Hi Henrik,

Since our last conversation we have spent some time learning a bit more about 
how the squid_ldap_group authentication works. Now realize that the ldap group 
membership test does strip the domain as you said it does.

My problem appears to be with the squid_ldap_auth as it does not appear to be 
able to strip the domain and I am trying to use both auth and group features 
together. I am still unsure as to whether I am using these modules in the 
correct way, if I am then I would need the auth module to strip the domain as 
well. I would appreciate any comments you would have about the way I am trying 
to do things.


Thanks,
Clayton York
Barone, Budge & Dominick
011-5328577


-----Original Message-----
From: Clayton York
Sent: Thursday, July 16, 2009 10:26 AM
To: 'Henrik Nordstrom'
Cc: Squid Users
Subject: RE: [squid-users] Help Please : NT Domain name stripping in 
squid_ldap_group

Hi Henrik,


We are running squid-2.6.STABLE21-3.el5.


Clayton York


-----Original Message-----
From: Henrik Nordstrom [mailto:hen...@henriknordstrom.net]
Sent: Thursday, July 16, 2009 8:58 AM
To: Clayton York
Cc: Squid Users
Subject: RE: [squid-users] Help Please : NT Domain name stripping in 
squid_ldap_group

ons 2009-07-15 klockan 11:07 +0200 skrev Clayton York:

> Thanks for the feedback I have added values %u and %g as per below and 
> authentication is working when using the username and password but still 
> fails when using domain\username and password, ie still does not seem to be 
> stripping the domain name when I look at the access log file even though the 
> -S option is added.

Which Squid version is your squid_ldap_group from?

Note: access.log always shows the full username. The removal of the
domain part is done by squid_ldap_group when checking the group
membership only.

Regards
Henrik

Reply via email to