Re: [squid-users] Regarding Squid+Ldap

Hi

You should probably comment out multiple attempts to authenticate. In your
second attempt you have spelt "quest" as "qust". You also haven't specified
an OU for the user "Manager", or a -f parameter.

Try debugging at the commandline. eg:
    echo "username password" | /usr/lib/squid/squid_ldap_auth -b.......

You should get either a "OK" or an "ERR". Anything else, then you need to
check your syntax and parameters.

In your squid.conf, all on the same line it should read something like this:

    auth_param basic program /usr/lib/squid/squid_ldap_auth
          -b "dc=quest,dc=com"
          -D "cn=Manager,cn=Users,dc=quest,dc=com"
          -w "my_password_here"
          -f sAMAccountName=%s
          -h 192.168.1.1

This page gave me alot of help:
    http://kb.papercutsoftware.com/Main/ConfiguringSquidProxyToAuthenticateWithActiveDirectory

One thing that causes problems is if the password of the administrator (in
your case, the user called "Manager") has non-alphanumeric characters. In my
case, my problem was that the administrator password had an "!" in it, and I
had to use an "\" before the "!", i.e. "\!".

Regards,
Dietrich

----- Original Message -----
From: "selvam" <selvame@questresearch.com>
To: <squid-users@squid-cache.org>
Cc: <hno@squid-cache.org>
Sent: Wednesday, May 25, 2005 8:25 PM
Subject: [squid-users] Regarding Squid+Ldap

> Hi,
>
> I am configure squid.conf with following setting for ldap authentication.
>
> auth_param basic program /usr/lib/squid/squid_ldap_auth -b
> "dc=quest,dc=com" -D 'cn=Manager,dc=quest,dc=com' -w z -h 192.168.1.1
> #auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/password
> auth_param basic program /usr/lib/squid/squid_ldap_auth -b
> "dc=qust,dc=com" -w "z" -h 192.168.1.1
>
> But i am unbable to authenticate thr ldap
> please help me
> I am already posted this query to squid-users but no reply or solution
>
> Hendrik please help me to solve this problem
>
>
> Thanking you.
>
> Regards,
>
> Selvam E.
>
Received on Wed May 25 2005 - 02:46:23 MDT