我需要一些build议,当我尝试启动集成NTLM / ADauthentication设置的Squid时出现错误。
inheritance人的背后故事:
我已经在服务器的设置,安装和configuration上遵循了这个指南 。 到目前为止,一切进展顺利,我觉得我离得到这个系统运行分钟。
我有能力做
Wbinfo -a administrator kinit Administrator klist
每个命令都会给出确认,确认它已成功运行并按预期工作。
Linux框已经成功join我的域名,我可以在用户和组上进行AD查询。
但是,当我尝试启动鱿鱼服务,我从CLI获取以下内容。
[root@squid ~]# service squid start Starting squid: . [ OK ]
但是,然后从我的浏览器得到连接错误,说代理服务器拒绝连接,在/var/log/squid/cache.log内进一步调查鱿鱼显示以下错误。
2013/07/31 09:57:30| StatefulHandleRead: no callback data registered 2013/07/31 09:57:30| helperHandleRead: unexpected read from basicauthenticator #2, 28 bytes 'NT_STATUS_OK: Success (0x0) ' 2013/07/31 09:57:30| helperHandleRead: unexpected read from basicauthenticator #3, 28 bytes 'NT_STATUS_OK: Success (0x0) ' 2013/07/31 09:57:30| helperHandleRead: unexpected read from basicauthenticator #4, 28 bytes 'NT_STATUS_OK: Success (0x0) ' 2013/07/31 09:57:30| helperHandleRead: unexpected read from basicauthenticator #5, 28 bytes 'NT_STATUS_OK: Success (0x0) ' 2013/07/31 09:57:30| WARNING: ntlmauthenticator #3 (FD 13) exited 2013/07/31 09:57:30| WARNING: ntlmauthenticator #1 (FD 9) exited 2013/07/31 09:57:30| WARNING: ntlmauthenticator #2 (FD 11) exited 2013/07/31 09:57:30| Too few ntlmauthenticator processes are running 2013/07/31 09:57:30| storeDirWriteCleanLogs: Starting... 2013/07/31 09:57:30| Finished. Wrote 0 entries. 2013/07/31 09:57:30| Took 0.00 seconds ( 0.00 entries/sec). FATAL: The ntlmauthenticator helpers are crashing too rapidly, need help! Squid Cache (Version 3.1.10): Terminated abnormally. CPU Usage: 0.143 seconds = 0.038 user + 0.105 sys Maximum Resident Size: 35040 KB Page faults with physical i/o: 0 Memory usage for squid via mallinfo(): total space in arena: 2788 KB Ordinary blocks: 2757 KB 13 blks Small blocks: 0 KB 0 blks Holding blocks: 1012 KB 4 blks Free Small blocks: 0 KB Free Ordinary blocks: 30 KB Total in use: 3769 KB 135% Total free: 30 KB 1%
这是一个捕获的鱿鱼configuration文件。
auth_param ntlm program /usr/bin/ntlm_auth -–helper-protocol=squid-2.5-ntlm --username=admin --password=password auth_param ntlm children 10 auth_param basic program /usr/bin/ntlm_auth -–helper-protocol=squid-2.5-basic --username=admin --password=password auth_param basic children 5 auth_param basic realm Domain Proxy Server auth_param basic credentialsttl 2 hours auth_param basic casesensitive off authenticate_cache_garbage_interval 10 seconds ## # Credentials past their TTL are removed from memory authenticate_ttl 0 seconds
你为什么要为ntlm_auth指定--username和--password参数? 这些参数不是必需的,可能会导致ntlm_auth进程终止(这很可能是导致失败的根本原因)。