Re: [squid-users] squid_ldap_group authentication

Hi,

At 09.21 02/01/2005, smekkawi@zahid.com wrote:

>Hi;
>
>I am using Squid-2.5.STABLE3 with squid_ldap_group for providing internet
>access to users in allowed groups, I am facing a problem of case sensitive
>user names, for example my user name in the ldap server is SamerM and i am
>logged in as samerm , when I try to access the internet Its giving me
>access denied, If I used SamerM at the authentication prompt it works, is
>there a way to make the user name case in-sensitive, since samerm and
>SamerM is the same user. I checked the man page for squid_ldap_auth and
>squid_ldap_group for such optioon but did not find any.
>
>Thanks in advance.
>
>Regards;
>Samer Mekkawi

Starting with 2.5 STABLE 7 was added a new option for the Basic
authentication schema that enables case insensitive authentication:

auth_param basic casesensitive off

When case sensitivity is off, all username are forced to lower case, so you
should change all LDAP username to lower case.

Another solution could be change the Matching Rules on your LDAP server:
http://www.zytrax.com/books/ldap/ch3/index.html#matchingrules.

I don't know is something could be done with the Squid helpers search filters.

Regards

-
========================================================
Guido Serassio
Acme Consulting S.r.l. - Microsoft Certified Partner
Via Gorizia, 69 10136 - Torino - ITALY
Tel. : +39.011.3249426 Fax. : +39.011.3293665
Email: guido.serassio@acmeconsulting.it
WWW: http://www.acmeconsulting.it/
Received on Sun Jan 02 2005 - 03:46:14 MST