Re: [squid-users] Squid 2.5Stable2 with LDAP and Active Directory

From: Henrik Nordstrom <hno@dont-contact.us>
Date: 19 May 2003 19:09:13 +0200

mån 2003-05-19 klockan 17.09 skrev Arne Tiedemann:

> squid_ldap_auth ... -f "(&(uid=%s)(GL-InternetAdmin=enabled))" ...

> squid_ldap_group ... -f (&(cn=%u)(memberOf=%g)) -F %s

These does not match... the -F argument to squid_ldap_group should be
the same as the -f argument to squid_ldap_auth, but based on your filter
you should not be using the -F at all but instead simply make sure the
user has the correct memberOf attribute... -f "(&(uid=%s)(memberOf=%g))"

-F is used when you want to look up if the users DN is member of a
certain group object, not when looking into attributes of the user
object.

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org
Please consult the Squid FAQ and other available documentation before
asking Squid questions, and use the squid-users mailing-list when no
answer can be found. Private support questions is only answered
for a fee or as part of a commercial Squid support contract.
If you need commercial Squid support or cost effective Squid and
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, info@marasystems.com
Received on Mon May 19 2003 - 11:09:19 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:16:45 MST