On Tuesday 19 August 2003 16.21, Arias, Sebastian Alejandro - (Ext 
Arg) wrote:

> Could you give me some help to use the squid_ldap_auth? ... -I
> tried with this before but I didn't succeed, that's why I'm using
> ldap_auth-
>
> CN=user name,OU=it,OU=sys,OU=user accounts,dc=ar,dc=domain,dc=com


If all your users are direclty below ou=it then all you need is 

  -u cn -b "OU=it,OU=sys,OU=user accounts,dc=ar,dc=domain,dc=com"

Which will tell Squid that the users DN is always on the form

  cn=<username>,OU=it,OU=sys,OU=user accounts,dc=ar,dc=domain,dc=com


If your users are distributed in multiple OUs then you need to search 
for the users DN with the -f argument, probably something like

  -b "OU=user accounts,dc=ar,dc=domain,dc=com" -f 
"(&(objectClass=Person)(CN=%s))"

Other filters are possible, mainly depending on the structure of the 
user objects in your LDAP tree and what LDAP attribute you want to 
use for the login name.


If you have further question regarding the squid_ldap_auth helper 
please use the squid-users mailinglist.


Regards
Henrik

Reply via email to