RE: [squid-users] External ACL - LDAP Authentication

From: Philip Kloppers <[email protected]>
Date: Sat, 26 Apr 2008 22:03:20 +0200

On 2008-04-24 20:18 Matias Chris wrote

> Hi there, this might be seen as offtopic but is part of our
> proxy solution, there is some silly problem Im stuck with...
>
> I need to authenticate users with LDAP against a group called
> "Domain Users" with the space in the middle. Is this possible?
>
> Im using squid_ldap_group scritp on the command line(for
> testing), if I try with a one-word group like "Internet" it
> gives me a OK, but if I try with "Domain Users" I allways
> receive an ERR even If i send the group between "". Is there
> any way to authenticate against a group called with more than
> one word?
>
> >Thanks!

Put the group into a file and authenticate using the file as source

external_acl_type ldap_group %LOGIN /usr/sbin/squid_ldap_group -v3 -b "ou=Groups,dc=example,dc=com" -f
"(&(cn=%g)(memberuid=%u))" localhost
acl group_domainAdmins external ldap_group "/etc/squid/groups_domainAdmins"

Philip
Received on Sat Apr 26 2008 - 20:03:37 MDT

This archive was generated by hypermail 2.2.0 : Thu May 01 2008 - 12:00:04 MDT