Использую модуль squid_ldap_auth для basic-авторизации в squid (2.6 stable14).
Как только подключаю этот модуль к ntlm-авторизации, squid (при вводе пользователя\пароля в браузере) пишет в cache.лог:
Код:
/var/log/squid # cat cache.log
2008/03/27 16:24:24| storeDirWriteCleanLogs: Starting...
2008/03/27 16:24:24| WARNING: Closing open FD 30
2008/03/27 16:24:24| commSetEvents: epoll_ctl(EPOLL_CTL_DEL): failed on fd=30: (1) Operation not permitted
2008/03/27 16:24:24| Finished. Wrote 340 entries.
2008/03/27 16:24:24| Took 0.0 seconds (538827.3 entries/sec).
FATAL: authenticateNTLMHandleReply: *** Unsupported helper response ***, 'ERR Success'
Squid Cache (Version 2.6.STABLE14): Terminated abnormally.
(squid)[0x800ae025]
(squid)(fatal+0x2b)[0x800ae51b]
(squid)(fatalf+0x56)[0x800ae936]
(squid)[0x800dbf1e]
(squid)[0x8006118f]
(squid)(comm_select+0x5ae)[0x8004587e]
(squid)(main+0x888)[0x8007a658]
/lib/libc.so.6(__libc_start_main+0xe0)[0xb7c80fe0]
(squid)[0x80015a51]
CPU Usage: 0.060 seconds = 0.032 user + 0.028 sys
Maximum Resident Size: 0 KB
Page faults with physical i/o: 0
Memory usage for squid via mallinfo():
total space in arena: 2516 KB
Ordinary blocks: 2387 KB 3 blks
Small blocks: 0 KB 0 blks
Holding blocks: 1208 KB 2 blks
Free Small blocks: 0 KB
Free Ordinary blocks: 128 KB
Total in use: 3595 KB 97%
Total free: 128 KB 3%
2008/03/27 16:24:28| Starting Squid Cache version 2.6.STABLE14 for i686-pc-linux-gnu...
2008/03/27 16:24:28| Process ID 10815
2008/03/27 16:24:28| With 4096 file descriptors available
2008/03/27 16:24:28| Using epoll for the IO loop
2008/03/27 16:24:28| DNS Socket created at 0.0.0.0, port 32773, FD 6
2008/03/27 16:24:28| Adding domain bsuir.by from /etc/resolv.conf
2008/03/27 16:24:28| Adding nameserver 192.168.251.3 from /etc/resolv.conf
2008/03/27 16:24:28| Adding nameserver 192.168.251.2 from /etc/resolv.conf
2008/03/27 16:24:28| helperStatefulOpenServers: Starting 5 'squid_ldap_auth' processes
2008/03/27 16:24:28| helperOpenServers: Starting 5 'squid_ldap_auth' processes
2008/03/27 16:24:28| helperOpenServers: Starting 5 'squid_ldap_group' processes
2008/03/27 16:24:28| User-Agent logging is disabled.
2008/03/27 16:24:28| Referer logging is disabled.
2008/03/27 16:24:28| Unlinkd pipe opened on FD 26
2008/03/27 16:24:28| Swap maxSize 16777216 KB, estimated 1290555 objects
2008/03/27 16:24:28| Target number of buckets: 64527
2008/03/27 16:24:28| Using 65536 Store buckets
2008/03/27 16:24:28| Max Mem size: 2097152 KB
2008/03/27 16:24:28| Max Swap size: 16777216 KB
2008/03/27 16:24:28| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2008/03/27 16:24:28| Rebuilding storage in /var/cache/squid (CLEAN)
2008/03/27 16:24:28| Using Least Load store dir selection
2008/03/27 16:24:28| Set Current Directory to /var/cache/squid
2008/03/27 16:24:28| Loaded Icons.
2008/03/27 16:24:28| Accepting proxy HTTP connections at 172.17.83.20, port 8080, FD 30.
2008/03/27 16:24:28| HTCP Disabled.
2008/03/27 16:24:28| Accepting SNMP messages on port 3401, FD 31.
2008/03/27 16:24:28| WCCP Disabled.
2008/03/27 16:24:28| Pinger socket opened on FD 32
2008/03/27 16:24:28| Configuring Parent 192.168.251.1/8080/0
2008/03/27 16:24:28| Ready to serve requests.
2008/03/27 16:24:28| Done reading /var/cache/squid swaplog (340 entries)
2008/03/27 16:24:28| Finished rebuilding storage from disk.
2008/03/27 16:24:28| 340 Entries scanned
2008/03/27 16:24:28| 0 Invalid entries.
2008/03/27 16:24:28| 0 With invalid flags.
2008/03/27 16:24:28| 340 Objects loaded.
2008/03/27 16:24:28| 0 Objects expired.
2008/03/27 16:24:28| 0 Objects cancelled.
2008/03/27 16:24:28| 0 Duplicate URLs purged.
2008/03/27 16:24:28| 0 Swapfile clashes avoided.
2008/03/27 16:24:28| Took 0.3 seconds (1129.7 objects/sec).
2008/03/27 16:24:28| Beginning Validation Procedure
2008/03/27 16:24:28| Completed Validation Procedure
2008/03/27 16:24:28| Validated 340 Entries
2008/03/27 16:24:28| store_swap_size = 2616k
2008/03/27 16:24:29| storeLateRelease: released 0 objects
2008/03/27 16:24:48| icmpSend: send: (111) Connection refused
2008/03/27 16:24:48| Closing Pinger socket on FD 32
В чем может быть проблема? То ли squid_ldap_auth не поддерживает ntlm-авторизацию, то ли сам установленный squid ее не поддерживает? Но по команде squid -v показывает что squid установлен с поддержкой ntlm?