[squid-users] SSO for Win2k and Linux Clients using LDAP

Hello,

I'm currently building a Windows Domain Controller with samba3/openLDAP
backend and also maintain the unix accounts in that directory.

In our network we have Win2k (in that samba3 Domain) as well as openSuSE
Terminals (with user auth against the ldap dir).

Now how can I configure Squid in order to not ask again (after already
logging onto the machine) for user/pass but still have a user based logging.

Currently my squid config looks like this:

    auth_param basic program /usr/sbin/squid_ldap_auth -v 3 -d -b
    "dc=xxxxxxx,dc=xxxxxxx" -f "(uid=%s)" -D
    "cn=Manager,dc=xxxxxxx,dc=xxxxxxx" -w xxxxxxxx localhost:389
    auth_param basic children 20
    auth_param basic realm Squid proxy-caching web server
    auth_param basic credentialsttl 60 minutes

    ethernal_alc_type proxy_group %LOGIN /usr/sbin/squid_ldap_group -v
    -b "ou=Groups,dc=xxxxxxx,dc=xxxxxxx" -f "(&(cn=%a)(memberUid~=%u))"
    localhost:389

    acl ldap_password proxy_auth REQUIRED
    acl ldap_group external proxy_group SquidUsers

    http_access allow ldap_group

But obviously that will prompt the user for his credentials.

Note: We're using IE6/FF/Opera and for special users even Netscape (7 -
if i remember correctly).

Thank you for your help

Greetings
 Alexander
Received on Wed Aug 16 2006 - 09:33:39 MDT