[squid-users] Re: Squid + LDAP

On Tuesday 19 August 2003 16.21, Arias, Sebastian Alejandro - (Ext
Arg) wrote:

> Could you give me some help to use the squid_ldap_auth? ... -I
> tried with this before but I didn't succeed, that's why I'm using
> ldap_auth-
>
> CN=user name,OU=it,OU=sys,OU=user accounts,dc=ar,dc=domain,dc=com

If all your users are direclty below ou=it then all you need is

  -u cn -b "OU=it,OU=sys,OU=user accounts,dc=ar,dc=domain,dc=com"

Which will tell Squid that the users DN is always on the form

  cn=<username>,OU=it,OU=sys,OU=user accounts,dc=ar,dc=domain,dc=com

If your users are distributed in multiple OUs then you need to search
for the users DN with the -f argument, probably something like

  -b "OU=user accounts,dc=ar,dc=domain,dc=com" -f
"(&(objectClass=Person)(CN=%s))"

Other filters are possible, mainly depending on the structure of the
user objects in your LDAP tree and what LDAP attribute you want to
use for the login name.

If you have further question regarding the squid_ldap_auth helper
please use the squid-users mailinglist.

Regards
Henrik
Received on Tue Aug 19 2003 - 11:54:40 MDT