From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <Dimitry.Ketov@avalon.ru>
Message-ID: <41C9AB9F.9030100@avalon.ru>
Date: Wed, 22 Dec 2004 20:15:11 +0300
From: "Dimitry V. Ketov" <Dimitry.Ketov@avalon.ru>
Organization: FPS SPbSPU
User-Agent: Mozilla Thunderbird 0.6 (X11/20040511)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: ALT Devel discussion list <devel@altlinux.ru>
Subject: Re: [devel] Q: squid - =?KOI8-R?Q?=D3=C9=CC_=CD=CF=C9=C8_=C2?=
	=?KOI8-R?Q?=CF=CC=D8=DB=C5_=CE=C5=D4?=
References: <20041222141348.GF544@immo.ru> <20041222163316.GJ544@immo.ru>
In-Reply-To: <20041222163316.GJ544@immo.ru>
X-Enigmail-Version: 0.84.0.0
X-Enigmail-Supports: pgp-inline, pgp-mime
Content-Type: text/plain; charset=KOI8-R; format=flowed
Content-Transfer-Encoding: 8bit
X-OriginalArrivalTime: 22 Dec 2004 17:13:30.0626 (UTC)
	FILETIME=[8F379E20:01C4E849]
X-BeenThere: devel@altlinux.ru
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: ALT Devel discussion list <devel@altlinux.ru>
List-Id: ALT Devel discussion list <devel.altlinux.ru>
List-Unsubscribe: <https://lists.altlinux.ru/mailman/listinfo/devel>,
	<mailto:devel-request@altlinux.ru?subject=unsubscribe>
List-Archive: <http://lists.altlinux.ru/pipermail/devel>
List-Post: <mailto:devel@altlinux.ru>
List-Help: <mailto:devel-request@altlinux.ru?subject=help>
List-Subscribe: <https://lists.altlinux.ru/mailman/listinfo/devel>,
	<mailto:devel-request@altlinux.ru?subject=subscribe>
X-List-Received-Date: Wed, 22 Dec 2004 17:11:24 -0000
Archived-At: <http://lore.altlinux.org/devel/41C9AB9F.9030100@avalon.ru/>
List-Archive: <http://lore.altlinux.org/devel/>
List-Post: <mailto:devel@altlinux.org>

http://www.squid-cache.org/bugs/show_bug.cgi?id=1021
https://bugzilla.altlinux.org/show_bug.cgi?id=4182
http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE6-initgroups
...
synopsis  	cache_effective_user should gain the supplementary group memberships of the 
specified user. This is required to be able to configure sane permissions of several 
authentication backends such as pam_auth or winbind. In addition cache_effective_group 
should not be ignored when not starting Squid as root. If cache_effective_group is 
specified Squid should run as this and only this group.
...

Последнее предложение...

Д.

Alexey I. Froloff wrote:
> * Alexey I. Froloff <raorn@> [041222 17:14]:
> 
>>Исходные данные: squid-2.5.STABLE7-alt{1,4}, ADS домен,
>>авторизация через самбовый ntlm_auth.  Надо внести сквида в
>>группу winbind и тогда наступит счастие...  А нифига.
> 
> 
>>    debug(21, 3) ("leave_suid: PID %d giving up root, becoming '%s'\n",
>>        (int) getpid(), Config.effectiveUser);
>>    if (!Config.effectiveGroup) {
> 
> 
> Блин... :-/  Убил целый день на такую бнопню...
> 
> Почему _!_Config.effectiveGroup, когда Config.effectiveGroup
> _всегда_ будет не NULL?!
> 
> кг/ам :-/
>