Henrik Nordstrom wrote:
On tor, 2008-06-19 at 15:49 -0430, Edward Ortega wrote:
Hi!

    I've a problem with authentication ldap on squid3 using digest, i'm
using Squid Cache: Version 3.0.PRE5 on Debian ia64 :

   # /usr/lib/squid3/digest_ldap_auth -v 3 -b 'dc=something,dc=com' -F
'(&(objectclass=posixAccount)(uid=%s))' -H 'ldap://ldap' -A 'userPassword' -l -e -d
    someuser somepassword
    ERR
Any help would be appreciated, thanks!

Digest helpers expect a different input.

"username":"realm"<enter>
(with the quotes)

Additionally userPassword is usually write-only in most LDAP trees for
security reasons, and practically never contains a Digest H(A1) hash (-e
option).

The job of a digest helper is to return the Digest H(A1) hash for a
given username + realm combination. This can be based on either
plaintext passwords or precalculated digest H(A1) hashes stored in the
backend..

H(A1) is MD5(username + ":" + realm + ":" + password)

Regards
Henrik

Also, the Debian sid repositories provide a much more recent and Production-ready release of 3.0. I'd really recommend using STABLE6 if you need it now, STABLE7 when it gets there.

Amos
--
Please use Squid 2.7.STABLE2 or 3.0.STABLE6

Reply via email to