How to configure squid to work with ntlm authorization?

Question

Squid

Good day!
I set up a proxy server on CentOS 7 in the squid+ad+sams2+dansguardian bundle , user authorization must go through ntlm authorization.
Everything seems to be set up, everything works, but suddenly there was a problem in squid , when trying to initialize Cache , it gives the following error:

FATAL: getgrnam failed to find groupid for effective group 'administrators'
Squid Cache (Version 3.5.20): Terminated abnormally.
CPU Usage: 0.015 seconds = 0.010 user + 0.005 sys
Maximum Resident Size: 99008 KB
Page faults with physical i/o: 0

The user in AD who connected and entered the squid machine into the domain and is in the Domain Admins group.
Having poked around in the internet, I found that this problem is that squid cannot find the administrators group.
Here is a piece of the squid.conf config in which the parameters are just written:

cache_effective_user squid
cache_effective_group domain administrators

The system pulled up the user squid , as I understood from AD , and his group too, but there is no such group in the system, i.e. in CentOS itself.
I tried to create a squidad group in AD , adding the squid user to it, and making the group itself a member of the Domain Admins group . Then I registered it in squid.conf , changing the group in the attributes of three files with the .shm extension accordingly , after which initialize Cache succeeds, but after that, authorization stops working, the authorization window pops up, but users from AD do not authorize.
Tell me how to solve this problem?

Answer 1

You have a group "Domain Admins" in Russian, and besides, it consists of two words. Therefore, to begin with, take the name of the group in quotes:
If this does not help, dig in the area of ​​encodings. The config will have one encoding, while the domain controller may have a completely different one.