Dear Amos, Thanks and really apprecite for ur quick reply i will try the link and n check it out. me too a novice in Ldap n not a professional in ADS regards simon > Benedict simon wrote: >> Dear All, >> >> >> i have squid Proxy server on Centos 5 working perfectly for a quite >> sometime and now we would like to have squid authenticating with ADS for >> more control . >> so that only users that have logged into domain are asked allowed for >> internet and others who dont log in have internet access denied but only >> local network services avaliable. >> i am not a professional in ADS so wd really apprecite your help >> i have been googling arround and tried but was only able to authenticate >> with squid by getting the popup window but not accept the password. >> i would like plain text authentication since i guess its the easiest one >> >> the setup >> >> Centos 5 >> Squid stable 2.6 >> >> the domain is ADS WINDOWS 2003 >> Domain Name: baladia.local >> computer name :kmun >> >> jus cut and paste some squid entries . >> >> >> auth_param basic program /usr/lib/squid/squid_ldap_auth -R -b >> "dc=baladia,dc=local" -D "cn=Administrator,cn=Users,dc=baladia,dc=local" >> -w "xxxx" -f sAMAccountName=%s -h 172.16.2.227 >> auth_param basic children 5 >> auth_param basic realm PROXY SERVER >> auth_param basic credentialsttl 5 minutes >> >> where xxxx is the administrtor password >> 172.16.2.227 is the IP address of the domain >> >> will the above help me to authenticate user with ADS >> >> when i log into the domain and user my browser the window pops up but >> when >> i enter the username and password it ask me the same dialog again >> >> also if i dont log into domain its the same >> >> the squid accesslog error is >> >> 1237471571.612 13 xx.xx.xx.xx TCP_DENIED/407 1761 GET >> http://vcs2.msg.yahoo.com/capacity testuser >> >> where testuser is the username on my domain >> >> apprecite if someone can help me with example or some links with >> examples >> >> thanks and really wd apprecite your kinf help >> > > http://wiki.squid-cache.org/ConfigExamples has a section for > authentication templates and how-tos. > > I'm not clued up on LDAP or AD requirements so can;t help any further on > this. > > Amos > -- > Please be using > Current Stable Squid 2.7.STABLE6 or 3.0.STABLE13 > Current Beta Squid 3.1.0.6 > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > -- Network ADMIN ------------- KUWAIT MUNICIPALITY: -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
