[squid-users] squid_ldap_auth problem

Hi

I'm trying to configure Squid 2.4.STABLE7, running on SuSE, to ldap
authenticate against eDirectory.

I have a working ldap query, which works just fine at the command line
using squid_ldap_auth:

./squid_ldap_auth -b "ou=xxxx,o=yyyy,c=zz" -u cn -s sub -D
"cn=wwww,ou=xxxx,o=yyyy,c=zz," -w <password> -f "<filter here>"
ldap_ip_address

This successfully connects to the server and validates or errors user name
and password combinations correctly.

In squid.conf, I have:

acl all src 0.0.0.0/0.0.0.0
acl password proxy_auth REQUIRED
http_access allow password
http_access deny all

PROBLEM: when I try to open a page and enter the user name and password at
the prompt, I just get the following error in cache.log:

squid_ldap_auth: WARNING, could not bind to binddn 'Invalid DN syntax'
squid_ldap_auth: WARNING, could not bind to binddn 'Invalid DN syntax'

and the prompt re-appears. But this DN is fine when run from the command
line.

I did notice that I get a TCP_DENIED message in access.log AS the prompt
flashes up (i.e. BEFORE I've actually entered my details (not sure whether
this is relevant or not)), as well as after.

Any help appreciated.

Regards

Jeff

--
Jeff Richards
Technical Consultant
Unix Enterprise Services
jeff.richards@centrelink.gov.au
Tel: +61 2 6219 8125
Important:  This e-mail is intended for the use of the addressee and may contain information that is confidential, commercially valuable or subject to legal or parliamentary privilege.  If you are not the intended recipient you are notified that any review, re-transmission, disclosure, use or dissemination of this communication is strictly prohibited by several Commonwealth Acts of Parliament.  If you have received this communication in error please notify the sender immediately and delete all copies of this transmission together with any attachments.