[squid-users] Re: LDAP authentication

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Fri, 21 Sep 2001 23:15:07 +0200

First you most likely need to get a more modern squid_ldap_auth. The
improved flexible version is available in Squid-2.4.STABLE2 and later
distributions, but works just fine with mostly any Squid version.

Second, you need to know the following details:

a) The base DN under which all your users are located

b) The name of the attribute (or attributes) storing the users login
name

c) Any additional criterias you have on user attributes for telling if
the user is a valid user for the proxy or not.

When you know all this, start by playing around with ldapsearch until
you have a search filter that can locate the valid user given his login
name. See RFC2254 for all gory details about LDAP searching (LDAP uses
some odd inverse polish notation logics..)

Regards
Henrik Nordstrom
Squid Hacker
MARA Systems AB, Sweden

Sinan ULKER wrote:
>
> Hi,
>
> We are using Squid 2.4 Stable 3 proxy server and LDAP authentication
>
> How can I authenticate user, if user attribute is "internet". Ex. user
> attribute name "title" value "internet"
>
> Regards
Received on Fri Sep 21 2001 - 16:12:25 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:02:27 MST