Юзеров из ад надо авторизовать через squid_kerb_auth, а не убогой самбой.

по подробней можно как-нибудь объяснить? находил инструкцию авторизации через LDAP и там использовались kerberos ключи - это оно?

А в гугеле забанили? http://wiki.squid-cache.org/ConfigExamples/Authenticate/Kerberos

smb.conf
lmhosts
krb5.conf

конфиги

smb.conf [global] workgroup = fgu passdb backend = tdbsam printing = cups printcap name = cups printcap cache time = 750 cups options = raw map to guest = Bad User logon path = \\%L\profiles\.msprofile logon home = \\%L\%U\.9xprofile logon drive = P: usershare allow guests = Yes add machine script = /usr/sbin/useradd -c Machine -d /var/lib/nobody -s /bin/false %m$ domain logons = No domain master = No netbios name = ololosrv security = ADS usershare max shares = 100 wins support = No realm = FGU template homedir = /home/%D/%U template shell = /bin/bash winbind offline logon = yes winbind refresh tickets = yes

krb5.conf [libdefaults] default_realm = FGU clockskew = 300 # default_realm = EXAMPLE.COM

[realms] FGU = { kdc = server-dc1.fgu default_domain = fgu admin_server = server-dc1.fgu } server-dc1 = { kdc = 10.26.136.1 default_domain = server-dc1 admin_server = 10.26.136.1 } # EXAMPLE.COM = { # kdc = kerberos.example.com # admin_server = kerberos.example.com # }

[logging] kdc = FILE:/var/log/krb5/krb5kdc.log admin_server = FILE:/var/log/krb5/kadmind.log default = SYSLOG:NOTICE:DAEMON [appdefaults] pam = { ticket_lifetime = 1d renew_lifetime = 1d forwardable = true proxiable = false minimum_uid = 1 clockskew = 300 external = sshd use_shmem = sshd } [domain_realm] server-dc1 = server-dc1.fgu .fgu = FGU FGU = .fgu

lmhosts 127.0.0.1 localhost

за сылочку спасибо!