Re: [squid-users] RE : [squid-users] ldap_auth_group :document contained no data....

Dirk,

Ah! Viel Danke! :)

Chris

Dirk Datzert wrote:
>
> Hi,
>
> I had a similar error last week and Tobi from fatgut.org sent me a patch. Check
> your cache.log: if an assert on line 1346 in file acl.c is detected you must apply
> the following patch:
>
> --- squid-2.3.STABLE3-ldap_auth/src/acl.c.orig Sun Mar 18 18:20:46 2001
> +++ squid-2.3.STABLE3-ldap_auht/src/acl.c Sun Mar 18 18:28:40 2001
> @@ -2012,13 +2012,13 @@
> aclLookupLdapAuthStart(checklist);
> checklist->state[ACL_LDAP_AUTH] = ACL_LOOKUP_PENDING;
> return;
> - } else if (checklist->state[ACL_PROXY_AUTH] == ACL_PROXY_AUTH_NEEDED ||
> - checklist->state[ACL_LDAP_AUTH] == ACL_PROXY_AUTH_NEEDED) {
> + } else if (checklist->state[ACL_PROXY_AUTH] == ACL_LOOKUP_NEEDED) {
> debug(28, 3) ("aclCheck: checking password via authenticator\n");
> aclLookupProxyAuthStart(checklist);
> checklist->state[ACL_PROXY_AUTH] = ACL_LOOKUP_PENDING;
> return;
> - } else if (checklist->state[ACL_PROXY_AUTH] == ACL_PROXY_AUTH_NEEDED) {
> + } else if ((checklist->state[ACL_PROXY_AUTH] == ACL_PROXY_AUTH_NEEDED)
> + || (checklist->state[ACL_LDAP_AUTH] == ACL_PROXY_AUTH_NEEDED))
> {
> /* Special case. Client is required to resend the request
> * with authentication. The request is denied.
> */
>
> Chris Lundell schrieb:
>
> > Hi,
> >
> > OK - I get the same error ("document contains no data . . . ."). I can
> > run group_ldap_auth from the command line just fine, but how are the
> > arguments for the command line passed through squid.conf?
> >
> > I haven't read anything about group_ldap needing proxy_auth.
> >
> > I noticed that I get the "document contains no data" message when I try
> > to apply the assigned acl element to a list:
> >
> > acl password ldap_auth REQUIRED
> > ....
> > ....
> > http_access allow password
> >
> > Chris
> >
> > Louis-Steve Desjardins wrote:
> > >
> > > Thank for your input and sorry for that late reply,
> > >
> > > I have not edited the squid_ldap_auth.c file 'cause all the parameters are
> > > pass in the command line.
> > >
> > > group_ldap_auth <search_base> <ldap_server_name>
> > > [<ldap_port>]
> > >
> > > Everything seem the load without error but when my user issue a request they
> > > get the error message "The document contained no data. Try again later, or
> > > contact the server's administrator".
> > >
> > > Does group_ldap needs a proxy_auth acl ? I have not seen anything on that
> > > but .....
> > >
> > > >>Have you edited the squid_ldap_auth.c file to include the bind dn for your
> > > >>directory?
> > >
> > > >>Chris
> > >
> > > ldesjardins@mtl.centresjeunesse.qc.ca wrote:
> > >
> > > > I am having a problem getting our Squid server to use ldap
> > > authentication.
> > > > I've look in the mail archive and some people seem to have the same
> > > problem but I could not see any answer to there request.
> > > >
> > > > We used both the ldap_auth program and the ldap_auth_group from FatGuy.
> > > Both
> > > > give us the same problem:
> > > >
> > > > - We don't get a pop up box asking for a username/password
> > > >
> > > > - We get the error message "The document contained no data. Try again
> > > > later, or contact the server's administrator"
> > > >
> > > > Also, we observe that each time Squid as a request after that our number
> > > of squidguard process goes up by 5 (prob. the number of child in the
> > > > squid.conf).
> > > >
> > > > Does anyone got group_Ldap running ?
> > > >
> > > > Thank for your help !
> >
> > --
> > Chris

-- 
Chris