Re: [squid-users] RE : [squid-users] ldap_auth_group :document contained no data....

Hi,

I had a similar error last week and Tobi from fatgut.org sent me a patch. Check
your cache.log: if an assert on line 1346 in file acl.c is detected you must apply
the following patch:

--- squid-2.3.STABLE3-ldap_auth/src/acl.c.orig Sun Mar 18 18:20:46 2001
+++ squid-2.3.STABLE3-ldap_auht/src/acl.c Sun Mar 18 18:28:40 2001
@@ -2012,13 +2012,13 @@
      aclLookupLdapAuthStart(checklist);
      checklist->state[ACL_LDAP_AUTH] = ACL_LOOKUP_PENDING;
       return;
- } else if (checklist->state[ACL_PROXY_AUTH] == ACL_PROXY_AUTH_NEEDED ||
- checklist->state[ACL_LDAP_AUTH] == ACL_PROXY_AUTH_NEEDED) {
+ } else if (checklist->state[ACL_PROXY_AUTH] == ACL_LOOKUP_NEEDED) {
      debug(28, 3) ("aclCheck: checking password via authenticator\n");
      aclLookupProxyAuthStart(checklist);
      checklist->state[ACL_PROXY_AUTH] = ACL_LOOKUP_PENDING;
      return;
- } else if (checklist->state[ACL_PROXY_AUTH] == ACL_PROXY_AUTH_NEEDED) {
+ } else if ((checklist->state[ACL_PROXY_AUTH] == ACL_PROXY_AUTH_NEEDED)
+ || (checklist->state[ACL_LDAP_AUTH] == ACL_PROXY_AUTH_NEEDED))
{
      /* Special case. Client is required to resend the request
       * with authentication. The request is denied.
       */

Chris Lundell schrieb:

> Hi,
>
> OK - I get the same error ("document contains no data . . . ."). I can
> run group_ldap_auth from the command line just fine, but how are the
> arguments for the command line passed through squid.conf?
>
> I haven't read anything about group_ldap needing proxy_auth.
>
> I noticed that I get the "document contains no data" message when I try
> to apply the assigned acl element to a list:
>
> acl password ldap_auth REQUIRED
> ....
> ....
> http_access allow password
>
> Chris
>
> Louis-Steve Desjardins wrote:
> >
> > Thank for your input and sorry for that late reply,
> >
> > I have not edited the squid_ldap_auth.c file 'cause all the parameters are
> > pass in the command line.
> >
> > group_ldap_auth <search_base> <ldap_server_name>
> > [<ldap_port>]
> >
> > Everything seem the load without error but when my user issue a request they
> > get the error message "The document contained no data. Try again later, or
> > contact the server's administrator".
> >
> > Does group_ldap needs a proxy_auth acl ? I have not seen anything on that
> > but .....
> >
> > >>Have you edited the squid_ldap_auth.c file to include the bind dn for your
> > >>directory?
> >
> > >>Chris
> >
> > ldesjardins@mtl.centresjeunesse.qc.ca wrote:
> >
> > > I am having a problem getting our Squid server to use ldap
> > authentication.
> > > I've look in the mail archive and some people seem to have the same
> > problem but I could not see any answer to there request.
> > >
> > > We used both the ldap_auth program and the ldap_auth_group from FatGuy.
> > Both
> > > give us the same problem:
> > >
> > > - We don't get a pop up box asking for a username/password
> > >
> > > - We get the error message "The document contained no data. Try again
> > > later, or contact the server's administrator"
> > >
> > > Also, we observe that each time Squid as a request after that our number
> > of squidguard process goes up by 5 (prob. the number of child in the
> > > squid.conf).
> > >
> > > Does anyone got group_Ldap running ?
> > >
> > > Thank for your help !
>
> --
> Chris
Received on Thu Mar 22 2001 - 13:27:02 MST