Re: [squid-users] LDAP authentication

Hi,

Il 16.23 09/04/2002 Ciocanel Andreea ha scritto:

>Hello,
>I'm trying to authenticate users from a Win 2000 domain,using LDAP.
>
>I installed openldap on the machine,squid is configured with
>--enable-auth="basic" --enable-auth-modules="LDAP"
>(--enable-basic-auth-helpers="LDAP").
>
>I can access Internet without:
>
> acl auth_users proxy_auth REQUIRED
> and
> http_access allow auth_users
>so squid.conf is ok, the only problem is with LDAP authentication.
>
>in squid.conf I have a line:
>
>auth_param basic program /usr/local/squid/libexec/squid_ldap_auth
>/usr/local/squid/etc/squid_ldap_auth.conf (the paths are correct and in
>squid_ldap_auth.conf i set the ldap server and ou and dc ).
>
>If I try to connect to internet the authentication window appears, I see in
>access.log that a user tried to authenticate,but I cannot connect to
>internet....the window is still there,asking for a user and a password.
>
>i'm sure that the password is correct,i tried using only the username,and
>username@domain.com....
>
>
>But still not working,
>
>Thank you in advance,
>
>Andreea Ciocanel

Your syntax is wrong: to authenticate against an Active Directory You must
specify in the LDAP query something like (plus any OU):

cn=username,cn=Users,dc=yourdomain,dc=com

Regards

Guido

>System engineer
>Siemens VDO Automotive SRL
>Calea Martirilor Nr.1, 1900 Timisoara, Romania
>Tel: +40 (0) 56 308220
>Fax: +40 (0) 56 294440

-
=======================================================
Serassio Guido
Via Albenga, 11/4 10134 - Torino - ITALY
E-mail: guido.serassio@serassio.it
WWW: http://www.serassio.it
Received on Tue Apr 09 2002 - 10:55:05 MDT