[squid-users] Re: Configuring Squid LDAP Authentication

I wanted to test something, but not quite sure how to do it. I want
to see if my Intranet users can authenticate when they go to
'companyname-intranet' and are prompted for a login. When I enable
the proxy I'm unable to login to the Intranet, but when I disable the
proxy I can login. So I'm thinking its an issue with Squid and I need
to add something to Squid to allow authentication. I'm I incorrect in
this assessment? If so, how do I go about allowing access to that
site. Do I do this via an ACL?

On Wed, Jan 11, 2012 at 10:30 AM, berry guru <berryguru_at_gmail.com> wrote:
> I used the following tutorial online to configure Squid to
> authenticate with AD, but I still can't get this working. �As most
> have seen, I also used a tutorial written by one of our mailing list
> members and that didn't work. �Are others having this much trouble
> getting Squid to authenticate with there Active Directory server? �So
> frustrating!
>
> Configuring Squid LDAP Authentication
>
> The first step is to configure Squid to authenticate
> usernames/passwords with the Active Directory. You will need to open
> your Squid configuration file (squid.conf) and make the following
> changes:
>
> Find the auth param section of the config file (TAG: auth_param), and
> change the auth param basic program line to look like this. (Indented
> text indicates one line)
>
> � �auth_param basic program /usr/lib/squid/ldap_auth -R
> � � � �-b "dc=vm-domain,dc=papercut,dc=com"
> � � � �-D "cn=Administrator,cn=Users,dc=your,dc=domain,dc=com"
> � � � �-w "password" -f sAMAccountName=%s -h 192.168.1.75
> � �auth_param basic children 5
> � �auth_param basic realm Your Organisation Name
> � �auth_param basic credentialsttl 5 minutes
>
> These settings tell Squid authenticate names/passwords in the Active Directory.
>
> � �The -b option indicated the LDAP base distinguished name of your
> domain. E.g. your.domain.com would be dc=your,dc=domain,dc=com
> � �The �D option indicates the user that is used to perform the LDAP
> query. (e.g an Administrator. This example uses the built-in
> Administrator user, however you can use another user of your choice.
> � �The �w option is the password for the user specified in the �D
> option. For better security you can store the password in a file and
> use the �W /path/to/password_file syntax instead
> � �-h is used to indicate the LDAP server to connect to. E.g. your
> domain controller.
> � �-R is needed to make Squid authenticate against Windows AD
> � �The �f option is the LDAP query used to lookup the user. In the
> above example, sAMAccountName=%s, will match if the user�s Windows
> logon name matches the username entered when prompted by Squid. You
> can search any value in the LDAP filter query. You may need to use an
> LDAP search query tool to help get the syntax correct for the �f
> search filter.
> � �The %s is replaced with what the user enters as their username.
>
> Remember to restart Squid to make these changes to come into effect.
Received on Wed Jan 11 2012 - 19:37:09 MST