Re: [squid-users] Help with LDAP authentication

tor 2003-09-11 klockan 14.46 skrev Christopher Joles:
> For the record, I am using a RedHat 9 install, with squid that was
> installed by default. I believe it is 2.5Stable1.

You probably want to upgrade, at least if you plans on using groups.

> Now, again with that said, I have successfully communicated with the
> ldap box with ldap search using the following syntax:
>
> Ldapsearch -x -h 192.168.0.123 -b dc=proteabhs,dc=com -D
> cn=squiduser,cn=Users,dc=proteabhs,dc=com -w *********

Good.

> I have sucessfully communicated with squid_ldap_auth with the
> following syntax:
>
> Squid_ldap_auth -p -R -b dc=proteabhs,dc=com -D
> cn=squiduser,cn=Users,dc=proteabhs,dc=com -w ********* -f
> sAMAccount=%s objectClass=Person -h 192.168.0.123

Ok.

> Now, with that all out of the way, I have put the same syntax into my
> squid.conf file and when I try to browse the net, I do receive the
> login box, however, my password is never accepted. It loops 3 times
> and then displays the default page stating that I must authenticate
> prior to accessing the page.

The exact same syntax should work, unless you needed to use some quotes.
If you needed to quote arguments then you need to upgrade Squid or put
the command line in a small shell script.

> I know from the command line, all is working fine. It must be a
> syntax issue, however ,from what I can tell I'm entering it all
> correctly.

So what did you enter into squid.conf?

Regards
Henrik

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org
Please consult the Squid FAQ and other available documentation before
asking Squid questions, and use the squid-users mailing-list when no
answer can be found. Private support questions is only answered
for a fee or as part of a commercial Squid support contract.
If you need commercial Squid support or cost effective Squid and
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, [email protected]