On Thu, 26 May 2005, D & E Radel wrote:

Sorry, but I am not familiar with OpenLDAP. I have only gotten this to work with Server 2003 Active Directory. Maybe someone else reading this can help. I am not sure what you will need for the "-f" parameter. Try this for some examples though:

  http://www.die.net/doc/linux/man/man8/squid_ldap_auth.8.html

this man page is included with the Squid distribution. I would recommend reading the man page for the version you are using, not some other random version found out on the Internet.

I have read of people doing it this way:
  authenticate_program /usr/local/squid/bin/ldap_auth
  authenticate_options ldap.yourdomain.com 389 dc=yourdomain,dc=com uid
  authenticate_children 2


This syntax is for Squid-2.4 or earlier, and showing the use of the third-party ldap_auth helper, not squid_ldap_auth shipped with Squid.

Squid-2.5 uses

auth_param basic program /path/to/squid_ldap_auth options...

Modify the script and re-run until you get it working. Saves alot of typing errors on the commandline. Probably not the most elegant way of writing the script, but it works for me. :-)

The script can be simplified to just

#!/bin/sh
/path/to/squid_ldap_auth options...

Regards
Henrik

Reply via email to