==============================================================================
Some hints for installing squid_ldap_auth (squid 2.5 Stable 12) on Tru64 5.1A
==============================================================================
(1) Install OpenLDAP
IAEOLDAP590 installed OpenLDAP 2.0.23 (Directory Services)
(2) Squid: make configure
cd /usr/local/squid-2.5.STABLE12
./configure --enable-auth="ntlm,basic" \
--enable-external-acl-helpers="winbind_group,ldap_group" \
--enable-basic-auth-helpers="winbind,LDAP" \
--enable-ntlm-auth-helpers="winbind" \
--prefix=/usr/local/squid
(3) find out the location of the file ldap.h
On my machine directory /usr/internet/openldap/include
copy all files of this directory to
/usr/local/squid-2.5.STABLE12/helpers/external_acl/ldap_group
edit /usr/local/squid-2.5.STABLE12/helpers/external_acl/ldap_group/Makefile:
LIBS = -L/usr/internet/openldap/lib -lldap -llber
find out the location of the file libldap.so
On my machine directory /usr/internet/openldap/lib
copy all files *.so of this directory to /usr/lib
(4) Squid: make all
make install
---------------------------------------------------------------------------------
Now squid_ldap_auth is running well.
It would be nice if someone can give me sone hints how I can test squid_ldap_auth
interactive without squid.
I tried:
/usr/local/squid/libexec/squid_ldap_auth \
-b o=<LOCATION> \
-h <ip> \
-D "cn=<adminuseer>,cn=Users,dc=emea,dc=zf-world,dc=com" \
-w "<password of adminuser>" \
-b "dc=emea,dc=zf-world,dc=com" -f sAMAccountName=%s
and entered <username><blank><password>
miller secret
In all cases this leads to
squid_ldap_auth: WARNING, could not bind to binddn 'Invalid credentials'
ERR Success
Question 1: Something wrong with the syntax above?
Question 2: Is it ok to enter <username><blank><password> ?
Werner Rost
