SHOW:
|
|
- or go back to the newest paste.
| 1 | [root@proxy squid_kerb_ldap-1.2.2]# ./squid_kerb_ldap -d -g proxy_allow -D MYDOMAIN | |
| 2 | 2014/08/21 09:25:10| squid_kerb_ldap: Starting version 1.2.2 | |
| 3 | 2014/08/21 09:25:10| squid_kerb_ldap: Group list proxy_allow | |
| 4 | 2014/08/21 09:25:10| squid_kerb_ldap: Group proxy_allow Domain NULL | |
| 5 | 2014/08/21 09:25:10| squid_kerb_ldap: Netbios list NULL | |
| 6 | 2014/08/21 09:25:10| squid_kerb_ldap: No netbios names defined. | |
| 7 | 2014/08/21 09:25:10| squid_kerb_ldap: ldap server list NULL | |
| 8 | 2014/08/21 09:25:10| squid_kerb_ldap: No ldap servers defined. | |
| 9 | ||
| 10 | 2014/08/21 09:25:10| squid_kerb_ldap: Got User: set default domain: MYDOMAIN | |
| 11 | 2014/08/21 09:25:10| squid_kerb_ldap: Got User: Domain: MYDOMAIN | |
| 12 | 2014/08/21 09:25:10| squid_kerb_ldap: User domain loop: group@domain proxy_allow@NULL | |
| 13 | 2014/08/21 09:25:10| squid_kerb_ldap: Default domain loop: group@domain proxy_allow@NULL | |
| 14 | 2014/08/21 09:25:10| squid_kerb_ldap: Default group loop: group@domain proxy_allow@NULL | |
| 15 | 2014/08/21 09:25:10| squid_kerb_ldap: Found group@domain proxy_allow@NULL | |
| 16 | 2014/08/21 09:25:10| squid_kerb_ldap: Setup Kerberos credential cache | |
| 17 | 2014/08/21 09:25:10| squid_kerb_ldap: Get default keytab file name | |
| 18 | 2014/08/21 09:25:10| squid_kerb_ldap: Got default keytab file name /etc/squid/PROXY.keytab | |
| 19 | 2014/08/21 09:25:10| squid_kerb_ldap: Get principal name from keytab /etc/squid/PROXY.keytab | |
| 20 | 2014/08/21 09:25:10| squid_kerb_ldap: Keytab entry has realm name: MYDOMAIN.COM | |
| 21 | 2014/08/21 09:25:10| squid_kerb_ldap: Keytab entry has realm name: MYDOMAIN.COM | |
| 22 | 2014/08/21 09:25:10| squid_kerb_ldap: Keytab entry has realm name: MYDOMAIN.COM | |
| 23 | 2014/08/21 09:25:10| squid_kerb_ldap: Keytab entry has realm name: MYDOMAIN.COM | |
| 24 | 2014/08/21 09:25:10| squid_kerb_ldap: Keytab entry has realm name: MYDOMAIN.COM | |
| 25 | 2014/08/21 09:25:10| squid_kerb_ldap: Keytab entry has realm name: MYDOMAIN.COM | |
| 26 | 2014/08/21 09:25:10| squid_kerb_ldap: Keytab entry has realm name: MYDOMAIN.COM | |
| 27 | 2014/08/21 09:25:10| squid_kerb_ldap: Keytab entry has realm name: MYDOMAIN.COM | |
| 28 | 2014/08/21 09:25:10| squid_kerb_ldap: Keytab entry has realm name: MYDOMAIN.COM | |
| 29 | 2014/08/21 09:25:10| squid_kerb_ldap: Keytab entry has realm name: MYDOMAIN.COM | |
| 30 | 2014/08/21 09:25:10| squid_kerb_ldap: Keytab entry has realm name: MYDOMAIN.COM | |
| 31 | 2014/08/21 09:25:10| squid_kerb_ldap: Keytab entry has realm name: MYDOMAIN.COM | |
| 32 | 2014/08/21 09:25:10| squid_kerb_ldap: Keytab entry has realm name: MYDOMAIN.COM | |
| 33 | 2014/08/21 09:25:10| squid_kerb_ldap: Keytab entry has realm name: MYDOMAIN.COM | |
| 34 | 2014/08/21 09:25:10| squid_kerb_ldap: Keytab entry has realm name: MYDOMAIN.COM | |
| 35 | 2014/08/21 09:25:10| squid_kerb_ldap: Keytab entry has realm name: MYDOMAIN.COM | |
| 36 | 2014/08/21 09:25:10| squid_kerb_ldap: Keytab entry has realm name: MYDOMAIN.COM | |
| 37 | 2014/08/21 09:25:10| squid_kerb_ldap: Keytab entry has realm name: MYDOMAIN.COM | |
| 38 | 2014/08/21 09:25:10| squid_kerb_ldap: Set credential cache to MEMORY:squid_ldap_19550 | |
| 39 | 2014/08/21 09:25:10| squid_kerb_ldap: Did not find a principal in keytab for domain MYDOMAIN. | |
| 40 | 2014/08/21 09:25:10| squid_kerb_ldap: Try to get principal of trusted domain. | |
| 41 | 2014/08/21 09:25:10| squid_kerb_ldap: Keytab entry has principal: [email protected] | |
| 42 | 2014/08/21 09:25:10| squid_kerb_ldap: Error while initialising credentials from keytab : Preauthentication failed | |
| 43 | 2014/08/21 09:25:10| squid_kerb_ldap: Keytab entry has principal: [email protected] | |
| 44 | 2014/08/21 09:25:10| squid_kerb_ldap: Error while initialising credentials from keytab : Preauthentication failed | |
| 45 | 2014/08/21 09:25:10| squid_kerb_ldap: Keytab entry has principal: [email protected] | |
| 46 | 2014/08/21 09:25:10| squid_kerb_ldap: Error while initialising credentials from keytab : Preauthentication failed | |
| 47 | 2014/08/21 09:25:10| squid_kerb_ldap: Keytab entry has principal: host/[email protected] | |
| 48 | 2014/08/21 09:25:10| squid_kerb_ldap: Error while initialising credentials from keytab : Client not found in Kerberos database | |
| 49 | 2014/08/21 09:25:10| squid_kerb_ldap: Keytab entry has principal: host/[email protected] | |
| 50 | 2014/08/21 09:25:10| squid_kerb_ldap: Error while initialising credentials from keytab : Client not found in Kerberos database | |
| 51 | 2014/08/21 09:25:10| squid_kerb_ldap: Keytab entry has principal: host/[email protected] | |
| 52 | 2014/08/21 09:25:10| squid_kerb_ldap: Error while initialising credentials from keytab : Client not found in Kerberos database | |
| 53 | 2014/08/21 09:25:10| squid_kerb_ldap: Keytab entry has principal: HTTP/[email protected] | |
| 54 | 2014/08/21 09:25:10| squid_kerb_ldap: Found trusted principal name: HTTP/[email protected] | |
| 55 | 2014/08/21 09:25:10| squid_kerb_ldap: Got principal name HTTP/[email protected] | |
| 56 | 2014/08/21 09:25:10| squid_kerb_ldap: Stored credentials | |
| 57 | 2014/08/21 09:25:10| squid_kerb_ldap: Initialise ldap connection | |
| 58 | 2014/08/21 09:25:10| squid_kerb_ldap: Canonicalise ldap server name for domain MYDOMAIN | |
| 59 | 2014/08/21 09:25:10| squid_kerb_ldap: Resolved SRV _ldap._tcp.MYDOMAIN record to dc2.MYDOMAIN.COM | |
| 60 | 2014/08/21 09:25:10| squid_kerb_ldap: Resolved SRV _ldap._tcp.MYDOMAIN record to dc1.MYDOMAIN.COM | |
| 61 | 2014/08/21 09:25:10| squid_kerb_ldap: Resolved address 1 of MYDOMAIN to dc1.MYDOMAIN.COM | |
| 62 | 2014/08/21 09:25:10| squid_kerb_ldap: Resolved address 2 of MYDOMAIN to dc1.MYDOMAIN.COM | |
| 63 | 2014/08/21 09:25:10| squid_kerb_ldap: Resolved address 3 of MYDOMAIN to dc1.MYDOMAIN.COM | |
| 64 | 2014/08/21 09:25:10| squid_kerb_ldap: Resolved address 4 of MYDOMAIN to dc2.MYDOMAIN.COM | |
| 65 | 2014/08/21 09:25:10| squid_kerb_ldap: Resolved address 5 of MYDOMAIN to dc2.MYDOMAIN.COM | |
| 66 | 2014/08/21 09:25:10| squid_kerb_ldap: Resolved address 6 of MYDOMAIN to dc2.MYDOMAIN.COM | |
| 67 | 2014/08/21 09:25:10| squid_kerb_ldap: Adding MYDOMAIN to list | |
| 68 | 2014/08/21 09:25:10| squid_kerb_ldap: Sorted ldap server names for domain MYDOMAIN: | |
| 69 | 2014/08/21 09:25:10| squid_kerb_ldap: Host: dc1.MYDOMAIN.COM Port: 389 Priority: 0 Weight: 100 | |
| 70 | 2014/08/21 09:25:10| squid_kerb_ldap: Host: dc2.MYDOMAIN.COM Port: 389 Priority: 0 Weight: 100 | |
| 71 | 2014/08/21 09:25:10| squid_kerb_ldap: Host: MYDOMAIN Port: -1 Priority: -2 Weight: -2 | |
| 72 | 2014/08/21 09:25:10| squid_kerb_ldap: Setting up connection to ldap server dc1.MYDOMAIN.COM:389 | |
| 73 | 2014/08/21 09:25:10| squid_kerb_ldap: Bind to ldap server with SASL/GSSAPI | |
| 74 | 2014/08/21 09:25:10| squid_kerb_ldap: Successfully initialised connection to ldap server dc1.MYDOMAIN.COM:389 | |
| 75 | 2014/08/21 09:25:10| squid_kerb_ldap: Search ldap server with bind path "" and filter: (objectclass=*) | |
| 76 | 2014/08/21 09:25:10| squid_kerb_ldap: Search ldap entries for attribute : schemaNamingContext | |
| 77 | 2014/08/21 09:25:10| squid_kerb_ldap: 1 ldap entry found with attribute : schemaNamingContext | |
| 78 | 2014/08/21 09:25:10| squid_kerb_ldap: Search ldap server with bind path CN=Schema,CN=Configuration,DC=MYDOMAIN,DC=COM and filter: (ldapdisplayname=samaccountname) | |
| 79 | 2014/08/21 09:25:10| squid_kerb_ldap: Found 1 ldap entry | |
| 80 | 2014/08/21 09:25:10| squid_kerb_ldap: Determined ldap server as an Active Directory server | |
| 81 | - | 2014/08/21 09:25:10| squid_kerb_ldap: Search ldap server with bind path dc=MYDOMAIN and filter : (samaccountname=) |
| 81 | + | 2014/08/21 09:25:10| squid_kerb_ldap: Search ldap server with bind path dc=MYDOMAIN and filter : (samaccountname=MYUSER) |
| 82 | 2014/08/21 09:25:10| squid_kerb_ldap: Error searching ldap server: Referral | |
| 83 | - | 2014/08/21 09:25:10| squid_kerb_ldap: User is not member of group@domain proxy_allow@NULL |
| 83 | + | 2014/08/21 09:25:10| squid_kerb_ldap: User MYUSER is not member of group@domain proxy_allow@NULL |
| 84 | ERR | |
| 85 | 2014/08/21 09:25:10| squid_kerb_ldap: ERR |
