Re: [squid-users] Squid3 Authentication digest ldap problema

From: Henrik Nordstrom <henrik_at_henriknordstrom.net>
Date: Wed, 02 Jul 2008 22:33:22 +0200

On ons, 2008-07-02 at 14:52 -0430, Edward Ortega wrote:

> Ok, i store on the '*street*' attribute something like you said (
> MD5(username + ":" + realm + ":" + password) ), have i to store the
> "realm" argument on other attribute to squid understand the hash?
>
> #/usr/lib/squid3/digest_ldap_auth -v 3 -b 'dc=something,dc=com' -F
> '(&(objectclass=posixAccount)(uid=%s))' -H 'ldap://ldap' -A '*street*'
> -l -d

digest_ldap_auth expects an attribute with either

a) plain-text password

or when usingthe -e command line option

b) realm:hash

If encrypted mode is used (realm:hash) then the attribute may be
multi-valued with one value per supported realm.

Regards
Henrik

Received on Wed Jul 02 2008 - 20:33:27 MDT

This archive was generated by hypermail 2.2.0 : Thu Jul 03 2008 - 12:00:02 MDT