Ok, let´s start with a general question:

does squid work with ldap auth and 
active directory 2008 R2???
is there someone that has kind of experience with 
that???

Thanks jcasale: yes we upgraded the domain from 2003 to 2008 R2, all 
domain controller (2 per each subdomain exactely like before in 2003), for sure 
got other name and ip address and for sure I changed already the configuration 
of squid.
The firewall was the first think I looked at: it´s compleately turned 
off!

The strange thing is that if I run the helper from shell, it works 
perfectly, instead when it´s called from the configuration it does not work.

I 
guess, if in general squid and ldap would work with 2008 R2, there must be 
something to consider and to include eventually in the configuration of squid, 
for this reason I´m asking help.
If would be not possible with ldap, I would 
appreciate help also for other authentication already tested in 2008 R2 
environment.

Thanks in advance.


>----Messaggio originale----
>Da: 
jcas...@activenetwerx.com
>Data: 20-gen-2011 17.13
>A: "squid-users@squid-cache.
org"<squid-users@squid-cache.org>
>Ogg: RE: [squid-users] R: RE: [squid-users] 
Squid - ldap auth against active directory 2008 R2
>
>>As I 
>>said: with AD 
2003 was working well, now with AD2008 is not working....
>
>That doesn’t help 
us, so you upgraded the domain? Regardless, you're not
>auth'ing to the "same" 
server so something changed.
>
>>auth_param basic 
>>program 
usr/sbin/squid_ldap_auth -d -v "3" -s "sub" -b "dc=example, dc=org" -D 
>>"
cn=example-Auth-User,ou=konten,ou=User city,dc=city,dc=example,dc=org" -w 
>>"
fffff" -f "sAMAccountName=%s" -h "ldapserver.ab.example.org" -p "3268"
>
>Check 
the firewall on the 2008 server, it may not be allowing connections to that

>port for example.
>
>More specifically, are you intentionally querying the GC 
port versus the LDAP port?
>As I don’t know your topology, that may not have a 
view of what you are looking for...
>

                                                                                
                                                                      

Reply via email to