[squid-users] Re: Group LDAP authenticate

Mauro Macedo Machado wrote:

> My partner Chris improve squid_ldap_auth.c with group
> authenticate mode. We are authenticate in Novell NDS via ldap. It´s very
> well.
> The code is commented where is modified.
>
> Please, any suggestions is welcome.

Why don't you include uniquemember in the search? There is no need to
search again on the client side (squid_ldap_auth) or to even fetch list
of members. All you want to know if is the user is in the group or not.

And to be generally acceptable there needs to be a command line argument
to specify the group membership search filter. LDAP directories may be
structured in a wide varity of different manners, some more standard
than others..

Other than that, it is a good start.

Regards
Henrik
Received on Wed Oct 24 2001 - 17:26:45 MDT