Hi Jayesh

> I found 2 binaries ....
> - /usr/local/squid/bin/squid_auth_ldap and
> - /usr/lib/squid/squid_ldap_auth

Sounds like you have two seperate installs of squid. If you've compiled a 
current one yourself I would guess that the top one of those is the one 
you want. Our Red Hat boxes using the RH rpm build puts the files in 
/usr/lib/squid. You might want to be sure that you aren't running 
different bits of two different squid installs.

> Any idea, which one I should use and what's
> the correct syntex?

I would imagine that there are numerous different syntaxes that will work. 
The one I am using here is:

auth_param basic program /usr/lib/squid/squid_ldap_auth \
        -b "dc=salvesen,dc=com" \
        -D "cn=Ldap User,ou=users,dc=salvesen,dc=com" \
        -w password \
        -f 
"(&(CN=%s)(memberOf=CN=InternetUsers,DC=cs-plc,DC=salvesen,DC=com))" \
        -h 10.x.x.x

The filter we use as you can probably work out also only authenticates 
users that are a member of a specific group - InternetUsers. The user and 
password defined in -D and -w is just because we use AD and it disallows 
anonymous access to the directory.

HTH!
-- 
Ian Large <[EMAIL PROTECTED]>
IT Department, Christian Salvesen, Lodge Way,
New Duston, Northampton NN5 7SL, United Kingdom
Tel: +44 1604 737100 x760 Fax: +44 1604 737111



--------------------------------------------------------------------------------



For information on Christian Salvesen visit our website at www.salvesen.com.



The information contained in this e-mail is strictly confidential and for the 
use of the addressee only; it may also be legally privileged and / or price 
sensitive.  Notice is hereby given that any disclosure, use or copying of the 
information by anyone other than the intended recipient is prohibited and may 
be illegal.  If you have received this message in error, please notify the 
sender immediately by return e-mail.



Christian Salvesen has taken every reasonable precaution to ensure that any 
attachment to this e-mail has been swept for viruses.  However, we cannot 
accept liability for any damage sustained as a result of software viruses and 
would advise that you carry out your own virus checks before opening any 
attachment.



Christian Salvesen is a trading name of the Christian Salvesen Group.  
Christian Salvesen PLC (Company number SC7173) is the ultimate holding company 
within the Christian Salvesen Group whose registered office is at 16 Charlotte 
Square, Edinburgh EH2 4DF.

Reply via email to