Search squid archive

Squid and LDAP authentication

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,

I'm trying to get LDAP authentication working on my squid proxy.  Now
ideally I would like to only allow users in a certain group (namely,
cn=squid,ou=Group,dc=ph,dc=sun,dc=ac,dc=za which is a groupOfUniqueNames
(does this work or must I use an objectClass=posixGroup?) to
authenticate and use the proxy.  How would I go about doing this?  I've
added the following lines to my squid.conf file:

auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hour
auth_param basic casesensitive off
auth_param basic program /usr/lib/squid/squid_ldap_auth -b
"ou=People,dc=ph,dc=sun,dc=ac,dc=za" -f "cn=squid" -s sub
fsk.ph.sun.ac.za

external_acl_type ldap_group %LOGIN /usr/lib/squid/squid_ldap_group -ZZ
-b "ou=Group,dc=ph,dc=sun,dc=ac,dc=za" -f
"(&(objectclass=groupOfUniqueNames)(cn=%a)(uniqueMember=%v))" -B
"ou=People,dc=ph,dc=sun,dc=ac,dc=za" -F uid="%s" fsk.ph.sun.ac.za

acl password proxy_auth REQUIRED
acl password_group external ldap_group squid
http_access allow password_group

Any help would be appreciated!

Thanks
Nolan


[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux