Squid Ubuntu 8.04 LTS

[monkeyx]

We needs to rebuild our aging squid server and came accross this alternate way to bind with AD

HOWTO: Active Directory authentication in Ubuntu 8.04 and 8.10 The eternal fight between admins and computers

Anyone tried this?

[dhicks]

Anyone tried this?

Nope, but I'm planning to now!

--
David Hicks

[monkeyx]

Not sure whether to try it. Our existing server uses samba and winbind and has been rock solid. Main reason for upgrading is make an openVZ template machine on a newer version of Ubuntu.

It looks like openwise may be less robust and article does not say how well it scales.

Any other views on this?

[ind1ekid]

I remember seeing this a while back on the ubuntu help page;
https://help.ubuntu.com/8.04/serverg...wise-open.html
I cant remember what put me off going this route, but i didnt use it.

I setup a new squid box yesterday on 9.04 using the trusty winbind/samba method, and it takes no time at all, plus like you say its rock solid!

[monkeyx]

Is is still necessary to create an init.d script to work around the winbindd AD logging issues? We will be using 8.04 LTS rather 9.04 any major differences for squid between 8.04 and 9.04?

Tim

[ind1ekid]

Is is still necessary to create an init.d script to work around the winbindd AD logging issues? We will be using 8.04 LTS rather 9.04 any major differences for squid between 8.04 and 9.04?

Tim

Winbind/AD logging issue? Ive not come across that one, i can check into it if you can point me in the right direction though As for major differences, there doesnt seem to be any noticable ones, ive only had it running since the back of last week but all is well up to now! Ive still got the old box set up still just in case!!

[monkeyx]

This is a very dry description of what to do as running around a bit today! :-

This fixes a permissions issues wthat stops AD logging

chown root:proxy /var/run/samba/winbindd_privileged
chmod 750 /var/run/samba/winbindd_privileged

To fix it on a reboot
vi /etc/init.d/winbind_priv.sh

#!/bin/sh
#set -x
WINBINDD_PRIVILEGED=/var/run/samba/winbindd_privileged

chmodgrp() {
    chgrp proxy $WINBINDD_PRIVILEGED || return 1
}

case "$1" in
    start)
        chmodgrp
        ;;
    restart|reload|force-reload)
        echo "Error: argument '$1' not supported" >&2
        exit 3
        ;;
    stop)
        ;;
    *)
        echo "Usage: $0 start|stop" >&2
        exit 3
        ;;
esac
#EOF

Then update the init system with
update-rc.d winbind_priv.sh start 21 2 3 4 5 .

So the answer is yes, still need to do this on latest LTS version of Ubuntu server.