Re: [squid-users] Squid + LDAp

2009-12-02 Thread Kinkie
On Wed, Dec 2, 2009 at 4:52 PM, Dominguez, Gaston Matias wrote: > Hi people, > > I want to know how to configure a squid server with ldap. > > Someone can help me. http://wiki.squid-cache.org/ConfigExamples/Authenticate/Ldap http://wiki.squid-cache.org/HelpOnAuthentication/LDAP http://wiki.squid-

Re: [squid-users] Squid + LDAP

2009-12-09 Thread Jose Ildefonso Camargo Tolosa
Hi! Sure: the DN syntax that squid is sending to the LDAP is invalid. without your config, there is nothing more I can say (for me: it just worked!). I hope this helps, Ildefonso Camargo On Wed, Dec 9, 2009 at 8:57 AM, Dominguez, Gaston Matias wrote: > Hi people > > I having troubles with

RE: [squid-users] squid+ldap

2005-04-13 Thread Elsen Marc
> Hi > > I am Using mandrake linux with squid2.5.STABLE4-1mdk .I want > to configure user > authentication in squid.we have separate ldap server is > there.can any one help > me. > Check the SQUID FAQ on this and related issues. M.

Re: [squid-users] squid+ldap

2007-06-15 Thread Dieter Bloms
Hi, On Fri, Jun 15, pauloric wrote: > a) squid:~# /usr/lib/squid/ldap_auth -b "dc=xxx,dc=com,dc=br" -f "uid= > % s" -h 130.0.150.2 > pauloric pauloric > OK that's good. > squid# tail -f /var/log/squid/access.log| grep 130.0.150.2 > 1181911584.377 8 130.0.150.2 TCP_DENIED/407 1832 GET >

Re: [squid-users] squid+ldap

2007-06-17 Thread Henrik Nordstrom
fre 2007-06-15 klockan 09:56 -0300 skrev pauloric: > c) from squid.conf: > auth_param basic program /usr/lib/squid/ldap_auth -b > "dc=xxx,dc=com,dc=br" -f "uid=%s" -h 130.0.150.2 > auth_param basic children 10 > auth_param basic > program /usr/lib/squid/ncsa_auth /etc/admwebuser/squidusers.passwd

Re: [squid-users] squid+ldap

2007-06-18 Thread pauloric
Em Dom, 2007-06-17 às 14:16 +0200, Henrik Nordstrom escreveu: > fre 2007-06-15 klockan 09:56 -0300 skrev pauloric: > > > c) from squid.conf: > > auth_param basic program /usr/lib/squid/ldap_auth -b > > "dc=xxx,dc=com,dc=br" -f "uid=%s" -h 130.0.150.2 > > auth_param basic children 10 > > auth_para

RE: [squid-users] Squid - LDAP

2006-02-13 Thread Esteban
Test if the autenticator work.. run "/usr/lib/squid/squid_ldap_auth -R -b "dc=xx,dc=yyy,dc=,dc=" -f sAMAccountName=%s -h 10.239.56.2" And enter "Usernamepassword" IF you get OK the autenticator Works If you always get an ERR you should chech te configuration of the Helper / the Ldap Serve

RE: [squid-users] Squid - LDAP

2006-02-13 Thread Esteban
> I tried to test the helper but no message appear (Error/OK) > Where do i find the helper file configuration? Soo the problem seems to be the Helper/autenticator. The helper don´t have a configuration file. You should have to use the comand line paramters only. Make shure you can actualy conec

Re: [squid-users] Squid - LDAP

2006-02-14 Thread Tim Neto
One thing to note, In Windows 2003 Server, Microsoft disables anonymous LDAP binds by default. Instead of doing an anonymous bind, try testing your squid_ldap_auth command with options to bind as an authorative user. Like: /usr/lib/squid/squid_ldap_auth -D Administrator -w Admin_Passwor

Re: [squid-users] Squid - Ldap

2006-02-16 Thread Mark Elsen
> Hello > I want use squid 2.5stable9 with LDAP Windows 2003 Server > authentication. > From command line : > /usr/lib/squid/squid_ldap_auth -b > "OU=Users,OU=,OU=Locations,OU=,dc=bb,dc=cc,dc=,dc=net" -f > sAMAccountName=%s -h 10.239.56.2 > > It's OK. > But when I try to connect to int

RE: [squid-users] Squid - Ldap

2006-02-16 Thread Chris Robertson
> -Original Message- > From: Franco, Battista [mailto:[EMAIL PROTECTED] > Sent: Thursday, February 16, 2006 7:34 AM > To: squid-users@squid-cache.org > Cc: Mark Elsen > Subject: [squid-users] R: [squid-users] R: [squid-users] Squid - Ldap > > > Hi > I understand it but why when do i use

Re: [squid-users] Squid - Ldap

2006-02-19 Thread Franco, Battista
uid-cache.org Oggetto: RE: [squid-users] Squid - Ldap > -Original Message- > From: Franco, Battista [mailto:[EMAIL PROTECTED] > Sent: Thursday, February 16, 2006 7:34 AM > To: squid-users@squid-cache.org > Cc: Mark Elsen > Subject: [squid-users] R: [squid-users] R: [squid-use

RE: [squid-users] Squid - Ldap

2006-02-19 Thread Chris Robertson
> -Original Message- > From: Franco, Battista [mailto:[EMAIL PROTECTED] > Sent: Thursday, February 16, 2006 11:19 PM > To: Chris Robertson; squid-users@squid-cache.org > Subject: Re: [squid-users] Squid - Ldap > > > I tried "setenforce 0" and now it&#

Re: [squid-users] Squid + Ldap

2006-03-17 Thread Henrik Nordstrom
fre 2006-03-17 klockan 15:11 -0400 skrev Michael Fernández M.: > but it does not take the value of "proxyallow" if i set the value to > FALSE, so the user enter his mail and pass, but this is allow to > navigate even with FALSE in proxyallow Can not really happen with the filter you gave. What c

RE: [squid-users] Squid Ldap

2006-03-18 Thread Nick Duda
I use winbind with samba and use the directive default_domain=xxx to remove the domain from the users. -Original Message- From: Olsson Mattias [mailto:[EMAIL PROTECTED] Sent: Sat 3/18/2006 8:22 AM To: squid-users@squid-cache.org Cc: Su

Re: [squid-users] Squid + LDAP

2014-02-05 Thread Peter Benko
On Wed, Feb 05, 2014 at 10:08:41AM +0100, matthew vassallo wrote: > Hi, > > I am trying to connect Squid with Windows Server 2008 R2 active directory but > its not working. I made a test environment and ran the following: > > /usr/lib/squid3/squid_ldap_auth -b "dc=matthew,dc=com" -h 192.168.2.3

Re: [squid-users] Squid ldap failover

2009-08-18 Thread Henrik Nordstrom
tis 2009-08-18 klockan 15:51 -0400 skrev mic...@casa.co.cu: > Hello > > Using squid "2.6.STABLE21 Version". > > I authenticate my users against active directory of windows. need to > add another server to possible technical failures, if no response from > the primary controller, then to consu

Re: [squid-users] Squid ldap failover

2009-08-21 Thread Jorge Armando Medina
Henrik Nordstrom wrote: > tis 2009-08-18 klockan 15:51 -0400 skrev mic...@casa.co.cu: > >> Hello >> >> Using squid "2.6.STABLE21 Version". >> >> I authenticate my users against active directory of windows. need to >> add another server to possible technical failures, if no response from >> t

Re: [squid-users] Squid LDAP Group

2008-07-17 Thread Henrik Nordstrom
On ons, 2008-07-16 at 18:31 -0700, Zack Duchene wrote: > I am having a very hard time getting the group external_acl to work with > my active directory. > > Here is the command that I am using: > > external_acl_type InetGroup %LOGIN /usr/lib/squid/squid_ldap_group -R -b > "dc=ADVANTAGE,dc=com"

Re: [squid-users] squid ldap auth

2003-06-26 Thread Henrik Nordstrom
tor 2003-06-26 klockan 17.04 skrev Barns,R: > I'm trying to use squid_ldap_auth and having read through the archives > I'm still not certain of the manner for setting the searchbase. The search base should be set to a DN below where all your users can be found. > Is it done in squid.conf in a sim

RE: [squid-users] squid ldap auth

2003-06-27 Thread Barns,R
Thank you for your help. I'm currently running 2.4STABLE7 so I will try upgrading to 2.5. Rick Barns -Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: 26 June 2003 22:42 To: Barns,R Cc: [EMAIL PROTECTED] Subject: Re: [squid-users] squid ldap auth

Re: [squid-users] squid ldap authentication

2005-08-17 Thread Mark Elsen
On 8/17/05, Ashish <[EMAIL PROTECTED]> wrote: > Hi, > >we have in our network Windows Server 2003 and squid > proxy. Now i want squid to authenticate through server 2003 active > directory. i am using command:- > > auth_param basic program /usr/lib/squid/squid_ldap_auth -b "ou=Users,

Re: [squid-users] squid ldap authentication

2005-08-17 Thread Serassio Guido
Hi, At 09.03 17/08/2005, Ashish wrote: Hi, we have in our network Windows Server 2003 and squid proxy. Now i want squid to authenticate through server 2003 active directory. i am using command:- auth_param basic program /usr/lib/squid/squid_ldap_auth -b "ou=Users, dc=example,dc=co

Re: [squid-users] SQUID + LDAP HELP

2004-07-16 Thread Stephane DAVY
> external_acl_type AD_Group %LOGIN > /usr/lib/squid/squid_ldap_auth -b > cn=users,dc=dom1,dc=info,dc=co -D > cn=user1,cn=users,dc=dom1,dc=info,dc=co > -h 10.10.1.25 -w pass1 -S -f > "(&(cn=%u)(memberOf=cn=internet,cn=users,dc=dom1,dc=info,dc=co))" it seems that your external_acl definition is

Re: [squid-users] squid ldap helpers crashing

2008-08-08 Thread Amos Jeffries
[EMAIL PROTECTED] wrote: Dear Squid-Users, I would like just to ask a bit of help regarding squid_ldap_group. I tried with success the helper from commandline about a match between a user and a group and everything works perfectly. Now, using the same set in squid.conf, it shows me in the lo

RE: [squid-users] Squid + LDAP + Active Directory

2010-09-10 Thread Joseph L. Casale
>I'm sure this has been asked before - working on a squid box that is to >Auth to AD. Unable to authenticate and getting error in squid cache log: >WARNING: could not bind to binddn 'Invalid credentials' By default, Windows doesn't allow anon binds, are you using a bind account and if so are the

RE: [squid-users] Squid + LDAP + Active Directory

2010-09-10 Thread Rick Chisholm
Yes using -D and -w switches, with creds known to work on other devices doing ldap (MFDs for one). On Fri, September 10, 2010 10:47 am, Joseph L. Casale wrote: >>I'm sure this has been asked before - working on a squid box that is to >>Auth to AD. Unable to authenticate and getting error in squi

RE: [squid-users] Squid + LDAP + Active Directory

2010-09-10 Thread Joseph L. Casale
>Yes using -D and -w switches, with creds known to work on other devices >doing ldap (MFDs for one). Redact the sensitive parts, and post the actual cmd in your conf. Likely the domain/user syntax is wrong.

Re: [squid-users] Squid LDAP Authentication Problems

2007-10-29 Thread Mauricio Silveira
Hi, Just curious: How did you setup ldap? What distro? Are you authenticating with a Win2* AD server? Did you change the schema? - Mauricio Jemburula wrote: Hi everyone :-), I'm having some problems configuring Squid to authenticate with LDAP. I first of all started by testing these command

Re: [squid-users] Squid LDAP Authentication Problems

2007-10-29 Thread Jemburula
Not sure if this is the right info you want: I am authenticating with a Win2003 AD server. squid_proxy_ldap was installed on the system when I installed, didn't exactly do any configuration for it I believe. The OS is Redhat Enterprise Linux 5. I'm not sure what you meant by change the schema?

Re: [squid-users] Squid + LDAP installation issues

2005-01-12 Thread Henrik Nordstrom
On Tue, 11 Jan 2005, Ricardo [iso-8859-1] López Urrutia wrote: Hello List, I've searched through the FAQ's, the list and the Internet and have not found an answer yet. Hope someone outhere can help Background: squid-2.5.STABLE5-4.fc2.2, source RPM modified to only accept LDAP authentication be

Re: [squid-users] squid ldap group authentication

2005-12-05 Thread Mark Elsen
On 12/5/05, CsY <[EMAIL PROTECTED]> wrote: > Hello > > Can i help you? > I need set up the ldap group authentication, this rule do not working. > Any idea? > > auth_param basic program /usr/lib/squid/ldap_auth -ZZ -b > "ou=peoples,dc=mydomain,dc=com" ldap > > external_acl_type ldap_group %LOGIN /u

Re: [squid-users] squid ldap group authentication

2005-12-05 Thread Shaun Bolling
I just setup squid v2.4 and I had to create a wrapper for my LDAP to work. example: authenticate_program /usr/lib/squid/myauth then the file "myauth" looks like /usr/lib/squid/squid_ldap_auth -b "o=myorg,c=US" xxx.xxx.xxx.xxx:389 Hope this helps. CsY wrote: Hello Can i help you? I need s

Re: [squid-users] squid ldap group authentication

2005-12-05 Thread CsY
i probe these configs, but arent working. auth_param basic program /usr/lib/squid/ldap_auth -Z -b "ou=group,dc=mydomain,dc=com" -D cn=admin,dc=hu -w password auth_param basic children 10 auth_param basic credentialsttl 1 hour refresh_pattern ^ftp: 144020% 10080 refresh_pattern ^

Re: [squid-users] squid ldap group authentication

2005-12-05 Thread Mark Elsen
On 12/5/05, CsY <[EMAIL PROTECTED]> wrote: > > ohh.. sorry > > Squid Cache: Version 2.5.STABLE10 > configure options: --prefix=/usr --exec_prefix=/usr --bindir=/usr/sbin > --sbindir=/usr/sbin --libexecdir=/usr/lib/squid --sysconfdir=/etc/squid > --localstatedir=/var/spool/squid --datadir=/usr/sh

Re: [squid-users] squid ldap group authentication

2005-12-05 Thread CsY
ubuntu linux 5.10 breezy badger OpenLDAP: slapd 2.2.26 (jul 4 2005 12:56:26 Mark Elsen írta: On 12/5/05, CsY <[EMAIL PROTECTED]> wrote: ohh.. sorry Squid Cache: Version 2.5.STABLE10 configure options: --prefix=/usr --exec_prefix=/usr --bindir=/usr/sbin --sbindir=/usr/sbin --libexecdi

Re: [squid-users] squid ldap group authentication

2005-12-05 Thread Ghislain Garcon
>>> >>> auth_param basic program /usr/lib/squid/ldap_auth -ZZ -b >>> "ou=peoples,dc=mydomain,dc=com" ldap >>> >>> external_acl_type ldap_group %LOGIN /usr/lib/squid/squid_ldap_group -ZZ >>> -b "cn=netgroup,ou=groups,dc=mydomain,dc=com" -f >> It seems "cn=netgroup,ou=groups,dc=mydomain,dc=com" is w

Re: [squid-users] squid ldap group authentication

2005-12-05 Thread CsY
where cn=doe in user in internet group? And what way could i use, when i have 200internet user in 500users network? i think, i put all needed user in internet group, and this will work. any idea? thanks Ghislain Garcon írta: auth_param basic program /usr/lib/squid/ldap_auth -ZZ -b "ou=peoples

Re: [squid-users] squid ldap group authentication

2005-12-06 Thread CsY
Ghislain Garcon check your [EMAIL PROTECTED] email address please Thanks

RE: [squid-users] Squid LDAP Group authentication

2006-09-06 Thread Janco van der Merwe
Under “TAG: auth_param” section enter the following auth_param basic program /usr/lib/squid/squid_ldap_auth -R -b "dc=dunns,dc=co,dc=za" -D "cn=ldapreader,cn=users,dc=mydomain,dc=com" -w "ldappassword" -f sAMAccountName=%s -h xxx.xxx.xxx.xxx Under “TAG: external_acl_type” section enter the foll

[squid-users] RE: [Squid-users] Squid LDAP Authentication

2004-08-12 Thread Adam Aube
Rick Whitley wrote: > Check to see if your ldap dir accepts anonymous binds, if not you will > need the -D and -w params. Also when you run the helper outside of squid > you need to pipe the password, see below: > > echo "userPassword: password" | /squid_ldap_auth -b > "ou=academics,o=dbu" -u cn

[squid-users] Re: [Squid-users] Squid LDAP Authentication

2004-08-12 Thread Adam Aube
Simon Magee wrote: > I have just installed SQUID2.5-STABLE6 and compiled with the --enable-SSL > --enable-basic-auth-helpers=LDAP. I can get Squid to run ok, but when I > come to try and get the LDAP authentication to work I am having no luck. > > On manually running the ./squid_auth_ldap -b o=

[squid-users] RE: [Squid-users] Squid LDAP Authentication

2004-08-12 Thread Rick Whitley
Good info, thanks Adam! rick... Rom.5:8 >>> Adam Aube <[EMAIL PROTECTED]> 8/12/2004 1:16:37 PM >>> Rick Whitley wrote: > Check to see if your ldap dir accepts anonymous binds, if not you will > need the -D and -w params. Also when you run the helper outside of squid > you need to pipe the passwo

Re: [squid-users] Squid + Ldap + Lotus Notes Problem

2004-02-10 Thread Henrik Nordstrom
On Tue, 10 Feb 2004, William Mikanowski wrote: > I try, ldapsearch -x -D "UID=_Administrateur, O=DOM" > -W -b O=DOM "objectClass=*" > > But it doesn’t retrieve the records. Should work. Is the bind successful? Regards Henrik

Re: [squid-users] Squid LDAP Auth and ACL Integration

2009-12-31 Thread Chris Robertson
ml ml wrote: Hello List, i read that its quite easy to get squid with ldap auth running. I would also like to manage Black/White URL-Lists in ldap. Can this be done via ldap, too? Yes, it can be done. It's roll-your-own, however... http://www.squid-cache.org/Doc/config/external_acl_type

Re: [squid-users] Squid LDAP Auth and ACL Integration

2010-01-02 Thread ml ml
Hi, thanks for the reply. However, i cant get the proof-of-concept working on the command line: echo "mo" | squid_ldap_group -b "dc=my-domain,dc=com" -f "cn=mo" -F "cn=mo" -h localhost -D "cn=Manager,dc=my-domain,dc=com" -w secret it always returns ERR. If i do a "tcpdump -i any -n port 389"

Re: [squid-users] Squid LDAP Auth and ACL Integration

2010-01-04 Thread Chris Robertson
ml ml wrote: Hi, thanks for the reply. However, i cant get the proof-of-concept working on the command line: echo "mo" | squid_ldap_group -b "dc=my-domain,dc=com" -f "cn=mo" -F "cn=mo" -h localhost -D "cn=Manager,dc=my-domain,dc=com" -w secret it always returns ERR. So, user with common

Re: [squid-users] Squid LDAP Auth and ACL Integration

2010-01-04 Thread Jose Ildefonso Camargo Tolosa
Hi! On Sat, Jan 2, 2010 at 1:49 PM, ml ml wrote: > Hi, > > thanks for the reply. > > However, i cant get the proof-of-concept working on the command line: > > echo "mo" | squid_ldap_group  -b "dc=my-domain,dc=com"  -f "cn=mo" -F > "cn=mo" -h localhost -D "cn=Manager,dc=my-domain,dc=com"  -w secre

Re: [squid-users] Squid/ldap authentication via Novell NDS

2005-05-06 Thread Henrik Nordstrom
On Fri, 29 Apr 2005, Daniel Lim wrote: I am using Squid-2.5-STABLE7 as proxy on SLES 8 for users to authenticate the browser access to the internet, the password authentication works well until the Novell NDS changed to a new tree structure which I have also changed accordingly in the squid.conf. I

Re: [squid-users] Squid/ldap authentication via Novell NDS

2005-05-10 Thread Daniel Lim
Thank you Henrik, I got it working now after switching the squid_ldap_auth option from (cn=%s) to (uid=%s) Thank again, Daniel >>> Henrik Nordstrom <[EMAIL PROTECTED]> 7/05/2005 7:55:50 >>> On Fri, 29 Apr 2005, Daniel Lim wrote: > I am using Squid-2.5-STABLE7 as proxy on SLES 8 for users to >

Re: [squid-users] SQUID + LDAP (on Red Hat AS3)

2007-04-11 Thread Chris Robertson
Lucas Beber wrote: Hello to all I have a task that at first sight it seemed simple and it is the one of installing SQUID with users' of LDAP validation in Microsoft Windows 2003 Server Directory Activates. I have already looked for for all sides and I don't find a correct information to be ab

Re: [squid-users] Squid LDAP authentication with 2003 AD

2006-09-01 Thread Alejandro Decchi
Hi ! my squid friend.Can you explain me how did you do to install everything . A long tome ago i tried but i could not made this method of athentication. Can you give me a hand explain me step by step how this you all I read a lot of article hou to install ldap and squid with active directory but

Re: [squid-users] Squid LDAP authentication with 2003 AD

2006-09-01 Thread Henrik Nordstrom
On Fri, 2006-09-01 at 15:07 +0200, Saqib Khan (horiba/eu) wrote: > > Hello List members, > > I am getting problem after authenticating a user over ldap. After getting > authenticated I get the following error message: > > ERROR > The requested URL could not be retrieved > > > While trying to r

Re: [squid-users] Squid LDAP authentication with 2003 AD

2006-09-04 Thread Saqib Khan \(horiba/eu\)
Hi, Please follow the instructions stated in the link below. It's a very easy & clear documentation. http://kb.papercutsoftware.com/Main/ConfiguringSquidProxyToAuthenticateWithActiveDirectory Best Regards, Saqib |-+---| |

RE: [squid-users] Squid LDAP authentication with 2003 AD

2006-09-04 Thread Alejandro Decchi
2006 05:08 Para: Alejandro Decchi CC: squid-users@squid-cache.org Asunto: Re: [squid-users] Squid LDAP authentication with 2003 AD Hi, Please follow the instructions stated in the link below. It's a very easy & clear documentation. http://kb.papercutsoftware

RE: [squid-users] Squid LDAP authentication with 2003 AD

2006-09-04 Thread Henrik Nordstrom
mån 2006-09-04 klockan 08:18 -0300 skrev Alejandro Decchi: > Did you follow this step by step ? Because I did that but I could not made > that user authenticate by active directory. The page say that we do not need > samba.The only package that we need are: Squid and Ldap.I install openldap > and t

RE: [squid-users] Squid LDAP authentication with 2003 AD

2006-09-05 Thread Alejandro Decchi
Sorry Henrik to be very newbie what is TLS ?? -Mensaje original- De: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Enviado el: Lunes, 04 de Septiembre de 2006 17:56 Para: Alejandro Decchi CC: 'Saqib Khan (horiba/eu)'; squid-users@squid-cache.org Asunto: RE: [squid-users]

RE: [squid-users] Squid LDAP authentication with 2003 AD

2006-09-05 Thread Henrik Nordstrom
tis 2006-09-05 klockan 08:34 -0300 skrev Alejandro Decchi: > Sorry Henrik to be very newbie what is TLS ?? Encryption. Formerly known as SSL. Regards Henrik signature.asc Description: Detta är en digitalt signerad meddelandedel

Re: [squid-users] Squid ldap group authentication with Zimbra LDAP

2010-02-22 Thread Kevin Kimani
Hi, I have tried implementing that but still its still giving me a problem. It either admits all or none but it gets the users from the LDAP database. Been thinking it could be a problem with my search string On Tue, Feb 23, 2010 at 9:33 AM, Michael Mansour wrote: > Hi, > > --- On Tue, 23/2/10,

Re: [squid-users] Squid ldap group authentication with Zimbra LDAP

2010-02-23 Thread Amos Jeffries
Kevin Kimani wrote: Hi all, Am having a problem trying to authenticate a group that i have set up in my zimbra mail server. the users are stored in an ldap database thus thought that authentication would just be the same as other ldap databases. am able to authenticate users in singular but want

Re: [squid-users] Squid ldap group authentication with Zimbra LDAP

2010-02-23 Thread Kevin Kimani
Find below the configurations placed in my config file auth_param basic program /usr/lib/squid/squid_ldap_auth -v 3 -b dc=openworld,dc=co,dc=ke -f "(&(uid=%s)(objectClass=zimbraAccount))" -h 192.168.111.130 auth_param basic realm Squid proxy-caching web server auth_param basic credentialsttl 2 hou

Re: [squid-users] Squid ldap group authentication with Zimbra LDAP

2010-02-23 Thread Amos Jeffries
Kevin Kimani wrote: Find below the configurations placed in my config file auth_param basic program /usr/lib/squid/squid_ldap_auth -v 3 -b dc=openworld,dc=co,dc=ke -f "(&(uid=%s)(objectClass=zimbraAccount))" -h 192.168.111.130 auth_param basic realm Squid proxy-caching web server auth_param basi

Re: [squid-users] Squid ldap group authentication with Zimbra LDAP

2010-02-23 Thread Kevin Kimani
oops had left out tthe deny part acl ldapauth proxy_auth REQUIRED acl InetAccess external InetGroup Admins acl InetDeny external InetGroup Users http_access deny InetDeny http_access deny bannedips http_access allow InetAccess http_access allow my_network When i do this, all are blocked from acc

Re: [squid-users] Squid ldap group authentication with Zimbra LDAP

2010-02-23 Thread Amos Jeffries
Kevin Kimani wrote: oops had left out tthe deny part acl ldapauth proxy_auth REQUIRED acl InetAccess external InetGroup Admins acl InetDeny external InetGroup Users http_access deny InetDeny http_access deny bannedips http_access allow InetAccess http_access allow my_network When i do this, al

Re: [squid-users] Squid ldap group authentication with Zimbra LDAP

2010-02-23 Thread Kevin Kimani
The setup that i have is in collaboration between zimbra and samba. the users are created in posix accounts and have to belong to either Admins or Users who are translated to Domain Admins Domain Users respectively. Hence want to allow the Admins but deny the Users. The bannedips "acl bannedips ds

Re: [squid-users] Squid LDAP use with single sign on ?

2004-12-23 Thread Henrik Nordstrom
On Thu, 23 Dec 2004 [EMAIL PROTECTED] wrote: Is ist possible to get a single sign on with linux clients ? I have found a lot of workarounds and solutions when using windows clients - but no for linux clients. Linux or Unix in general does not have a local security service keeping track of the logo

Re: [squid-users] Squid LDAP use with single sign on ?

2004-12-24 Thread Ernst Einstein
On Thu, 2004-12-23 at 22:38, Henrik Nordstrom wrote: > On Thu, 23 Dec 2004 [EMAIL PROTECTED] wrote: > > > Is ist possible to get a single sign on with linux clients ? I have found a > > lot of workarounds and solutions when using windows clients - but no for > > linux clients. > > Linux or Unix i

Re: [squid-users] Squid LDAP use with single sign on ?

2004-12-24 Thread Henrik Nordstrom
On Fri, 24 Dec 2004, Ernst Einstein wrote: On Thu, 2004-12-23 at 22:38, Henrik Nordstrom wrote: On Thu, 23 Dec 2004 [EMAIL PROTECTED] wrote: Is ist possible to get a single sign on with linux clients ? I have found a lot of workarounds and solutions when using windows clients - but no for linux cl

[squid-users] Antwort: RE: [squid-users] Squid LDAP Group authentication

2006-09-06 Thread Saqib Khan \(horiba/eu\)
No still the same. I still can use any user to access internet. Here is my conf accoding to your suggestion:- external_acl_type Internet %LOGIN /usr/lib/squid_ldap_group -R -b "dc=test,dc=eu" -D "cn=test,cn=Users,dc=test,dc=eu" -w "test" -f " (&(objectclass=person)(sAMAccountName=%v)(memberof=c

Re: [squid-users] Squid/LDAP re-challenges browser on http_access deny

2009-09-09 Thread Amos Jeffries
On Thu, 10 Sep 2009 10:55:58 +1000, "Dion Beauglehall" wrote: > Hi, > > I’m configuring a squid proxy box with LDAP authentication, and ACLs based > on LDAP groups. I have the LDAP authentication working, as are groups. > > However, when I add a user to an “Access Denied” group, squid then caus

RE: [squid-users] Squid/LDAP re-challenges browser on http_access deny

2009-09-13 Thread Dion Beauglehall
: Amos Jeffries [mailto:squ...@treenet.co.nz] Sent: Thursday, 10 September 2009 11:30 AM To: squid-users@squid-cache.org Subject: Re: [squid-users] Squid/LDAP re-challenges browser on http_access deny On Thu, 10 Sep 2009 10:55:58 +1000, "Dion Beauglehall" wrote: > Hi, > > I’m confi

RE: [squid-users] Squid/LDAP re-challenges browser on http_access deny

2009-09-13 Thread Amos Jeffries
Message- > From: Amos Jeffries [mailto:squ...@treenet.co.nz] > Sent: Thursday, 10 September 2009 11:30 AM > To: squid-users@squid-cache.org > Subject: Re: [squid-users] Squid/LDAP re-challenges browser on http_access > deny > > On Thu, 10 Sep 2009 10:55:58 +1000, &q

RE: [squid-users] Squid/LDAP re-challenges browser on http_access deny

2009-10-04 Thread Dion Beauglehall
? Regards, Dion -Original Message- From: Amos Jeffries [mailto:squ...@treenet.co.nz] Sent: Thursday, 10 September 2009 11:30 AM To: squid-users@squid-cache.org Subject: Re: [squid-users] Squid/LDAP re-challenges browser on http_access deny On Thu, 10 Sep 2009 10:55:58 +1000, "

RE: [squid-users] Squid/LDAP re-challenges browser on http_access deny

2009-10-04 Thread Amos Jeffries
ervers and clients and check that the connection-auth settings are still turned on (default is on for Squid-2). Amos > > > -Original Message- > From: Amos Jeffries [mailto:squ...@treenet.co.nz] > Sent: Thursday, 10 September 2009 11:30 AM > To: squid-users@squid-cache.or

RE: [squid-users] Squid/LDAP re-challenges browser on http_access deny

2009-10-06 Thread Dion Beauglehall
eenet.co.nz] Sent: Monday, 14 September 2009 12:20 PM To: Dion Beauglehall Cc: squid-users@squid-cache.org Subject: RE: [squid-users] Squid/LDAP re-challenges browser on http_access deny On Mon, 14 Sep 2009 12:12:27 +1000, "Dion Beauglehall" wrote: > Hi Amos, > > The changes you

RE: [squid-users] Squid/LDAP re-challenges browser on http_access deny

2009-10-06 Thread Amos Jeffries
@treenet.co.nz] > Sent: Monday, 14 September 2009 12:20 PM > To: Dion Beauglehall > Cc: squid-users@squid-cache.org > Subject: RE: [squid-users] Squid/LDAP re-challenges browser on http_access > deny > > On Mon, 14 Sep 2009 12:12:27 +1000, "Dion Beauglehall" > wrote:

RE: [squid-users] Squid/LDAP re-challenges browser on http_access deny

2009-10-06 Thread Dion Beauglehall
Original Message- > From: Amos Jeffries [mailto:squ...@treenet.co.nz] > Sent: Monday, 14 September 2009 12:20 PM > To: Dion Beauglehall > Cc: squid-users@squid-cache.org > Subject: RE: [squid-users] Squid/LDAP re-challenges browser on http_access > deny > > On Mon

RE: [squid-users] Squid - ldap auth against active directory 2008 R2

2011-01-20 Thread Joseph L. Casale
>On the cache.log of squid i can see a error message "could not bind to bindn" >server" "can´t contact ldap server. > >Could someone help me to let it work? Probably not without seeing your config and knowing your AD setup. If you upgraded, has your ldap topology remained exactly the same? Were

Re: [squid-users] Squid - ldap auth against active directory 2008 R2

2011-01-21 Thread Amos Jeffries
On 21/01/11 20:47, projpr...@virgilio.it wrote: Ok, let´s start with a general question: does squid work with ldap auth and active directory 2008 R2??? is there someone that has kind of experience with that??? Thanks jcasale: yes we upgraded the domain from 2003 to 2008 R2, all domain controlle

Re: [squid-users] Squid Ldap Authen + AD:how to make authentication persistent?

2011-06-17 Thread Amos Jeffries
On 17/06/11 16:29, เชต wrote: Hi all, I've just config the squid proxy server to authenticate users to Microsoft Active Directory. Everything seem fine except squid keep asking username/password every time users open new web browser or switch to other web browser like it check for some sessi

[squid-users] Re: [Bulk] Re: [squid-users] squid ldap group authentication

2005-12-06 Thread Ghislain Garcon
CsY a écrit : > where cn=doe in user in internet group? > And what way could i use, when i have 200internet user in 500users > network? > i think, i put all needed user in internet group, and this will work. > any idea? > > thanks > The helper uses the base DN ( -b option ) as a root to create the

RE: [squid-users] Antwort: RE: [squid-users] Squid LDAP Group authentication

2006-09-06 Thread Janco van der Merwe
From: Saqib Khan (horiba/eu) [mailto:[EMAIL PROTECTED] Sent: 06 September, 2006 15:09 To: Janco van der Merwe Cc: squid-users@squid-cache.org Subject: [squid-users] Antwort: RE: [squid-users] Squid LDAP Group authentication No still the same. I still can use any user to access internet. Here

[squid-users] Antwort: Re: [squid-users] Squid LDAP authentication with 2003 AD

2006-09-04 Thread Saqib Khan \(horiba/eu\)
| Kopie| | | squid-users@squid-cache.org | | | Thema| | | Re: [squid-users] Squid LDAP| |

[squid-users] Antwort: RE: [squid-users] Squid LDAP authentication with 2003 AD

2006-09-04 Thread Saqib Khan \(horiba/eu\)
| | | Kopie| | | | | | Thema| | | RE: [squid-users] Squ

[squid-users] R: RE: [squid-users] Squid - ldap auth against active directory 2008 R2

2011-01-20 Thread projpr...@virgilio.it
Messaggio originale >Da: jcas...@activenetwerx.com >Data: 20-gen-2011 12.58 >A: "squid-users@squid-cache. org" >Ogg: RE: [squid-users] Squid - ldap auth against active directory 2008 R2 > >>On the cache.log of squid i can see a error message "could not bi

[squid-users] R: Re: [squid-users] Squid - ldap auth against active directory 2008 R2

2011-01-21 Thread projpr...@virgilio.it
. >Messaggio originale >Da: squ...@treenet.co.nz >Data: 21-gen-2011 9.20 >A: >Ogg: Re: [squid-users] Squid - ldap auth against active directory 2008 R2 > >On 21/01/11 20:47, projpr...@virgilio.it wrote: >> Ok, let´s start with a general question: >> >

[squid-users] Antwort: RE: [squid-users] Antwort: RE: [squid-users] Squid LDAP Group authentication

2006-09-06 Thread Saqib Khan \(horiba/eu\)
ns Stores (PTY) Ltd Switchboard: 011 541 3000 Direct: 011 541 3007 Fax: 086 632 1708 -Original Message- From: Saqib Khan (horiba/eu) [mailto:[EMAIL PROTECTED] Sent: 06 September, 2006 15:09 To: Janco van der Merwe Cc: squid-users@squid-cache.org Subject: [squid-users] Antwort: RE: [squid-us

RE: [squid-users] R: RE: [squid-users] Squid - ldap auth against active directory 2008 R2

2011-01-20 Thread Joseph L. Casale
>As I >said: with AD 2003 was working well, now with AD2008 is not working That doesn’t help us, so you upgraded the domain? Regardless, you're not auth'ing to the "same" server so something changed. >auth_param basic >program usr/sbin/squid_ldap_auth -d -v "3" -s "sub" -b "dc=example, dc=o

Re: [squid-users] R: Re: [squid-users] Squid - ldap auth against active directory 2008 R2

2011-01-21 Thread Amos Jeffries
On 22/01/11 00:41, projpr...@virgilio.it wrote: Thanks a lot for you reply! this gives me a bit of courage... well, I made some test from a opensuse machine and it looks like it works... now, if i look at the process monitor with dependencies and thread on the original machine i have ownerpr

[squid-users] R: RE: [squid-users] R: RE: [squid-users] Squid - ldap auth against active directory 2008 R2

2011-01-20 Thread projpr...@virgilio.it
authentication already tested in 2008 R2 environment. Thanks in advance. >Messaggio originale >Da: jcas...@activenetwerx.com >Data: 20-gen-2011 17.13 >A: "squid-users@squid-cache. org" >Ogg: RE: [squid-users] R: RE: [squid-users] Squid - ldap auth against

[squid-users] I: Re: [squid-users] R: Re: [squid-users] Squid - ldap auth against active directory 2008 R2

2011-01-24 Thread projpr...@virgilio.it
>Messaggio originale >Da: projpr...@virgilio.it >Data: 24-gen-2011 8.34 >A: >Ogg: R: Re: [squid-users] R: Re: [squid-users] Squid - ldap auth against active directory 2008 R2 > >Thanks a lot for your reply. > >this sounds really good...strange that on