[Samba] samba_dlz: disallowing update of signer error=insufficient access rights

[L.P.H. van Belle]

I need correct DNS resolvings mostly. 
I have no more netbios here. 

dhcp sends option 252, i have .. wpad.dns.domain.tld. 
Pc resolves to webserver, picksup wpad.dat of proxy.pac, 
what you set.. 

The content is processes of proxy.pac. 

And that does something like this. 

function FindProxyForURL(url, host) {

    // Checks if HOST is an IPv4 address, If HOST is NOT an IPv4 address
    // we check if we can resolve the HOST.
    // If we can't, we immediately return DIRECT. (No Proxy)
    if (!shExpMatch(host, "/^\d+\.\d+\.\d+\.\d+$/g")) {if(!isResolvable(host)) 
	{ return "DIRECT"; }}  
	// bypass proxy. 

  // Resolves hostnames to an IP address, used to reduce the number of DNS lookups.
        var resolved_ip = dnsResolve(host);

    // If the resolved hostname of the requested website is hosted within the 
    //internal network, send direct.
        if (isInNet(resolved_ip, "10.0.0.0", "255.0.0.0") ||
        isInNet(resolved_ip, "172.16.0.0", "255.240.0.0") ||
        isInNet(resolved_ip, "192.168.0.0", "255.255.0.0") ||
        isInNet(resolved_ip, "127.0.0.0", "255.255.255.0"))
    return "DIRECT";

// If we detect a "common" lan extention, return DIRECT
if (shExpMatch(host, "*.local")) return "DIRECT";
if (shExpMatch(host, "*.lan")) return "DIRECT";

// If the resolved hostname of the requested website contains matches send DIRECT
if (shExpMatch(host, "*.specialwebsite.tld")) return "DIRECT";

 // DEFAULT RULE: All other traffic, use below proxy, 
 // but use direct/bypass if proxy does not reponse
   return "PROXY 192.168.0.1:8080";

So .. No netbios involved here.. ;-) 

Greetz, 

Louis


> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Rowland penny via samba
> Verzonden: vrijdag 27 november 2020 16:56
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] samba_dlz: disallowing update of 
> signer error=insufficient access rights
> 
> On 27/11/2020 15:44, L.P.H. van Belle via samba wrote:
> > And in addition.
> >
> > https://findproxyforurl.com/official-toolset/
> > Learn here more on wpad.
> > What i does and most important, how you can use it.
> >
> > I enforce it trough dhcp.
> 
> To be honest, I had never heard of it before today, but then 
> I again I 
> am not a big Microsoft user ????
> 
>  From a quick internet search, it looks like it is tied into 
> netbios, so 
> it probably has a limited life left, or in my case it is 
> already dead as 
> I do not use SMBv1 any more.
> 
> Rowland
> 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>