Erro Squid Autenticado AD

rabastos
(usa Debian)

Enviado em 30/10/2014 - 13:28h

Pessoal Uma ajuda por favor!

Meu squid apresenta um erro que não consigo corrigir:

2014/10/30 13:26:13| aclParseAclList: ACL name 'AuthorizedUsers' not found.
FATAL: Bungled squid.conf line 138: http_access allow all AuthorizedUsers
Squid Cache (Version 3.1.6): Terminated abnormally.
CPU Usage: 0.004 seconds = 0.004 user + 0.000 sys
Maximum Resident Size: 17552 KB
Page faults with physical i/o: 0

o squid.conf está assim:


http_port 172.16.10.253:3128

refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320

# OTIMIZANDO CONEXÃS
#########################################
hierarchy_stoplist cgi-bin ?
###acl QUERY urlpath_regex cgi-bin \? \& \%
###no_cache deny QUERY
####hosts_file /etc/hosts

# Autenticaç no Windows 200
auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 30
auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
external_acl_type nt_group ttl=0 children=5 %LOGIN /usr/lib/squid/wbinfo_group.pl:

# Logs
########################################
#logformat combined %>a %ui %un [%tl] "%rm %ru HTTP/%rv" %Hs %<st "%{Referer}>h" "%{User-Agent}>h" %Ss:%Sh
#access_log /var/log/squid3/access.log combined
access_log /var/log/squid3/access.log
cache_log /var/log/squid3/cache.log

# acls de origem
# =======================================
acl localhost src 127.0.0.1/32
#acl administrativo src 172.16.10.0/24

# acls de destino
# =======================================
#acl allDest dst 0.0.0.0/0.0.0.0
acl to_localhost dst 127.0.0.0/8

# acls de portas
# =======================================
# portas seguras
acl SSL_ports port 443 563
# demais serviÃ
acl Safe_ports port 80 # http
acl Safe_ports port 8080 # tomcat
acl Safe_ports port 8443 # tomcat - ssl
acl Safe_ports port 10000 # webmin
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 631 # cups
acl Safe_ports port 777 # multiling http
#acl Safe_ports port 901 # SWAT
acl Safe_ports port 4500 # Biblioteca USP dedalus
acl Safe_ports port 2083 # CPANEL
acl Safe_ports port 2631 # Conectividade Social
acl Safe_ports port 1494 # Sigov
acl Safe_ports port 8333 # WMWARE SERVER

http_access allow manager localhost
http_access allow localhost
http_access deny CONNECT !SSL_ports
http_access deny !Safe_ports
http_access deny manager
http_access deny all

# proteç do cache
acl manager proto cache_object

cl ntlm_users proxy_auth REQUIRED
http_access allow ntlm_users
http_access deny all

# ========================================
# 1 - acl controlar sites (sites-proibidos)
# ----------------------------------------
acl sites_deny dstdomain -i "/etc/squid3/acls/sites-proibidos"
acl sites_allow dstdomain -i "/etc/squid3/acls/sites-permitidos"
acl caixa dstdomain -i .caixa.gov.br

# acl liberacao Windowsupdate
# ----------------------------------------
acl update dstdomain -i Windowsupdate.microsoft.com au.download.Windowsupdate.com

# regras das acls de portas
# ========================================
# bloqueia todas as portas nãlistadas
http_access deny !Safe_ports
# bloqueia conexõdas portas seguras nãlistadas
http_access deny CONNECT !SSL_ports

# permite acesso direto ao site da caixa, sem restriçs
http_access allow caixa
always_direct allow caixa

# HTTP REPLY ACCESS
#########################################
http_reply_access allow all

# ICP ACCESS
#########################################
icp_access allow all

# MISS ACCESS
#########################################
miss_access allow all

# Host visíl
visible_hostname proxy.dominio.local
# Linguagem dos erros
error_directory /usr/share/squid3/errors/Portuguese
# Evita que sejam feitos coredumps.
coredump_dir /var/spool/squid3
# Numero de arquivos de log rotacionados a guardar.
logfile_rotate 4