[squid-users] squid authentication
Hi all, I hope you can help me: I'm trying to authenticate squid users against a MS Active directory but i am having problems. I've already tried all the statements tha are in the squid_ldap_auth manual. the MS Active directory is under the following domain: tre-pb.gov.br I created some users directly in this domain. If anyone went trough the same situation and solved the problem, please tell me why.Give me an example of your squid.conf file. regards, Victor Souza Menezes
Re: [squid-users] squid authentication
thanks for your answer Dave. I don't know many things about your solution. Is this what people are calling Single Sign On Systems, that is, a System where the user has to log on only one time? would you please tell me how you achieved that, i mean, which changes did you have to do ? -- Original Message --- From: Dave Augustus [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: 05 Jan 2004 13:37:58 -0600 Subject: Re: [squid-users] squid authentication Hello Victor, I haven't heard of using ldap for MSAD authentication. I personally setup a Redhat 9 box running Samba 3, Kerberos 1.3.1 and Squid 2.5stable4. It uses the *new* ntlm_auth from Samba 3. Have you looked into this solution? --Dave On Mon, 2004-01-05 at 13:04, Victor Souza Menezes wrote: Hi all, I hope you can help me: I'm trying to authenticate squid users against a MS Active directory but i am having problems. I've already tried all the statements tha are in the squid_ldap_auth manual. the MS Active directory is under the following domain: tre-pb.gov.br I created some users directly in this domain. If anyone went trough the same situation and solved the problem, please tell me why.Give me an example of your squid.conf file. regards, Victor Souza Menezes --- End of Original Message ---
[squid-users] squid_ldap_auth authentication
Hi all, I hope you can help me: I'm trying to authenticate squid users against a MS Active directory but i am having problems. I've already tried all the statements tha are in the squid_ldap_auth manual. the MS Active directory is under the following domain: tre-pb.gov.br I created some users in directly in this domain. If anyone went trough the same situation and solved the problem, please tell me why.Give me an example of your squid.conf file
[squid-users] ldapsearch
how can i bind to a specific user?
[squid-users] help me with authentication
Henrik, i know that i am annoying you with all these e-mails, but i couldn't solve my problems with squid_ldap_auth. I followed your adivice and putted the following line in squid.conf: auth_param basic program /usr/lib/squid/squid_ldap_auth -p -R -b dc=tre-pb, dc=gov, dc=br -D cn=victor,cn=users,dc=tre-pb,dc=gov,dc=br -w XXX -f ((userPrincipalName=%s)objectClass=Person)) -h ldapserver ip address where victor and XXX is, respectively, a user DN and a password to perform the searches. the problem is that i can't authenticate at all. I've already tried everything that is in the manual. I have no idea of what i'm doing wrong.I just have some users in the domain tre-pb.gov.br in the win2K/ActiveDirectory server and i want to authenticate their access to the internet through squid_ldap_auth. the following error message appears in /var/log/squid/access.log: 2003/12/12 09:53:39| 0 Swapfile clashes avoided. 2003/12/12 09:53:39| Took 5.8 seconds ( 0.0 objects/sec). 2003/12/12 09:53:39| Beginning Validation Procedure 2003/12/12 09:53:39| Completed Validation Procedure 2003/12/12 09:53:39| Validated 0 Entries 2003/12/12 09:53:39| store_swap_size = 0k 2003/12/12 09:53:40| storeLateRelease: released 0 objects squid_ldap_auth: WARNING, could not bind to binddn 'Invalid credentials' squid_ldap_auth: WARNING, could not bind to binddn 'Invalid credentials' squid_ldap_auth: WARNING, could not bind to binddn 'Invalid credentials' please help me with this!!! regards, Victor Souza Menezes
[squid-users] authentication problem
hello, evereybory i hope somebody can help me!!! i am running squid-2.5.STABLE1-2 and having problems authenticating users against a win2000 ADS/LDAP directory.When installed win2000 i created the following domain: tre-pb.gov.br. I didn't create any organization unit, so the users that i created stays under the standard organization unit (Users). this is the line that i have in squid.conf to define the external helper: auth_param basic program /usr/lib/squid/squid_ldap_auth -b ou=Users, dc=tre-pb, dc=gov, dc=br -h 10.12.1.15 the following error message appears on /var/log/squid/access.log TCP_DENIED/407 1755 GET http://www.google.com. am i doing something wrong??? if so, please help me
