Re: [squid-users] Fw: Ldap auth failed

From: James Wang <shunliang.wang@dont-contact.us>
Date: Fri, 4 Jul 2003 11:29:30 +0800

yes, I can connect to ldap through ldapbrowser.

I also checked mail list, someone say squid use ldap v2. Now my ldap can
support both v2 and v3. but the auth still failed.

There is something strange, I have a user named 'squid' under my base DN in
the ldap. With the IE6 auth prompt, when I type 'squid' in user name without
password, the access.log have a line like:
1057288290.574 290 192.168.1.23 TCP_DENIED/407 1717 GET
http://www.sina.com.cn/ squid NONE/- text/html
But, if I type both username and password, the log became:
1057288166.250 607 192.168.1.23 TCP_DENIED/407 1717 GET
http://www.sina.com.cn/ - NONE/- text/html

Do you think it can be encryption problem?

----- Original Message -----
From: "Tan Jun Min" <tanjm@sains.com.my>
To: "James Wang" <shunliang.wang@auchan.com.cn>
Sent: Friday, July 04, 2003 11:12 AM
Subject: Re: [squid-users] Fw: Ldap auth failed

> is your ldap server running properly??
> you can do a test by telneting to "ldap server ip" 389
>
> On Friday 04 July 2003 10:01 am, you wrote:
> > I checked cache.log, the helper started without error message.
> >
> > > Check your cache.log if any errors listed.
> > > This is usually because the ldap cannot initially properly.
> > >
> > > On Friday 04 July 2003 09:35 am, James Wang wrote:
> > > > Hi,
> > > >
> > > > Here is the config lines I add for ldap auth:
> > > >
> > > > auth_param basic program
/usr/local/squid/libexec/squid_ldap_auth -u
> >
> > cn -b
> >
> > > > cn=Users,dc=test,dc=com,dc=cn localhost
> > > > acl Authuser proxy_auth REQUIRED
> > > > http_access allow all Authuser
> > > >
> > > > When I try, There is authentication popup screen appeared, but the
> > > > authentication failed.
> > > >
> > > > The product I used is:
> > > > openldap-2.1.22
> > > > gdbm-1.8.3
> > > > squid-2.5.STABLE3
> > > >
> > > > Is there any thing I left?
> > > >
> > > > Regards
> > > > James
>
>
Received on Thu Jul 03 2003 - 21:28:44 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:17:49 MST