Search squid archive

Re[2]: Squid Authentication + ldap/samba

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello Duarte,

Thursday, May 10, 2007, 2:09:05 PM, you wrote:

> Hi,

> i really wanna is to authenticated on ldap, but the browser not to show
> a pop-up,
>  it's possible? samba ( maybe ntlm ?)

I gave you working configuration. Just forgot about -v 3 option. :)

> what does the [skipped], does ?

Line from standard Squid's config.

Show
tail -f /path/to/squid.conf
tail -f /path/to/slapd.conf

?

> thanks

> Sergey A. Kobzar wrote:
>> Hello Duarte,
>>
>> If you want authenticate users from LDAP only, this configuration is
>> enough:
>>
>> auth_param basic program /usr/local/libexec/squid/squid_ldap_auth -b "ou=People,dc=test,dc=com" ldap.test.com
>> auth_param basic children 5
>> auth_param basic realm Squid proxy-caching web server
>> [skipped]
>> acl ldap_users proxy_auth REQUIRED
>> [skipped]
>> http_access allow ldap_users
>>
>>
>> Thursday, May 10, 2007, 1:17:34 PM, you wrote:
>>
>>   
>>> Hi there
>>>     
>>
>>   
>>> I´m trying to set up squid whit authentication, but i would need it 
>>> asking the user the credencials.
>>>     
>>
>>   
>>> Allrdy set up an "squid_ldap_auth" but a login prompt comes, every time.
>>>     
>>
>>   
>>> trying now with "squid_ldap_group", but still nothing, from the Unix 
>>> prompt i can authenticate a user whit some filter. where some info :
>>>     
>>
>>   
>>> Squid.conf
>>> -------
>>> *external_acl_type InetGroup %LOGIN 
>>> /usr/local/libexec/squid/squid_ldap_group -R -b "dc=pnp,dc=com" -f 
>>> "(&(uid=%u)(gidNumber=%g)(homePhone=1))" -v 3
>>>     
>>
>>   
>>> acl InetAccess external InetGroup 513
>>> http_access allow InetAccess
>>> -------
>>> *Ldap info
>>> -----
>>> ldapsearch -vLx -b "dc=pnp,dc=com" "(uid=duarte)"
>>>     
>>
>>   
>>> result :
>>> # duarte, Users, pnp.com
>>> dn: uid=duarte,ou=Users,dc=pnp,dc=com
>>> objectClass: top
>>> objectClass: person
>>> ...
>>>     
>>
>>   
>>> sn: duarte
>>> givenName: duarte
>>> uid: duarte
>>> uidNumber: 1002
>>> gidNumber: 513
>>> ...
>>>     
>>
>>   
>>> # numResponses: 2
>>> # numEntries: 1
>>> ------
>>>  From the prompt on Unix :
>>> /usr/local/libexec/squid/squid_ldap_group -R -b "dc=pnp,dc=com" -f 
>>> "(&(uid=%u)(gidNumber=%g))" -v 3
>>> duarte 513
>>> OK
>>>     
>>
>>
>>   
>>> so my question is.. whit the browser not authenticating whit squid ?
>>>     
>>
>>   
>>> Thanks in advance.
>>>     
>>
>>
>>
>>
>>
>>
>>
>>
>>   



-- 
Best regards,
 Sergey                            mailto:ksa@xxxxxxxx



[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux