Samba+winbind+squid+active_directory
 

Hello all, I wanna know why my Linux Boxes are asking to authenticate against the proxy if Im logged with a Domain Account, Windows Clients can navegate using google crhome, I setup proxy and I dont need to type my user domain and password, but the Fedora Clients (In Domain, logged with User Domain Account) still asking to atuthenticate against proxy, here are my settings in the Fedora Boxes:


smb.conf


#GLOBAL PARAMETERS
[global]
#--authconfig--start-line--

# Generated by authconfig on 2013/03/20 19:14:52
# DO NOT EDIT THIS SECTION (delimited by --start-line--/--end-line--)
# Any modification may be deleted or altered by authconfig in future

workgroup = JEDIKNIGHT
realm = JEDIKNIGHT.LOCAL
security = ads
idmap config * : range = 16777216-33554431
winbind separator = +
template shell = /bin/bash
winbind use default domain = true
winbind offline logon = true

#--authconfig--end-line--
; workgroup = JEDIKNIGHT
; realm = JEDIKNIGHT.LOCAL
preferred master = no
server string = Linux Test Machine
; security = ADS
encrypt passwords = yes
log level = 3
log file = /var/log/samba/%m
max log size = 50
printcap name = cups
printing = cups
winbind enum users = Yes
winbind enum groups = Yes
; winbind use default domain = Yes
winbind nested groups = Yes
; winbind separator = +
; idmap uid = 600-20000
; idmap gid = 600-20000
;template primary group = "Domain Users"
; template shell = /bin/bash

[homes]
comment = Home Direcotries
valid users = %S
read only = No
browseable = No

[printers]
comment = All Printers
path = /var/spool/cups
browseable = no
printable = yes
guest ok = yes


krb5.conf


[libdefaults]
default_realm = JEDIKNIGHT.LOCAL
ticket_lifetime = 24000
dns_lookup_realm = false
dns_lookup_kdc = false

[realms]
ORAMA.LOCAL = {
kdc = jediknightr2.jediknight.local
admin_server = jediknightr2.jediknight.local
default_domain = jediknight.local
}

[domain_realm]
.jediknight.local = JEDIKNIGHT.LOCAL
jediknight.local = JEDIKNIGHT.LOCAL

[login]
krb4_convert = true
krb4_get_tickets = false

[logging]
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmin.log
default = FILE:/var/log/krb5lib.log

[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
}

nsswitch.conf


passwd: files winbind
shadow: files winbind
group: files winbind

#hosts: db files nisplus nis dns
hosts: files dns

# Example - obey only what nisplus tells us...
#services: nisplus [NOTFOUND=return] files
#networks: nisplus [NOTFOUND=return] files
#protocols: nisplus [NOTFOUND=return] files
#rpc: nisplus [NOTFOUND=return] files
#ethers: nisplus [NOTFOUND=return] files
#netmasks: nisplus [NOTFOUND=return] files

bootparams: nisplus [NOTFOUND=return] files

ethers: db files
netmasks: files
networks: files dns
protocols: db files
rpc: files
services: files

netgroup: files

publickey: nisplus

automount: files
aliases: files nisplus