[squid-users] SQUID Authenticating with Active Directory

From: Gordon McKee <squidmlist@dont-contact.us>
Date: Mon, 12 Nov 2007 10:38:34 -0000

Hi

I was looking on the net to get squid to grant access to the internet if a
user in active directory was in a certain group. I found out how to do this
but I get the following error. Does someone have a better way around this?
Also, if possble, I don't want to ask for a username and password.

1194696868.005 93 192.168.0.99 TCP_DENIED/407 1921 GET
http://www.papercut.com/kb/Main/ConfiguringSquidProxyToAuthenticateWithActiveDirectory
gdm NONE/- text/html
squid_ldap_auth: WARNING, could not bind to binddn 'Strong(er)
authentication required'

squid.conf lines

auth_param basic program /usr/local/libexec/squid/squid_ldap_auth -R -b
"dc=g***e,dc=home" -D cn=Administrator,cn=Users,dc=gd***e,dc=home" -w
"*****" -f sAMAccountName=%s -h nt-***-h3

external_acl_type InetGroup %LOGIN
/usr/local/libexec/squid/squid_ldap_group -R -b "dc=g***e,dc=home" -D
"cn=Administrator,cn=Users,dc=g***e,dc=home" -w "**" -f
"(&(objectclass=person)(sAMAccountName=%v)(memberof=cn=%a,cn=users,dc=g***e,dc=home))"
 -h nt-***-h3

acl our_networks proxy_auth REQUIRED src 192.168.0.0/16
acl InetAccess external InetGroup InternetAccessGroup
http_access allow our_networks

Many thanks

Gordon
Received on Mon Nov 12 2007 - 03:38:43 MST

This archive was generated by hypermail pre-2.1.9 : Sat Dec 01 2007 - 12:00:02 MST