Ok.

I found that in squid 3.x the ldap helper is change from previous release ;
instead of squid_ldap_group there’s the helper basic_ldap_auth (located in
/usr/lib64/squid on Fedora 18 x64). 

( http://www.squid-cache.org/Versions/v3/3.2/RELEASENOTES.html#ss4.2 )

After some problem with firewall configuration and some test with
basic_ldap_auth inserting the line below in squid.conf associated with ACL
ldap-auth can gain internet access only to active directory user.

auth_param basic program /usr/lib64/squid/basic_ldap_auth -R -b
"dc=domain,dc=local" -D "CN=ADUser,OU=OU-ADUser,dc=domain,dc=local" -w
pwd-ADUser -f sAMAccountName=%s -h IP-Ldap-Server:389
.
.
.
acl ldap-auth proxy_auth REQUIRED
http_access allow ldap-auth


Now I must find how can I do with user belong to a single group present in
active directory…previous version external acl helpers was squid_ldap_group.
In squid 3.3.2 seems to be ext_ldap_group_acl …but I can’t find it !!!

…and the story goes on …




--
View this message in context: 
http://squid-web-proxy-cache.1019090.n4.nabble.com/Issue-with-Squid-ldap-group-Windows-tp4663221p4663395.html
Sent from the Squid - Users mailing list archive at Nabble.com.

Reply via email to