Hello, the feedback after using -d
[EMAIL PROTECTED] libexec]# ./squid_ldap_auth -d -R -b "dc=mtuzhuhai,dc=com" -D "cn=zpc9998t,ou=it,dc=mtuzhuhai,dc=com" -w abcdefg -h 53.12.2.13 -p 389 -f "(&(sAMAccountName=%s)(objectclass=user))" zpc9996t secretpassword user filter '(&(sAMAccountName=zpc9996t)(objectclass=user))', searchbase 'dc=mtuzhuhai,dc=com' attempting to bind to user 'CN=ZPC9996T,OU=IT,DC=mtuzhuhai,DC=com' OK yke0155 secretpassword user filter '(&(sAMAccountName=yke0155)(objectclass=user))', searchbase 'dc=mtuzhuhai,dc=com' attempting to bind to user 'CN=???,OU=IT,DC=mtuzhuhai,DC=com' ERR 1) User CN is all 6 octets, then mean user DN will not be short than 256 octets. 2) ??? should be chinese Thanks David -----Original Message----- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: 2004年7月28日 6:36 To: Huang, David (黄运胜) Cc: [EMAIL PROTECTED] Subject: RE: [squid-users] RE: User with Chinese LDAP CN does not work On Tue, 27 Jul 2004, Huang, David wrote: > For users with Chinese LDAP CN name in the windows 2000 AD, I tried > squid_ldap_auth in the commmand line, but it does not work, I guess > this is not a problem with IE setting, > > auth_param basic program /usr/lib/squid/squid_ldap_auth -R -b > "dc=mtuzhuhai,dc=com" -D "cn =zpc9998t,ou=it,dc=mtuzhuhai,dc=com" -w > abcdefg -f "(&(sAMAccountName=%s)(obje ctclass=user))" -h 53.12.2.13 > -p 389 -s sub -P yke0155 secretpassword ERR This indeed rules out any browser dependencies. How long is the users DN in UTF-8? There is a upper limit of 256 octets in squid_ldap_auth, maybe this is the problem? Try using the '-d' option to make squid_ldap_auth a bit more verbose about what it is doing. Regards Henrik
