NS7-b2 Squid broken ACL permissions on shared folders

[celiofk (Celio Fukunaga)]

Hi,

I’m testing Nethserver 7 to act as a gateway, proxy and domain server.
When enable Web Proxy, ACL shared folders stopped working.
Steps to reproduce:

-install Nethserver in unattended mode;
-apply updates in console mode;
-reboot;
-access web interface and make the initial wizard changes;
-configure network with one green static 10.0.0.1/24 and one red DHCP;
-apply DHCP to green interface;
-install nethserver-DC, file server, web filter and web proxy;
-go to user an groups and start DC with bridge checked;
-change administrator password;
-create two users with no password expire and no ssh;
-create two groups and insert users;
-create two shared folders for groups with write permission to owner;
-apply DHCP to bridge interface;
-join Windows client and test write permission on shared folders: OK;
-enable web proxy: transparent with SSL on green and blue and disabled cache.
-reboot server;
-go to status, domain accounts: can’t find ldap server, but domain is OK;
-start Windows client and test shared folders permission: have no permission to access them;
-return to domain accounts: ldap server is back;
-start Windows client and test shared folders permission: have no permission;
-disable Web Proxy;
-start Windows client and test shared folders permission: OK.

messages.log

Best regards.

[davidep (Davide Principi)]

Thank you for the detailed report and for attaching your log file, @celiofk.

I’d try to reproduce it /cc @quality_team

BTW, this sounds similar to the other issue. I guess you installed the packages from the testing repos at first. But I cannot find any evidence of the update in your log file.

Do you have an idea where they differ?

Squidguard's group based profile creation broke Squid and shared folders permissions

Hi, everybody. First of all, sorry for my English. I’m testing NS7b2 in a real machine. My server act as a gateway, DC and Proxy. Everything worked fine until I created a profile that bypass the proxy filter for a specific group. After that, Squid service stopped and shared folders turned inaccessible. Deleting that profile makes Squid to start again, but wrong permissions on shared folders still remains. I reproduced this behavior twice in a real machine and once in Virtualbox. Cheers.

[celiofk (Celio Fukunaga)]

@davidep

BTW, this sounds similar to the other issue. I guess you installed the packages from the testing repos at first. But I cannot find any evidence of the update in your log file.

No, I’m not using testing repos, just stable. I opened a new thread because @giacomo request me to do it.

@davidep

Do you have an idea where they differ?

Well, squidguard segfault and ACL based profile creation was solved and were not related. I think that the problem is the same now, but @giacomo is investigating and he will find the answer soon.