Re: squid 3.1 ldap authentication

[Eliezer Croitoru <eliezer@xxxxxxxxxxxx>]

Hey Nando,

Can you test something?
On 25/01/2016 17:52, nando mendonca wrote:

external_acl_type ldap_group %LOGIN /usr/local/squid1/libexec/ext_ldap_group_acl -R -b "ou=groups,dc=gcsldap,dc=corp,dc=domain,dc=com" -D "cn=cost,ou=admin,dc=gcsldap,dc=corp,dc=domain,dc=com" -f "(&(memberuid=%u) (cn=%a))" -w password -h ldap.corp.domain.com

In the above replace the "%LOGIN" with "%un"  and see what happens.
The differences are mentioned at: http://www.squid-cache.org/Doc/config/external_acl_type/

Also comparing your command to what I have tested with I see something different.
My test command can be seen in this ML thread:
- http://lists.squid-cache.org/pipermail/squid-users/2015-July/004874.html
I do not have the executable in my hands so I don't know the meaning of  the "-R" flag and compared to the command I have used it's different.

Try the above and we will see the results,
Eliezer

_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users