LinuxForum.Fans
Тема

Авторизация пользователей squid в домене

Автор: optiqus 1 сообщений 2133 просмотров
#348004

Пытался сделать Подобную вещь по инструкции
http://www.lissyara.su/articles/freebsd/programms/squid+ad/
Но

text
root@proxy:/home/localadmin# wbinfo -g

(ПУСТО)

text
root@proxy:/home/localadmin# wbinfo -u
PROXY+nobody
PROXY+localadmin

Как сделать так, чтобы отображались списки пользователей и групп домена? Samba 2:3.5.6~dfsg-3squeeze10
Что я не так делаю?
hosts.conf:

text
127.0.0.1       localhost
127.0.1.1       localhost
192.168.24.98   proxy.rosprod.local
# The following lines are desirable for IPv6 capable hosts
::1     ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters

192.168.27.196  dc1.rosprod.local

smb.conf:

text
[global]
        log file = /var/log/samba/%m.%U.log
        display charset = koi8-r
        idmap gid = 10000-20000
        auth methods = winbind
        winbind trusted domains only = yes
        winbind use default domain = yes
        realm = ROSPROD.LOCAL
        template shell = /bin/sh
        netbios name = proxy
        server string = Proxy server of rosprod.local
        idmap uid = 10000-200000
        idmap gid = 10000-200000
password server = DC1.ROSPROD.LOCAL
        dos charset = 866
        template homedir = /usr/home/%D/%U
        workgroup = ROSPROD
        winbind refresh tickets = Yes
        winbind separator = +
        winbind use default domain = yes
        winbind uid = 10000-15000
        winbind gid = 10000-15000
        winbind enum users = yes
        winbind enum groups = yes
        security = ADS
        unix charset = koi8-r
        max log size = 50000
        security = ads
#       log level = 10
        # for mail
        # added by lissyara 2007-06-21 in 10:36
        #magic script = /root/scripts/create_user_dir.sh %U
        lanman auth = No
        ntlm auth = No
        #client ntlmv2 auth = Yes
        #client lanman auth = No
        client plaintext auth = No
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
[printers]
        comment = All Printers
        path = /var/spool/samba
        printable = Yes
        browseable = No
        use client driver = yes
        public = No

Выводы команд:

text
wbinfo -K dpolonsky%pass
plaintext kerberos password authentication for [dpolonsky%pass] succeeded (requesting cctype: FILE)
credentials were put in: FILE:/tmp/krb5cc_0
root@proxy:/home/localadmin# wbinfo -u
PROXY+nobody
PROXY+localadmin

root@proxy:/home/localadmin# id rosprod.local\\dpolonsky id: rosprod.local\dpolonsky: Такого пользователя нет

root@proxy:/home/localadmin# wbinfo -g

root@proxy:/home/localadmin# wbinfo -u PROXY+nobody PROXY+localadmin

root@proxy:/home/localadmin# nslookup proxy.rosprod.local Server: 192.168.27.196 Address: 192.168.27.196#53

Name: proxy.rosprod.local Address: 192.168.24.98

root@proxy:/home/localadmin# net join -U admin Enter admin's password: Using short domain name -- ROSPROD Joined 'PROXY' to realm 'rosprod.local'

root@proxy:/home/localadmin# net ads info LDAP server: 192.168.27.196 LDAP server name: DC1.rosprod.local Realm: ROSPROD.LOCAL Bind Path: dc=ROSPROD,dc=LOCAL LDAP port: 389 Server time: Птн, 08 Ноя 2013 12:57:49 MSK KDC server: 192.168.27.196 Server time offset: 19

root@proxy:/home/localadmin# wbinfo -D rosprod.local Name              : ROSPROD Alt_Name          : rosprod.local SID               : S-1-5-21-2976686254-3353904874-3420671461 Active Directory  : Yes Native            : Yes Primary           : Yes [/quote] Информация о системе: [quote]lsb_release -a No LSB modules are available. Distributor ID: Debian Description: Debian GNU/Linux 6.0.8 (squeeze) Release: 6.0.8 Codename: squeeze

uname -a Linux proxy.rosprod.local 2.6.32-5-amd64 #1 SMP Mon Sep 23 22:14:43 UTC 2013 x86_64 GNU/Linux

Войдите или зарегистрируйтесь, чтобы ответить.