Re: [squid-users] squid_ldap_auth + ad2003

From: Klaubert Herr da Silveira <[email protected]>
Date: Fri, 18 Jan 2008 10:17:54 -0200

Andrew,

by my quick research the group "Domain Users" are a special group, and
are not a good group do this job, maybe is better to use other group
where you turn all users members off it.

To include a check of group you should use a ldap filter in your
request, something like this:
-f "(&(objectClass=person)(memberOf=CN=Manual Domain Users,
CN=Users,dc=bsuir,dc=by))"

A good reference is http://workaround.org/moin/SquidLdap.

[]'s
Klaubert

On Jan 18, 2008 6:36 AM, koluchy <koluchy@bsuir.by> wrote:
>
> I have my users in a group at the 'Domain Users', default container 'Users'.
>
> Authentication for users in the 'Users' container works well:
> ./squid_ldap_auth -u cn -b "cn=Users,dc=bsuir,dc=by" 172.16.83.1
> squidtest squidtest
> OK
>
> How do I check authentication for users in the 'Domain Users'group in a
> container Users? What command line parameters for squid_ldap_auth use?
>
> I saw the squid_ldap_auth manual, but I do not help solve the problem.
>
> please help me
>
> Regards
> Andrew Matskevich
> --
> View this message in context: http://www.nabble.com/squid_ldap_auth-%2B-ad2003-tp14948010p14948010.html
> Sent from the Squid - Users mailing list archive at Nabble.com.
>
>
Received on Fri Jan 18 2008 - 05:18:01 MST

This archive was generated by hypermail pre-2.1.9 : Fri Feb 01 2008 - 12:00:05 MST