Hello!
I am using squid-2.5.STABLE5-42.21 to access openldap2-2.2.27-6 LDAPv3.
I am running SuSE which includes 2 versions of squid ldap auth via RPM.
they are:
:~ # which squid_ldap_auth
/usr/sbin/squid_ldap_auth
:~ # which squid_ldapauth
/usr/sbin/squid_ldapauth
In trying to test the commands from the cli, I can get squid_ldapauth to
connect to the server via test account with an /etc/squid_ldapauth.conf
file of:
#
ldap-server : pdc.wackyworld.tv
ldap-port : 389
ldap-suffix : dc=wackyworld,dc=tv
ldap-filter : (uid=%s)
ldap-passwdfield: userPassword
ldap-binddn : uid=bobo,ou=Users,dc=wackyworld,dc=tv
ldap-password : bobo1
but I get this in the logs:
Jul 21 14:39:45 pdc slapd[26580]: conn=739 fd=16 ACCEPT from
IP=#removed#:38137 (IP=0.0.0.0:389)
Jul 21 14:39:45 pdc slapd[26580]: conn=739 op=0 BIND
dn="uid=bobo,ou=Users,dc=wackyworld,dc=tv" method=128
Jul 21 14:39:45 pdc slapd[26580]: conn=739 op=0 RESULT tag=97 err=2
text=historical protocol version requested, use LDAPv3 instead
Jul 21 14:39:45 pdc slapd[26580]: conn=739 fd=16 closed
So it's trying LDAPv2.
The only options for this command are
usage: squid_ldapauth [-h] [-v] [-q] [-l]
-h this help text
-v verbose mode - default is off
-q log queries - default is off
-l togle usage of syslog - default is on
so I can't use v3.
the other command:
squid_ldap_auth never connects. It just sits at a new line and never
returns to the prompt without a ctrl-c. I've tried many different
variations of:
squid_ldap_auth -b "ou=Users,dc=wackyworld,dc=tv" -s sub -h
pdc.wackyworld.tv -p 389 -v 3 -f "uid=%s"
including using several -D dn's -w "passwords" that are acl'd in LDAP
for all access. Still no connect in the LDAP logs and the program hangs
at a new line.
Any Ideas? I can ldapsearch with success all day from the same machine
squid resides on. It works fine. Why won't squid_ldap_auth connect?
How can I debug? I see nothing in syslog and the man page says:
--snip--
Debug mode where each step taken will get reported in detail.
Useful for understanding what goes wrong if the results is
not what is expected.
--/snip--
at the end but no option flag is listed. I've tried strace but see
nothing useful.
Thanks.
Mike Branda
