Search squid archive

Re: squid 3.5x: Active Directory accounts with space issue

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




Le 26/11/2014 11:27, Amos Jeffries a écrit :
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 24/11/2014 12:01 a.m., David Touzeau wrote:
Hi

We have connected 3.5.0.2-20141121-r13666 with Active Directory. It
seems where there are spaces in login account squid use only the
last argument.

For example for an account "Jhon smith" squid use "smith" only For
example for an account "Dr Jhon smith" squid use "smith" only

In 3.3.13 there is no such issue, a "Jhon smith" account is logged
as "Jhon smith" and sended as Jhon%20smith to helpers
Any information about the auth Scheme being performed?
  the helpers being used?
  and what is being sent to/from the helpers in 3.5 different from the
3.3 version?

Amos

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (MingW32)

iQEcBAEBAgAGBQJUdasMAAoJELJo5wb/XPRjRPUH/2aVKrtNdmJzupzsN9JtcOK0
1e+NIxNSaDiyu9R03eJrwlAy7g9zFGEj+0dI1HgJz36Mf2i03ahbyinD4GwFDVPh
a6iYyCPrhy2XDeL16qcSqsX0i2e8yXO/WRbFTJymKMOFhVDS05Bg6KuE1FroNjHG
OkhpzN/T3O1fUW2k0XSRZEWFV1YnriwcCLdKXdsXEXEIIA3J9ZN0WQZ8I/oGXfWV
S4xHKh4jnDFJCEO5lwYxT1CDe53CCHnPfV9Uf1Dhq6AkKnDZAR8U53Uyhji4V6ck
UzwZEPMAtK73O3uXn0J2l2S9v0ga5ymHRhiWADG2jC/8dyAc0ICaWFjK7o6wMfE=
=GaV2
-----END PGP SIGNATURE-----
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users
Hi

I'm using this method

auth_param ntlm program /usr/bin/ntlm_auth --domain=TOUZEAU.BIZ --helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 25 startup=5 idle=1
auth_param ntlm keep_alive off
#Dynamic ACLs groups Enabled: [1]
external_acl_type ads_group ttl=3600 children-max=5 children-startup=1 children-idle=1 %LOGIN /usr/share/artica-postfix/external_acl_squid_ldap.php
#Other settings
authenticate_ttl 1 hour
authenticate_cache_garbage_interval 10 seconds
authenticate_ip_ttl 60 seconds
# END NTLM Parameters --------------------------------
#Basic authentication for other browser that did not supports NTLM: (KerbAuthMethod = ) auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic
auth_param basic children 3 startup=1 idle=1
auth_param basic realm Basic Identification
auth_param basic credentialsttl 2 hours


On 3.3.13, everything works as expected.
On 3.5x LOGIN are truncated where there is space on account.

I have tested by removing external_acl_type ads_group, no change issue is still displayed.






_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users





[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux