -b
DC=empresa,DC=com,DC=br -D CN=proxy,CN=Users,DC=empresa,DC=com,D
strange behavior?
Sorry, but I'm still learning about Squid!
Regards,
Márcio
2016-09-05 1:17 GMT-03:00 Amos Jeffries :
> On 5/09/2016 10:41 a.m., Marcio Demetrio Bacci wrote:
> > I have used debug_options 11,2 in squid.conf file. After I have following
> > re
Hi
I have tried to use only Kerberos authentication, but didn't work! I have
already used the 3 way below:
1) auth_param negotiate program /usr/lib/squid3/negotiate_kerberos_auth
2) auth_param negotiate program /usr/lib/squid3/negotiate_kerberos_auth -s
GSS_C_NO_NAME -i
3) auth_param negotiate pr
8
Via: 1.1 proxy.cms.ensino.br (squid/3.4.8)
Connection: keep-alive
--
Sorry, but I didn't discover the problem!
Anybody have an idea?
Regards,
Márcio
2016-09-02 11:10 GMT-03:00 Amos Jeffries :
> On 2/09/2016 3:21 p.m., Marcio Demetrio Bacci wrote:
> > In my
In my Windows workstations the authentication works correctly, however in
Ubuntu 14.04 the user and password are asked twice.
I am using the basic_ncsa_auth with Squid 3.4.8
Is there any setting that I do in Squid?
Bellow is my squid.conf
### Configuracoes Basicas
http_port 3128
#debug_options
os server (e.g.
> AD) as user first.
>
> Regards
> Markus
>
>
> "Marcio Demetrio Bacci" wrote in message news:CA+
> 0tdyqeat4l5ko4zrjnj1aue64my2re7z95kfdqw7y8sv_...@mail.gmail.com...
> I have trouble to authenticate Squid3 with kerberos in Samba4 domain. I'm
> u
I have trouble to authenticate Squid3 with kerberos in Samba4 domain. I'm
using CentOS 7 and Squid 3.3.8 (yum install squid)
When I type the bellow command in terminal:
/usr/lib64/squid/negotiate_kerberos_auth -d -i -s HTTP/
proxy.cms.ensino...@cms.ensino.br
john xyz@12345
I have the following er
Hi
I have many dubt about kerberos authentication in the Squid 3 (3.4.8) on
Debian 8. I'm using Samba 4 (4.2.1) as DC.
If I to join Squid Server in the Domain (net ads join) I don't need to
execute the command-line msktutil as bellow ?
msktutil -c -b "CN=COMPUTERS" -s HTTP/squidproxy.example.loc
> If needed install ntp on the proxy and point the server to the ad dc.
>
>
>
> And post what you now have in krb5.conf
>
>
>
> These are the most common pitfalls, i’ll see what i can do to help out.
>
>
>
>
>
> Greetz,
>
>
>
> Louis
>
My Kerberos Authentication doesn't work. This is very hard!
My Squid3 is join in the Domain
kinit and klist are ok
wbinfo -g and wbinfo -u are ok too.
I have created the squid3 file in /etc/default with the following content:
KRB5_KTNAME=/etc/squid3/HTTP.keytab
export KRB5_KTNAME
I have two keyt
I have problems with Kerberos Autenthication in Squid3 on Debian 8 and
Samba4 DC
My Squid version is: 3.4.8
My Kerberos Autenthication doesn't work.
PROCEDURES PERFORMED
INSTALL OF SAMBA4 AND WINBIND OF DEBIAN BACKPORTS
apt-get -t jessie-backports install samba samba-doc winbind
KERBEROS TEST:
I have the following questions to use Kerberos authentication in squid3:
You must create the krb5.keytab file when using Samba 4 as DC? If positive,
how to create it?
Kerberos authentication (squid_kerb_auth) works for both Windows and Linux?
In this type of authentication the user will not need
In my network I have Windows and Linux computers.
I tried the NTLM authentication method, but is experiencing many problems.
So I wonder if the authentication method "squid_ldap_auth" is designed for
Windows and Linux stations?
Regards,
Márcio
___
squid
ess-net
#negando o acesso para todos que nao estiverem nas regras anteriores
http_access deny all
### Errors
error_directory /usr/share/squid3/errors/en
coredump_dir /var/spool/squid3
Regards,
Márcio
2016-08-08 18:22 GMT-03:00 Marcio Demetrio Bacci :
> I have a problem with Squid 3 on Debia
I have a problem with Squid 3 on Debian 8.2
When the users open your browsers, the squid asks the name and password.
Until this moment is OK, but if the users inform only the password (field
"name" not filled - in blank), the navigation is permitted.
The following is my squid.conf file:
http_por
Hi,
What is the best way to free access to a site without going through of the
Squid Proxy?
There is a bank site that has problem when accessed through a proxy.
Could anyone give me an example?
Thanks,
Márcio
___
squid-users mailing list
squid-users@
Hi,
My problem with Squid 3.4.8 is the following :
The ext_ldap_group_acl locates the user group of a user, but even if find
the first group (eg "administrators") in which the user is a member
continue to search for all groups that the user is a member, so
authenticate the user only in his last g
I'm trying authenticate Squid (3.4.8) in the Samba 4.
The first block is working perfectly.
auth_param basic program /usr/lib/squid3/basic_ldap_auth -R -b \
DC=empresa,DC=com,DC=br -D CN=proxy,CN=Users,DC=empresa,DC=com,DC=br \
-w 12345 -h 192.168.0.25 -p 389 -s sub -v 3 -f "sAMAccountName=%s"
au
2-08 16:16 GMT-02:00 Kinkie :
> On Tue, Dec 8, 2015 at 6:14 PM, Marcio Demetrio Bacci
> wrote:
> > Hi
> >
> > In the Squid Server, I want only basic authentication.
> >
> > The command:
> >
> > /usr/lib/squid3/basic_ldap_auth \
> >-b cn=users,
uot;Success" to authenticate only the users in Organization Unity (OU)
"Users", but in my domain I have many OU that has users as TI, Financial,
Sales..
How I get authenticate the users in others OU?
Thanks,
Márcio
2015-12-08 6:23 GMT-02:00 Amos Jeffries :
> On 8/12/2015 4:00
=br
uidNumber: 10558
gidNumber: 30037
Regards,
Márcio
2015-12-07 22:10 GMT-02:00 Amos Jeffries :
> On 8/12/2015 7:47 a.m., Marcio Demetrio Bacci wrote:
> > My LDAP Authentication do not work in Squid. I have already saw many
> > tutorials, but nothing solve this problem.
> >
My LDAP Authentication do not work in Squid. I have already saw many
tutorials, but nothing solve this problem.
I have installed Squid 3.4 on Debian 8. My DC is a* Samba 4.2.*
In /var/log/squid3/cache.log appear the message:
*squid_ldap_auth: WARNING, could not bind to binddn 'Invalid credentials'*
My Linux Stations are in Domain, but when a user open your bowser, the user
and password are asked. Sometimes, during the navegation, the user and
password are asked again.
This way, I wish that the user session to be valid per 4 hours. How do I
set it?
Follow the authentication portion of the m
Hi,
I have the following problem with squid3 (3.1) on samba4:
In /var/log/squid3/cache.log appear this information:
2015/11/29 23:53:53| storeLateRelease: released 0 objects
failed to call wbcLookupName: WBC_ERR_DOMAIN_NOT_FOUND
Could not lookup name domain^users
failed to call wbcStringToSid:
Hi,
My problem is as follows:
The Windows stations in the domain are automatically authenticated on the
proxy, though the Linux stations ask for the password twice, even if the
password is entered correctly the first time.
Does somebody has an idea?
Follow my squid.conf file
### Configuracoe
I have configured a Squid 3 proxy server on Debian 7, integrated with Samba
4 domain.
For windows machines integrated in the domain, Squid uses the network user
credential to allow navigation.
On Linux stations, even in the domain, when is opened the browser, the
user's password is requested. Whe
Hi,
I need free access to wattsapp by squid. The ports (5222, 5223, 5228, 4244
and 5242) in squid.conf already are with allowed access, but don't work.
In my firewall (pfSense) squid has full allowed access.
Does anyone have any idea what can be?
Take my squid.conf
acl SSL_ports port 22443563 #
Hi,
I'm having the following problem with my squid3:
When I set the browser: "Auto-Detect proxy settings for this network" does
not work.
When we report: "Manual proxy configuration" works.
Follow my configuration files:
*/var/www/wpad.dat*
function FindProxyForURL(url, host) {
if (shExpMa
When the user logs on to Windows domain and opens the browser can
navigate because
it is already authenticated. When the user is not logged on the domain opens
a popup asking for username and password. When informed user and password
authentication correct he asks again (twice) and after work. If t
Hi,
I'm trying to authenticate the squid3 in Samba4. The part of Samba 4
authentication is OK, because with the commands wbinfo -i, getent passwd,
klist, kinit is all right and I can get the expected results. Also on the
command line can authenticate users (/usr /bin/ntlm_auth --username =
Domai
31 matches
Mail list logo
