[squid-users] WG: ldap_group_helper crashing-too-rapidly

From: <martin.mueller@dont-contact.us>
Date: Mon, 30 May 2005 13:18:59 +0200

dc1 is the hostname of oure windows 2003 domain controller, so dc=dc1 should
be correct. i changed the auth_param basic value to this:

squid_ldap_auth -b "ou=Benutzer,ou=99,dc=dc1" -D
"cn=Administrator,ou=Domanen-Admins,dc=dc1" -w /etc/password-file -f
"SamAccountName=%s"

when i try to use this commando from the command line, i receive the
following error when i enter a working user/password combination:

        squid_ldap_auth: WARNING, could not bind to binddn 'Can't contact
LDAP server'
        ERR

i think this should be a problem with the user Administrator in the ou
"Domanen-Admins"

> -----Ursprungliche Nachricht-----
> Von: Henrik Nordstrom [mailto:hno@squid-cache.org]
> Gesendet: Montag, 30. Mai 2005 12:38
> An: martin.mueller@stadt.wolfsburg.de
> Cc: Squid Users
> Betreff: Re: ldap_group_helper crashing-too-rapidly
>
>
> Please send questions to the squid-users mailinglist, not in private.
>
>
> On Mon, 30 May 2005 martin.mueller@stadt.wolfsburg.de wrote:
>
> > auth_param basic program
> /usr/local/squid/libexec/squid_ldap_auth -b
> > "ou=testOU,dc=dc1,dc=test.domain.de" -w PASSWORD -f
> "SamAccountName=%s"
>
> This is not correct... needs to at least be a server name in there...
>
> > external_acl_type ldap_group_helper %LOGIN
> > /usr/local/squid/libexec/squid_ldap_group -b
> > "ou=testOU,dc=test,dc=domain,dc=de" dc1.test.domain.de
>
> This too isn't correct. See the man page.
>
> A lot of what you have in squid_ldap_auth needs to be copied
> here with
> slightly different options
>
>
> Also see your cache.log for error messages close to where it
> is starting
> the helper(s) in question.
>
> Regards
> Henrik
>
Received on Mon May 30 2005 - 05:18:48 MDT

This archive was generated by hypermail pre-2.1.9 : Wed Jun 01 2005 - 12:00:04 MDT