Re: [squid-users] squid_ldap_auth problem

2003-10-14 Thread Henrik Nordstrom
On Tue, 14 Oct 2003 [EMAIL PROTECTED] wrote: > squid_ldap_auth: WARNING, could not bind to binddn 'Invalid DN syntax' > squid_ldap_auth: WARNING, could not bind to binddn 'Invalid DN syntax' > > and the prompt re-appears. But this DN is fine when run from the command > line. Squid-2.4 does not u

RE: [squid-users] squid_ldap_auth problem

2003-10-14 Thread Arias, Sebastian Alejandro - (Ext Arg)
Try with a .sh file named auth_ldap with the following content: #!/bin/sh ./squid_ldap_auth -b "ou=,o=,c=zz" -u cn -s sub -D "cn=,ou=,o=,c=zz," -w-f "" ldap_ip_address and then call the bash script in the squid.conf file ... don't forget to give permisses to squid

Re: [squid-users] squid_ldap_auth problem

2003-10-14 Thread jeff . richards
PROTECTED]> Subject: Re: [squid-users] squid_ldap_auth problem 14/1

RE: [squid-users] squid_ldap_auth problem

2003-10-14 Thread jeff . richards
'Squid Users' <[EMAIL PROTECTED]>

Re: [squid-users] Squid_ldap_auth problem

2003-12-16 Thread Henrik Nordstrom
On Tue, 16 Dec 2003, Geir Fossum wrote: > I will use LDAP to authenticate users for internetaccess against Active > Directory. For this you must use the search mode of the helpers. See the -f argument and the examples. Regards Henrik

Re: [squid-users] squid_ldap_auth problem after W2003 upgrade

2004-10-14 Thread Henrik Nordstrom
On Wed, 13 Oct 2004, Mark Krawec wrote: ldapsearch -D [EMAIL PROTECTED] -w password -b "DC=scif,DC=com" -H ldaps://fddc02.scif.com:636/ -S /usr/local/ssl/certs -x "(SamAccountName=Squid1)" cn version: 2 # # filter: (SamAccountName=Squid1) # requesting: cn # # Squid1 Proxy, FD, Fairfield, scif, com

Re: [squid-users] squid_ldap_auth problem after W2003 upgrade

2004-10-14 Thread Mark Krawec
I think I'm using a consistent search bind DN and still getting an error after the 2003 upgrade. Successful ldapsearch query: ldapsearch -b "DC=scif, DC=com" -D "CN=Squid1, OU=FD, OU=Fairfield, DC=scif, DC=com" -w "password" -H ldaps://fddc02.scif.com:636/ -S /usr/local/ssl/certs -x "(SamAccountN

Re: [squid-users] squid_ldap_auth problem after W2003 upgrade

2004-10-14 Thread Henrik Nordstrom
On Thu, 14 Oct 2004, Mark Krawec wrote: Any ideas on why squid_ldap_auth fails and ldapsearch succeeds? The same squid_ldap_auth query was working until our domain controllers were upgraded to 2003. You could try using the -O (once) option to squid_ldap_auth. (in a previous message I said -1, mea

Re: [squid-users] squid_ldap_auth problem after W2003 upgrade

2004-10-14 Thread Mark Krawec
I'm using the 3.0 helper so it was easy to try this with -O and I still get the error. I tried it with and without -P and it still throws an error. Am I the only person having this problem? To summarize Squid 2.5STABLE6 on RH7.3 using squid_ldap_auth to authenticate. I now get the error below w

Re: [squid-users] squid_ldap_auth problem after W2003 upgrade

2004-10-14 Thread Henrik Nordstrom
On Thu, 14 Oct 2004, Mark Krawec wrote: I'm using the 3.0 helper so it was easy to try this with -O and I still get the error. Please try with the helper from 2.5.STABLE7. Not 100% sure how up to date the 3.0 helper is at the moment (probably is, but just to be sure..) Regards Henrik

Re: [squid-users] squid_ldap_auth problem after W2003 upgrade

2004-10-14 Thread Mark Krawec
I tried it with the helper from 2.5.STABLE7 and get the same error: echo "Squid1 password" | /usr/local/squid/libexec/squid_ldap_auth -O -H ldaps://fddc02.scif.com:636/ -D "CN=Squid1 Proxy, OU=FD, OU=Fairfield, DC=scif, DC=com" -w "password" -b "DC=scif,DC=com" -f "(SamAccountName=Squid1)" squi

Re: [squid-users] squid_ldap_auth problem after W2003 upgrade

2004-10-14 Thread Henrik Nordstrom
On Thu, 14 Oct 2004, Mark Krawec wrote: I tried it with the helper from 2.5.STABLE7 and get the same error: echo "Squid1 password" | /usr/local/squid/libexec/squid_ldap_auth -O -H ldaps://fddc02.scif.com:636/ -D "CN=Squid1 Proxy, OU=FD, OU=Fairfield, DC=scif, DC=com" -w "password" -b "DC=scif,DC=

Re: [squid-users] squid_ldap_auth problem after W2003 upgrade

2004-10-18 Thread Mark Krawec
And you are positively sure that ldapsearch -x using the exact same data works? Regards Henrik I've tried to make sure I'm running the queries the same aside for syntax differences. Both queries worked before 2003 upgrade. Now only ldapsearch works correctly. Successful ldapsearch query: ldap

Re: [squid-users] squid_ldap_auth problem after W2003 upgrade

2004-10-19 Thread Henrik Nordstrom
On Mon, 18 Oct 2004, Mark Krawec wrote: I've tried to make sure I'm running the queries the same aside for syntax differences. Both queries worked before 2003 upgrade. Now only ldapsearch works correctly. One last idea, try using LDAP v3 (-v 3 option to squid_ldap_auth) Regards Henrik

Re: [squid-users] squid_ldap_auth problem after W2003 upgrade

2004-10-19 Thread Mark Krawec
Thanks for being persistent but unfortunately I get the same error with version 3. Let me know if I should try anything else or if I should create a bug for this. Are there others that are using squid_ldap_auth to authenticate against a W2003 LDAP directory server? echo "Squid1 password" | /usr/

Re: [squid-users] squid_ldap_auth problem after W2003 upgrade

2004-10-19 Thread Henrik Nordstrom
On Tue, 19 Oct 2004, Mark Krawec wrote: Thanks for being persistent but unfortunately I get the same error with version 3. Let me know if I should try anything else or if I should create a bug for this. Are there others that are using squid_ldap_auth to authenticate against a W2003 LDAP directory

Re: [squid-users] squid_ldap_auth problem after W2003 upgrade

2004-10-19 Thread Henrik Nordstrom
On Tue, 19 Oct 2004, Mark Krawec wrote: Thanks for being persistent but unfortunately I get the same error with version 3. Let me know if I should try anything else or if I should create a bug for this. Are there others that are using squid_ldap_auth to authenticate against a W2003 LDAP directory

Re: [squid-users] squid_ldap_auth problem after W2003 upgrade

2004-10-19 Thread Mark Krawec
I don't think our server supports TLS as ldapsearch fails as well. Basic authentication (clear text) or ssl are my options and both of those work for ldapsearch. Unfortunately I haven't been able to get either option to work for squid_ldap_auth after the domain controller upgrade to 2003. Am I ju

Re: [squid-users] squid_ldap_auth problem after W2003 upgrade

2004-10-19 Thread Henrik Nordstrom
On Tue, 19 Oct 2004, Mark Krawec wrote: I don't think our server supports TLS as ldapsearch fails as well. Basic authentication (clear text) or ssl are my options and both of those work for ldapsearch. Unfortunately I haven't been able to get either option to work for squid_ldap_auth after the dom

Re: [squid-users] squid_ldap_auth problem after W2003 upgrade

2004-10-19 Thread Mark Krawec
I'll try anything to avoid going back to basic authentication (NCSA). What patches and where can I find them? Should I open a bug first? Mark On Tue, 19 Oct 2004 20:44:26 +0200 (CEST), Henrik Nordstrom wrote > On Tue, 19 Oct 2004, Mark Krawec wrote: > > > I don't think our server supports TLS

Re: [squid-users] squid_ldap_auth problem after W2003 upgrade

2004-10-19 Thread Henrik Nordstrom
On Tue, 19 Oct 2004, Mark Krawec wrote: I'll try anything to avoid going back to basic authentication (NCSA). What patches and where can I find them? Should I open a bug first? You should open a bug. Once you have opened a bug report I'll attach the squid_ldap_auth patch there for you to try. R