Hi Henrik,
Since our last conversation we have spent some time learning a bit more about how the squid_ldap_group authentication works. Now realize that the ldap group membership test does strip the domain as you said it does. My problem appears to be with the squid_ldap_auth as it does not appear to be able to strip the domain and I am trying to use both auth and group features together. I am still unsure as to whether I am using these modules in the correct way, if I am then I would need the auth module to strip the domain as well. I would appreciate any comments you would have about the way I am trying to do things. Thanks, Clayton York Barone, Budge & Dominick 011-5328577 -----Original Message----- From: Clayton York Sent: Thursday, July 16, 2009 10:26 AM To: 'Henrik Nordstrom' Cc: Squid Users Subject: RE: [squid-users] Help Please : NT Domain name stripping in squid_ldap_group Hi Henrik, We are running squid-2.6.STABLE21-3.el5. Clayton York -----Original Message----- From: Henrik Nordstrom [mailto:[email protected]] Sent: Thursday, July 16, 2009 8:58 AM To: Clayton York Cc: Squid Users Subject: RE: [squid-users] Help Please : NT Domain name stripping in squid_ldap_group ons 2009-07-15 klockan 11:07 +0200 skrev Clayton York: > Thanks for the feedback I have added values %u and %g as per below and > authentication is working when using the username and password but still > fails when using domain\username and password, ie still does not seem to be > stripping the domain name when I look at the access log file even though the > -S option is added. Which Squid version is your squid_ldap_group from? Note: access.log always shows the full username. The removal of the domain part is done by squid_ldap_group when checking the group membership only. Regards Henrik
