ind1ekid

You need to change the krb5.conf (realm/kdc/admin server) and smb.conf (realm/password server/workgroup) with the new domain info. Resolv.conf will need the dns servers/search domain changing too. Then you can re-add your server to AD. I may have missed something... but thats where you'd start. Squid shouldn't need reconfiguring iirc.

Squid 3.0 here running on CentOS 5, it connects to the embc who run squid and netsweeper.

Vote here for Proxy Switchy! extension if you use Chrome. Works a treat.

You don't have to get an expensive SAN. There's 2 very good free SAN's in Nexenta and OpenFiler that will run on pretty much any hardware you give them! Been using OpenFiler for 4 months now, and its been rock solid - and it wasn't anywhere near expensive!

Wish I was still at uni and could print it in A0, bet its awesome that big! A3 will have to do I guess! Cheers

Can you be any more specific with what breaks? What are the logs saying? check /var/log/squid/cache.log and the logs in /var/log/samba/

You need to get Winbind and samba installed and working, join the server to the domain then look at squid config. Which is usually pretty straight forward in ubuntu, if you follow what cools suggested above you should on the right path, if you run into specific problems, post your troubles and someone may be able to help.

Which version of samba does your method install onto turnkey? The problems with R2 are that most versions of samba aren't compatible with r2 for ntlm auth. Ubuntu/CentOS/Debian all install an incompatible version through their package managers, which is why I opted for using enterprise samba packages.

What OS and Samba versions you running? winbind logs will no doubt tell the tale if you want to post them I can have a look for you. ** And sorry I totally forgot to update this thread. The problem all along was that the version of samba/winbind wouldn't talk to Server 2008 R2 - i was wrong to blame M$ for this one. I was using ubuntu at the time I started this thread, and I failed in trying to compile and install the latest version of samba. So I tried debian 5.04, to no avail when I ran into problems again compiling samba. I ended up using Enterprise Samba in the end on debian. Which worked a treat. But I've since switched to CentOS last week because its better supported on XenServer (which I didnt really want to do because Debian installs squid 2.7 by default which allows for include files.. which 2.7< doesnt ). So now im using 64bit CentOS 5.4 and the latest versions of Enterprise Samba for RHEL5. I must have installed and reinstalled linux servers 10 times in the last few weeks to crack this one but im pretty happy with it all now. I can confirm that: Debian 5 + Enterprise Samba (3.5) + Squid 2.7 will authenticate to AD no probs. CentOS 5.4 + Enterprise Samba (3.5) + Squid 2.6 will also work.

Could try Nexenta as an alternative, supposed to be a bit easier to use than OF, but "apparently" a bit pickier when it comes to the hardware. Pretty decent How To on OpenFiler here that you might want to bookmark - OpenFiler How To

Ah, yea so it is. I gave up to soon whilst searching for cache_peer in your squid.conf. The never direct should fix your problem. Let us know how you get on. Sean

I'd think you will need to add that as a cache_peer in your squid conf then. And also add a never_direct allow all. Cache Peer never_direct

Do you normally go through an isp or local authority proxy/filter?

Try squidclient (apt-get install squidclient) - its pretty handy for checking squid itself directly from your server! If you don't get very far post your squid conf, maybe theres something astray in there.

Think I may have solved this one :: Introducing the Restriction of NTLM Authentication. Basically override the default setting that denys NTLM authentication with the 2008r2 dc. Seems to work now.