Join AD Fails

[Guest]

[qwaven]

Hello all,

I've just got Endian working and varified that the proxy/content filter does work. I've now tried to join the system to my Microsoft Active Directory domain using the "adjoin" button. I get a big red box saying "failed to join domain" .

Would anyone be able to assist with figuring out why this is failing?

I've already tried various accounts which are domain admins.

Thanks!

[davvidde]

Read THIS please and you get goal yourself:
http://kb.endian.com/entry/49/

Davide

[qwaven]

Hi,

Thanks for your response. I've actually recently got the AD Join feature to work however authentication fails. When trying to browse to a site I am prompted to username and password which does not get excepted.

Any thoughts?

[davvidde]

if AD join works but authentication don't work try this from a ssh console:

squidclient -l 192.168.x.x -p 8080 -u YOURUSER -w YOURPASSWORD http://www.google.com

where -l is the firewall ip from green if you want to test from green, orange and so on..
-p the port where squid is listening to
-u the user you want to test
-w the user password

If doesn't work (it gives you an error), look permissions of: /var/cache/samba/winbindd_privileged

if you get permissions like this
drwxr-x--- 2 root root 4096 feb 04 13:18 winbindd_privileged

then this is the error because it should be owned by root:squid
To correct:

chown -R root:squid /var/cache/samba/winbindd_privileged
chmod -R 750 /var/cache/samba/winbindd_privileged
restartsquid --force

[qwaven]

Thanks for the help.

I tried the command and I get what appears to be HTML code. I believe this means its working?

However when trying from a computer I still am prompted for username and password.

Any thoughts?

I am using one cable for the proxy right now. Does this matter? (with auth off I can browse the net fine)

Thanks!

[davvidde]

Post more details of your HTTP proxy configuration. Use print screen. Have you looked at file permissions of /var/cache/samba/winbindd_privileged ?

[qwaven]

Hello again,

Thanks for the info. Just tried the permissions and I "think" authentication is working now. I can browse sites without being prompted for a password.

However I don't think the block lists are working.  I have most of them enabled or RED and I can still browse to youtube...etc. although if I put in a custom blocked page "facebook.com" this works.

Any ideas? Is it possible to view block lists? Or are these updated?

Thanks!

[davvidde]

You need a more searching work on this forum because your questions are already posted.
However there isn't a front-end to modify the predefined block lists. You can view it with a normal text editor in /etc/dansguardian/blacklists/<CATEGORIES>/domain ;   There is also a script here http://www.efwsupport.com/index.php?topic=2147.0  that help you to retrieve blacklist from an on line service.
Hope this help you.

[qwaven]

Thanks for all your help. I think I've figured things out now. Still need to do some tweaking I'm sure but otherwise all seems good.

Cheers!