On Thu, 2008-03-20 at 10:39 +0200, Dmitry SUROVTSEV wrote:
> Ok, thank you for explanation.
> But I still do not understand why squid_ldap_group does not work
> without -R option. And how to force it to make a real request to PDC,
> not just serch top-level groups...
Here is some speculations:
a) Perhaps the base DN or access protocol you have given is not proper.
b) squid_ldap_auth by default searches the whole tree below the given
base DN, but maybe your other groups is elsewhere in your LDAP tree?
It's very hard to answer these questions without also seeing the data in
your LDAP server, base DNs, what the redirects looks like etc. I would
recommend you to explote the LDAP server a bit using OpenLDAP
ldapsearch, this behaves pretty much the same as squid_ldap_auth.
Regards
Henrik
Received on Thu Mar 20 2008 - 15:59:48 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Apr 01 2008 - 13:00:05 MDT