Autenticação do Squid3 no Samba 4

Bacci
(usa Debian)

Enviado em 28/07/2015 - 12:23h

Boa tarde a todos.

Estou tentando autenticar o Squid3 no samba4. A parte de autenticação do Samba 4 está OK, pois com os comandos wbinfo -i, getent passwd, klist, kinit, etc está tudo certinho e consigo obter os resultados esperados. Também na linha de comando consigo autenticar os usuários (/usr/bin/ntlm_auth --username=usuario), entretanto quando utilizo o squid não funciona.

Já segui vários tutoriais, inclusive para autenticar no AD, já que o samba 4 é totalmente compatível com o AD. Nada funciona.
Segue meu arquivo de configuração (squid.conf).


http_port 3128

visible_hostname proxy-server.meudominio.com.br

error_directory /usr/share/squid3/errors/Portuguese
error_default_language pt-br
coredump_dir /var/spool/squid3

cache_mem 756 MB
maximum_object_size_in_memory 128 kB
maximum_object_size 512 MB
minimum_object_size 0 KB
cache_swap_low 90
cache_swap_high 95

cache_dir ufs /var/spool/squid3 2048 16 256
cache_access_log /var/log/squid3/access.log

refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320

###########################################################################################
######### AUTENTICACAO DOS USUARIOS #########
###########################################################################################


auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 30
auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic
auth_param ntlm children 5
auth_param basic realm Squid-proxy-caching web server
auth_param basic credentialsttl 2 hours
acl autenticados proxy_auth REQUIRED


# ACLS #

#acl manager proto cache_object
acl localhost src 127.0.0.1/32

acl SSL_ports port 443 563
acl Safe_ports port 80 21 443 70 563 70 210 280 488 59 591 777 901 1025-65535
acl purge method PURGE
acl CONNECT method CONNECT

http_access allow manager localhost
http_access deny manager

http_access allow purge localhost
http_access deny purge

http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports


http_access deny !autenticados
http_access allow autenticados


acl redelocal src 192.168.0.0/22
http_access allow localhost
http_access allow redelocal
http_access deny all

################################################################################

Meu /etc/hosts está assim:

127.0.0.1 localhost
192.168.0.35 squid-server.cmb.ensino.eb.br helio

O /etc/resolv.conf está assim:

domain meudominio.com.br
search meudominio.com.br
nameserver 192.168.0.5

Verifiquei que na pasta do Squid existe este arquivo que não conheço: msntauth.conf, com o seguinte conteúdo:

# Sample MSNT authenticator configuration file
# Antonino Iannella, Stellar-X Pty Ltd
# Sun Sep 2 15:52:31 CST 2001

# NT hosts to use. Best to put their IP addresses in /etc/hosts.
server my_PDC my_BDC my_NTdomain
server other_PDC other_BDC otherdomain

# Denied and allowed users. Comment these if not needed.
#denyusers /usr/local/squid/etc/msntauth.denyusers
#allowusers /usr/local/squid/etc/msntauth.allowusers

Estou usando Debian 8 e Samba 4.1.17.

Alguém tem alguma ideia?