RE: [squid-users] [Squid-users] Squid LDAP Authentication

Check to see if your ldap dir accepts anonymous binds, if not you will
need the -D and -w params. Also when you run the helper outside of squid
you need to pipe the password, see below:

echo "userPassword: password" | <path>/squid_ldap_auth -b
"ou=academics,o=dbu" -u cn -D "cn=LDAPUser,ou=users,o=dbu" -w "password"
-f "cn=userid" -h you.host.ip.adr

We do not allow anonymous binds so we use the -D and -w options

rick...
Rom.5:8

>>> Chris Perreault <Chris.Perreault@Wiremold.com> 8/12/2004 7:27:43 AM
>>>
Can you do a ldapsearch to the ldap directory?
ldapsearch --help

There is also a helpfile/readme in the helpers/ldap directory of the
source.

You need to get the helper working outside of squid first, before
moving on
to any squid type problems you might encounter. Try a -x on the
helper...that might do the trick. You probably need a username and
password
that has read access to the ldap directory as well.

Chris

-----Original Message-----
From: Simon Magee [mailto:SMagee@bottomline.co.uk]
Sent: Thursday, August 12, 2004 7:59 AM
To: squid-users@squid-cache.org
Subject: [squid-users] [Squid-users] Squid LDAP Authentication

Hi,
 
I have just installed SQUID2.5-STABLE6 and compiled with the
--enable-SSL
--enable-basic-auth-helpers=LDAP. I can get Squid to run ok, but when
I
come to try and get the LDAP authentication to work I am having no
luck.
 
On manually running the ./squid_auth_ldap -b o=bte -h 172.20.200.1 -p
389 I
always get the ERR message on the screen. I am running this on SuSE
Enterprise Server 8 and have the openldap modules installed.
 
Does anyone have any ideas?
 
Thanks
 
Simon.

Easy BACSTEL-IP Migration. Go to:
http://www.bottomline.co.uk/easymigration

NOTICE: All email sent to or from this address will be received by the
Bottomline Technologies Europe Corporate Email System and is subject
to
archival and review by someone other than the intended recipient.
Any opinions expressed in this email are those of the individual and
not
necessarily the Company. This email and any files transmitted with it
are
confidential and intended solely for the use of the individual or
entity to
whom they are addressed. If you are not the intended recipient or the
person
responsible for delivering to the intended recipient, be advised that
you
have received this email in error and that any use is strictly
prohibited.
All email accounts hosted by this Company are corporate email accounts
which
exist for the purpose of supporting the business activities of this
Company.
These accounts and their contents remain at all times the property of
this
Company. They are not personal email accounts and must not be used for
the
purpose of exchanging Sensitive Personal Information as defined by the
UK
Data Protection Act 1998 (1998 c29). Please address any enquiry
regarding
this notice to postmaster@bottomline.co.uk

Bottomline Technologies Europe Ltd, Chatham Street, Reading, RG1 7JX,
UK.
Tel: +44 (0)870 081 8250
http://www.bottomline.co.uk
Received on Thu Aug 12 2004 - 07:04:42 MDT