Re: [squid-users] squid_ldap_auth and -s sub

On Tuesday 01 July 2003 21.37, Estevam Viragh Junior wrote:
> Hello all,
>
> I'm having problems with the squid_ldap_auth module from
> squid-3.0.DEVEL-20030629.
> It does not seems to work with -s sub option.
> (I'm using this version cause I need LDAPv3.)
>
> Every thing works fine if I use:
>
> [root@rhapsody ~/sources]#./squid_ldap_auth -v 3 -b
> "ou=accounts,o=sitelbrasil.com.br"
> estevam.viragh 123
> OK

This is not using search mode. This finds the DN by just adding
uid=... to your specified DN.

> But, If I change the command line to:
>
> [root@rhapsody ~/sources]#./squid_ldap_auth -v 3 -b
> "ou=accounts,o=sitelbrasil.com.br" -s sub -f "(uid=%s)"
> renato.diniz 123
> ERR

Should work. "-s sub" is actually the default and does not need to be
specified. The important argument here is the -f argument.

Try manually searching for the user DN:

ldapserach -x -b "ou=accounts,o=sitelbrasil.com.br"
"(uid=renato.diniz)"

If this returns nothing then your directory probably does not allow
anonymous searches and you need to specify a DN and password
squid_ldap_auth should bind as while performing the search.

Regards
Henrik

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org
If you need commercial Squid support or cost effective Squid or
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, info@marasystems.com