A little trick not in the man pages or the docs.
When testing squid_ldap_auth or squid_ldap_group from the unix (Linux) shell, you must pipe the username and password information into the program. This is what Squid itself does. This stumped me for a bit early on.
echo "<username> <password>" | squid_ldap_auth -options...
Otherwise, when testing all you will get is "ERR".
Tim
----------------------------------------------------------- Timothy E. Neto Computer Systems Engineer Komatsu Canada Limited Ph#: 905-625-6292 x265 1725B Sismet Road Fax: 905-625-6348 Mississauga, Canada E-Mail: [EMAIL PROTECTED] L4W 1P9 -----------------------------------------------------------
Rick Whitley wrote:
I got ldapsearch to work. I used the -x option to use a simple bind. Amazing how much you find out when you read "all" the options instead of stopping at the first one you need. Thanks for all the responses. Now I know that squid can communicate with ldap, but I still can't get a response from squid_ldap_auth. Here is my request:
squid_ldap_auth -b "ou=academics,o=dbu" -f "cn=whitleyr" -u cn -D "cn=LDAPUser,ou=users,o=dbu" -w "n0neshall" -h 10.5.10.215
When I execute this request nothing happens, if I hit enter again I get ERR. I have looked at the man pages for squid_ldap_auth but I don't see anything wrong with my request. I need other eyes to take a look at it.
thanks for your time.
rick... Rom.5:8
Henrik Nordstrom <[EMAIL PROTECTED]> 7/27/2004 5:24:30 PM >>>
On Tue, 27 Jul 2004, Rick Whitley wrote:
Thanks for the info. When I run ldapsearch I get the followingmessage:
SASL/EXTERNAL authentication started
ldap_sasl_interactive_bind_s: unknown authentication method (86)
additional info: SASL(-4): no mechanism available:
man ldapsearch, look for sasl.
(-x option)
Regards Henrik
