Ok, i think i´m not explaining so good.
I have allready squid authentication, what i need is that the browser
does not show the prompt just get the credencials whitout prompting the
user, for example me user is part of a domain só thé get the user from
the computer and the user would not have the need to type it, is there
any way ?
Sergey A. Kobzar wrote:
Hello Duarte,
Thursday, May 10, 2007, 2:09:05 PM, you wrote:
Hi,
i really wanna is to authenticated on ldap, but the browser not to show
a pop-up,
it's possible? samba ( maybe ntlm ?)
I gave you working configuration. Just forgot about -v 3 option. :)
what does the [skipped], does ?
Line from standard Squid's config.
Show
tail -f /path/to/squid.conf
tail -f /path/to/slapd.conf
?
thanks
Sergey A. Kobzar wrote:
Hello Duarte,
If you want authenticate users from LDAP only, this configuration is
enough:
auth_param basic program /usr/local/libexec/squid/squid_ldap_auth -b
"ou=People,dc=test,dc=com" ldap.test.com
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
[skipped]
acl ldap_users proxy_auth REQUIRED
[skipped]
http_access allow ldap_users
Thursday, May 10, 2007, 1:17:34 PM, you wrote:
Hi there
I´m trying to set up squid whit authentication, but i would need it
asking the user the credencials.
Allrdy set up an "squid_ldap_auth" but a login prompt comes, every time.
trying now with "squid_ldap_group", but still nothing, from the Unix
prompt i can authenticate a user whit some filter. where some info :
Squid.conf
-------
*external_acl_type InetGroup %LOGIN
/usr/local/libexec/squid/squid_ldap_group -R -b "dc=pnp,dc=com" -f
"(&(uid=%u)(gidNumber=%g)(homePhone=1))" -v 3
acl InetAccess external InetGroup 513
http_access allow InetAccess
-------
*Ldap info
-----
ldapsearch -vLx -b "dc=pnp,dc=com" "(uid=duarte)"
result :
# duarte, Users, pnp.com
dn: uid=duarte,ou=Users,dc=pnp,dc=com
objectClass: top
objectClass: person
...
sn: duarte
givenName: duarte
uid: duarte
uidNumber: 1002
gidNumber: 513
...
# numResponses: 2
# numEntries: 1
------
From the prompt on Unix :
/usr/local/libexec/squid/squid_ldap_group -R -b "dc=pnp,dc=com" -f
"(&(uid=%u)(gidNumber=%g))" -v 3
duarte 513
OK
so my question is.. whit the browser not authenticating whit squid ?
Thanks in advance.
