Hi, I have a Squid server configured to make querys in one ActiveDirectory server trough squid_ldap_group. The query it's OK and authenticated users can surf the web. But, my users need to put their users and password when open a browser. I my network the users use the windows authentication (format DOMAIN\user) and the query need to be only "user". I use the command in that way: external_acl_type InternetVIP %LOGIN /usr/lib/squid3/squid_ldap_group -S -d -b dc=enterprise,dc=com -D cn=support,cn=Users,dc=enterprise,dc=com -w 12345 -f (&(objectclass=person)(sAMAccountName=%v) memberof=ou=%a,ou=Vip,dc=enterprise,dc=com)) -h 192.168.2.1 My squid_ldap_auth line is: auth_param basic program /usr/lib/squid3/squid_ldap_auth -R -d -b dc=enterprise,dc=com -D cn=support,cn=Users,dc=enterprise,dc=com -w 12345 -f sAMAccountName=%s -h 192.168.2.1 Like i say before this works fine but the users need to put username and password always (if they can surf the web), How i can avoid that step???? In the manual of squid_ldap_group say that -S option split the DN and username but doesn't work. My SquidServer belong to Domain enterprise.com... Exist any other way to do that? I really appreciate your help!!!
