Re: [squid-users] ldap and digest on squid for windows

From: D & E Radel <[email protected]>
Date: Fri, 27 Jul 2007 22:57:02 +1200

sflour@audencia.com wrote:
> Hi,
> Thank you for this information but I doubt, because I read the (poor)
> documentation and digest_ldap_auth is not for store a password in AD !
> The only good way i can find on the web is this link :
> http://nixforums.org/about143268.html&highlight=
> Thank and have a good day.

The format I previously posted word for me against a Windows 2003 Server domain controller. The "-f
sAMAccountName=%s" part is important.

/usr/lib/squid/ldap_auth
   -R
   -b "dc=my,dc=domain"
   -D "cn=Administrator,cn=Users,dc=my,dc=domain"
   -w "Administrator's_Password"
   -f sAMAccountName=%s
   -h IPofLDAPServer

The following example is from:
http://www.papercut.biz/kb/Main/ConfiguringSquidProxyToAuthenticateWithActiveDirectory

     auth_param basic program /usr/lib/squid/ldap_auth -R
         -b "dc=vm-domain,dc=papercut,dc=biz"
         -D "cn=Administrator,cn=Users,dc=your,dc=domain,dc=com"
         -w "password" -f sAMAccountName=%s -h 192.168.1.75
     auth_param basic children 5
     auth_param basic realm Your Organisation Name
     auth_param basic credentialsttl 5 minutes

Try something like that.

Regards,
D.Radel.
Received on Fri Jul 27 2007 - 04:57:06 MDT

This archive was generated by hypermail pre-2.1.9 : Wed Aug 01 2007 - 12:00:04 MDT