Ok, letÂs start with a general question: does squid work with ldap auth and active directory 2008 R2??? is there someone that has kind of experience with that??? Thanks jcasale: yes we upgraded the domain from 2003 to 2008 R2, all domain controller (2 per each subdomain exactely like before in 2003), for sure got other name and ip address and for sure I changed already the configuration of squid. The firewall was the first think I looked at: itÂs compleately turned off! The strange thing is that if I run the helper from shell, it works perfectly, instead when itÂs called from the configuration it does not work. I guess, if in general squid and ldap would work with 2008 R2, there must be something to consider and to include eventually in the configuration of squid, for this reason IÂm asking help. If would be not possible with ldap, I would appreciate help also for other authentication already tested in 2008 R2 environment. Thanks in advance. >----Messaggio originale---- >Da: jcasale@xxxxxxxxxxxxxxxxx >Data: 20-gen-2011 17.13 >A: "squid-users@squid-cache. org"<squid-users@xxxxxxxxxxxxxxx> >Ogg: RE: R: RE: [squid-users] Squid - ldap auth against active directory 2008 R2 > >>As I >>said: with AD 2003 was working well, now with AD2008 is not working.... > >That doesnât help us, so you upgraded the domain? Regardless, you're not >auth'ing to the "same" server so something changed. > >>auth_param basic >>program usr/sbin/squid_ldap_auth -d -v "3" -s "sub" -b "dc=example, dc=org" -D >>" cn=example-Auth-User,ou=konten,ou=User city,dc=city,dc=example,dc=org" -w >>" fffff" -f "sAMAccountName=%s" -h "ldapserver.ab.example.org" -p "3268" > >Check the firewall on the 2008 server, it may not be allowing connections to that >port for example. > >More specifically, are you intentionally querying the GC port versus the LDAP port? >As I donât know your topology, that may not have a view of what you are looking for... >