Re: [squid-users] LDAP tree with several branches

tor 2003-06-05 klockan 14.11 skrev Louis Poncin:
> HI,
>
> I have installed Squid-2.5.STABLE2 on an RedHat Advanced Server.
> Until now we authenticated our users via LDAP with squid_ldap_auth. It
> worked fined as long as we interrogating only one branch of our LDAP tree
>
> Here is our LDAP configuration :
>
> ou=Entity1, ou=public
> /
> c=fr, o=cnamts, - ou=Entity2, ou=public
> \
> ou=Entity3, ou=public

Are these different LDAP databases (suffix configuration in slapd.conf),
or just branches within the same database?

> I though I read squid_ldap_auth could only cope with one LDAP-branch. Is
> that correct or it is possible to work with several branches ?

It can only cope with a single database, but with as many subtrees as
you like within that database.

Or to be more precise, it must be able to issue a single search command
to the LDAP server, covering all your users or groups.

Note: You need to use the search mode of squid_ldap_auth. See the -f
argument.

Regards
Henrik

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org
Please consult the Squid FAQ and other available documentation before
asking Squid questions, and use the squid-users mailing-list when no
answer can be found. Private support questions is only answered
for a fee or as part of a commercial Squid support contract.
If you need commercial Squid support or cost effective Squid and
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, info@marasystems.com