[squid-users] Eliminate PopUP authentication for web Windows Users

From: Carlos Daniel Perez <krlosdaniel21_at_gmail.com>
Date: Thu, 21 Mar 2013 17:15:11 -0430

Hi,

I have a Squid server configured to make querys in one ActiveDirectory
server trough squid_ldap_group. The query it's OK and authenticated users
can surf the web. But, my users need to put their users and password when
open a browser.

I my network the users use the windows authentication (format DOMAIN\user)
and the query need to be only "user".

I use the command in that way: external_acl_type InternetVIP %LOGIN
/usr/lib/squid3/squid_ldap_group -S -d -b dc=enterprise,dc=com -D
cn=support,cn=Users,dc=enterprise,dc=com -w 12345 -f
(&(objectclass=person)(sAMAccountName=%v)
memberof=ou=%a,ou=Vip,dc=enterprise,dc=com)) -h 192.168.2.1

My squid_ldap_auth line is: auth_param basic program
/usr/lib/squid3/squid_ldap_auth -R -d -b dc=enterprise,dc=com -D
cn=support,cn=Users,dc=enterprise,dc=com -w 12345 -f sAMAccountName=%s
-h
192.168.2.1

Like i say before this works fine but the users need to put username and
password always (if they can surf the web), How i can avoid that step????

In the manual of squid_ldap_group say that -S option split the DN and
username but doesn't work.

My SquidServer belong to Domain enterprise.com...

Exist any other way to do that?

I really appreciate your help!!!
Received on Thu Mar 21 2013 - 21:45:19 MDT

This archive was generated by hypermail 2.2.0 : Fri Mar 22 2013 - 12:00:05 MDT