Re: [squid-users] squid_ldap_auth

From: Beth Lancaster <blancast@dont-contact.us>
Date: Tue, 02 Sep 2003 09:17:09 -0400

At 09:17 AM 9/2/2003 +0200, you wrote:
>On Monday 01 September 2003 22.10, Beth Lancaster wrote:
> > I am trying to get squid_ldap_auth to work from the command line
> > but am having no success.
> >
> > This works:
> > ldapsearch -H ldap://directory.somewhere.edu -x -b
> > ou=accounts,dc=vt,dc=edu -Z '(uupid=jdoe)'
>
>As you are not using ldaps:// try speficying the directory host name
>using the normal host option rather than as a URL (-h, or last on the
>command line). ldap:// URI in combination with STARTTLS (-Z option)
>has not been tested.

This may explain why it is not working. The LDAP server I need to
communicate is running LDAP version 3 with TLS. I have tried ldap:// and
ldaps:// without success.

I have also tried squid_ldap_group without success. Does anyone know of
some other app that can be used with squid to do LDAPv3 w/ TLS
authentication? Has anyone used a PHP script as a way to do authentication
with Squid?

Thank you

> > When I do the ldapsearch I see traffic via tcpdump, but I do not
> > see traffic with squid_ldap_auth. Does squid_ldap_auth log errors
> > or have a debug mode?
>
>It logs many unexpected errors on stdout such as when LDAP servers can
>not be reached etc but it could log more, especially relating to
>filter processing...
>
>Regards
>Henrik
>
>--
>Donations welcome if you consider my Free Squid support helpful.
>https://www.paypal.com/xclick/business=hno%40squid-cache.org
>
>If you need commercial Squid support or cost effective Squid or
>firewall appliances please refer to MARA Systems AB, Sweden
>http://www.marasystems.com/, info@marasystems.com
Received on Tue Sep 02 2003 - 07:17:18 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:19:29 MST