Autenticare squid su Active Directory

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

Autenticare squid su Active Directory

Luca Dell'Oca
Ciao a tutti,
premetto che ho pochissima (per non dire nulla...) esperienza su squid :-))

Vorrei autenticare user e password degli utenti di una rete basata su Active Directory (windows Server 2003) in modo da assegnare specifiche ACL di squid a ogni utente. Non ho necessità di leggere gruppi o altro, solo l'utente...

Ho trovato in rete questo tutorial:
https://tiifp.org/quentin/squid.html

e lo sto provando su una macchina 4.2

LA configurazione di kerberos non mi ha dato problemi. Ho scaricato poi la patch
https://www.tiifp.org/quentin/samba_winbind.patch

come indicato per i sistemi più nuovi del 4.0 -current. Ho patchato il makefile di samba, ma quando lancio l'installazione ottengo questo errore:

# env FLAVOR=winbind make install
"Makefile", line 107: Need an operator
Fatal errors encountered -- cannot continue

Quel che vi chiedo è: sto seguendo la giusta strada? Esistono altre alternative? Ho trovato molti tutorial in giro ma tutti per linux.....

Grazie mille a tutti :-)))

Ciao, Luca.
________________________________________________________
http://www.sikurezza.org - Italian Security Mailing List
Reply | Threaded
Open this post in threaded view
|

Re: Autenticare squid su Active Directory

Sandro guly Zaccarini
On Wed, Jan 30, 2008 at 02:36:57PM +0100, Luca Dell'Oca wrote:
> Ciao a tutti,
> # env FLAVOR=winbind make install
> "Makefile", line 107: Need an operator
> Fatal errors encountered -- cannot continue
>

era utile incollare anche tipo dalla riga 100 alla 120, ma in linea di
massima se apri il makefile vedi ad occhio dov'e' l'errore.

sz

________________________________________________________
http://www.sikurezza.org - Italian Security Mailing List
Reply | Threaded
Open this post in threaded view
|

R: Autenticare squid su Active Directory

Luca Dell'Oca
> > Ciao a tutti,
> > # env FLAVOR=winbind make install
> > "Makefile", line 107: Need an operator Fatal errors encountered --
> > cannot continue
> >
>
> era utile incollare anche tipo dalla riga 100 alla 120, ma in
> linea di massima se apri il makefile vedi ad occhio dov'e' l'errore.
>
> sz

Ciao,
sotto qua c'è il makefile completo, una volta che è stato patchato. La riga 107 è "%%winbind%%" ma non sapendone nulla di programmazione non capisco quale sia il problema. Se qualcuno può darmi una dritta...

Grazie, Ciao.


 

# $OpenBSD: Makefile,v 1.85 2007/07/02 21:56:57 mbalmer Exp $

COMMENT-main= "SMB and CIFS client and server for UNIX"
COMMENT-docs= "documentation and examples for samba"

DISTNAME= samba-3.0.25b
PKGNAME-main= ${DISTNAME}
FULLPKGNAME-docs= ${DISTNAME:S/-/-docs-/}
SHARED_LIBS= smbclient 1.0 \
                        msrpc 1.0

CATEGORIES= net

HOMEPAGE= http://www.samba.org/

MAINTAINER= Marc Balmer <[hidden email]>

# GPL
PERMIT_PACKAGE_CDROM= Yes
PERMIT_PACKAGE_FTP= Yes
PERMIT_DISTFILES_CDROM= Yes
PERMIT_DISTFILES_FTP= Yes

WANTLIB= c ncurses readline

MASTER_SITES= http://download.samba.org/samba/ftp/ \
                http://us2.samba.org/samba/ftp/ \
                http://us2.samba.org/samba/ftp/old-versions/

MODULES= converters/libiconv

LIB_DEPENDS= popt::devel/popt

MAKE_FLAGS= PASSWD_PROGRAM="/usr/bin/passwd" \
                LIBsmbclient_VERSION=${LIBsmbclient_VERSION} \
                LIBmsrpc_VERSION=${LIBmsrpc_VERSION}
FAKE_FLAGS= DESTDIR="${DESTDIR}" \
                LIBsmbclient_VERSION=${LIBsmbclient_VERSION} \
                LIBmsrpc_VERSION=${LIBmsrpc_VERSION}

CONFDIR=        ${SYSCONFDIR}/samba
SAMBA_LOGDIR=   /var/log
SUBST_VARS=     CONFDIR LOCALBASE SYSCONFDIR

SEPARATE_BUILD= concurrent
CONFIGURE_STYLE= gnu
CONFIGURE_ARGS= --localstatedir="/var" \
                --sbindir="${PREFIX}/libexec" \
                --with-configdir="${CONFDIR}" \
                --with-libdir="${PREFIX}/lib/samba" \
                --with-lockdir="/var/spool/samba" \
                --with-piddir="/var/run" \
                --with-logfilebase="${SAMBA_LOGDIR}" \
                --with-privatedir="${CONFDIR}" \
                --with-libsmbclient \
                --with-swatdir="${PREFIX}/share/swat" \
                --with-ssl \
                --with-sslinc="/usr/include/ssl" \
                --with-ssllib="/usr/lib" \
                --with-syslog \
                --with-utmp

CONFIGURE_ENV= CPPFLAGS="-I${LOCALBASE}/include" \
                LDFLAGS="-L${LOCALBASE}/lib -Wl,--export-dynamic"

FLAVORS=        cups ldap winbind
FLAVOR?=

MULTI_PACKAGES= -main -docs

.if ${FLAVOR:L:Mcups}
CONFIGURE_ARGS+= --enable-cups
LIB_DEPENDS+= cups::print/cups
WANTLIB+= ssl crypto m pthread z
.else
CONFIGURE_ARGS+= --disable-cups
.endif

.if ${FLAVOR:L:Mldap}
CONFIGURE_ARGS+= --with-ldap --without-ads
LIB_DEPENDS+= ldap,lber::databases/openldap
BUILD_DEPENDS+= ::misc/libutf8
.else
CONFIGURE_ARGS+= --without-ldap --without-ads
.endif

PKG_ARCH-docs= *
LIB_DEPENDS-docs=
WANTLIB-docs=
RUN_DEPENDS-docs=

NO_REGRESS= Yes

WRKDIST= ${WRKDIR}/${DISTNAME}/source

SAMBA_DOCS=${WRKSRC}/../README \
        ${WRKSRC}/../docs/THANKS \
        ${WRKSRC}/../docs/history \
        ${WRKSRC}/../docs/registry/*.reg

SAMPLE_CONFIG= ${PREFIX}/share/examples/samba/smb.conf.default

.if ${FLAVOR:L:Mwinbind}
post-extract:
        @cp ${FILESDIR}/krb5-config ${WRKDIR}/bin
        @chmod a+x ${WRKDIR}/bin/krb5-config
%%winbind%%
.endif

pre-configure:
        @perl -pi -e 's,!!SYSCONFDIR!!,${SYSCONFDIR},g;' \
                -e 's,!!LOCALBASE!!,${LOCALBASE},g' \
                ${WRKSRC}/../docs/manpages/swat.8

post-install:
        ${INSTALL_DATA_DIR} ${PREFIX}/share/doc/samba/pdf
        ${INSTALL_DATA_DIR} ${PREFIX}/share/doc/samba/htmldocs
        ${INSTALL_DATA_DIR} ${PREFIX}/share/examples/samba
        @cp -R ${WRKSRC}/../examples/* ${PREFIX}/share/examples/samba
        @chown -R ${SHAREOWN}:${SHAREGRP} ${PREFIX}/share/examples/samba
        ${INSTALL_DATA} ${FILESDIR}/README.OpenBSD ${PREFIX}/share/doc/samba
        @for i in ${SAMBA_DOCS}; do \
         ${INSTALL_DATA} $$i ${PREFIX}/share/doc/samba ; \
        done
        @for i in ${WRKSRC}/../docs/*.pdf ; do \
         ${INSTALL_DATA} $$i ${PREFIX}/share/doc/samba/pdf ; \
        done
        @for i in ${WRKSRC}/../docs/htmldocs/* ; do \
         if [ -f $$i ]; then \
          ${INSTALL_DATA} $$i ${PREFIX}/share/doc/samba/htmldocs ;\
         fi \
        done
        @sed -e 's:/usr/spool/samba:/var/spool/samba:g' \
         -e 's:/usr/local/samba/var/log:${SAMBA_LOGDIR}/smbd:g' \
         ${WRKSRC}/../examples/smb.conf.default > ${SAMPLE_CONFIG}
        ${INSTALL_SCRIPT} ${WRKSRC}/script/mksmbpasswd.sh \
         ${PREFIX}/bin/mksmbpasswd
        @chown ${BINOWN}:${BINGRP} ${PREFIX}/bin/smbpasswd
        @ln -s samba/libsmbclient.so.${LIBsmbclient_VERSION} \
         ${PREFIX}/lib/libsmbclient.so.${LIBsmbclient_VERSION}
        @ln -s samba/libmsrpc.so.${LIBmsrpc_VERSION} \
         ${PREFIX}/lib/libmsrpc.so.${LIBmsrpc_VERSION}
        @rmdir ${WRKINST}${SYSCONFDIR}/samba
        @rmdir ${WRKINST}/var/spool/samba

.include <bsd.port.mk>
________________________________________________________
http://www.sikurezza.org - Italian Security Mailing List