Hai, You are probely missing in you smb.conf: ntlm auth = yes Greetz, Louis
Van: squid-users [mailto:[email protected]] Namens Ilias Clifton Verzonden: woensdag 29 mei 2019 6:42 Aan: [email protected] Onderwerp: [squid-users] LDAP authentication from android and iphones Hi All, I have Squid 3.5.27 running on Ubuntu 18.04.2, and have been unsuccesfull in being able to authenticate users via ldap (kerberos is working well) Currently it's iphone and android users that are having the issue - all other users are authenticating via kerberos. In squid.conf, I have: auth_param basic program /usr/lib/squid/basic_ldap_auth -d -R -b "OU=users,DC=domain,DC=com" -D [email protected] -W /etc/squid/ldappass.txt -f sAMAccountName=%s -h dc.domain.com When a user attempts to browse via the proxy, I see in access.log: 1559096820.116 0 10.99.88.77 TCP_DENIED/407 2248 GET http://www.google.com - HIER_NONE/- text/html And the user is prompted for a username and password.. I then see in cache.log: basic_ldap_auth.cc(691): pid=32625 :user filter 'sAMAccountName=username', searchbase 'OU=users,DC=domain,DC=com' basic_ldap_auth.cc(746): pid=32625 :attempting to authenticate user 'CN=Users Fullname,OU=users,DC=domain,DC=com' But the user just keeps getting prompted for username and password over and over, and I continue to see: 1559096820.116 0 10.99.88.77 TCP_DENIED/407 2248 GET http://www.google.com - HIER_NONE/- text/html If I run the following on the command line, it appears to authenticate correctly: /usr/lib/squid/basic_ldap_auth -d -R -b "OU=users,DC=domain,DC=com" -D [email protected] -W /etc/squid/ldappass.txt -f sAMAccountName=%s -h dc.domain.com username password basic_ldap_auth.cc(691): pid=32625 :user filter 'sAMAccountName=username', searchbase 'OU=users,DC=domain,DC=com' basic_ldap_auth.cc(746): pid=32625 :attempting to authenticate user 'CN=Users Fullname,OU=users,DC=domain,DC=com' OK What else can I do for troubleshooting?
_______________________________________________ squid-users mailing list [email protected] http://lists.squid-cache.org/listinfo/squid-users
