We used to patch squid with the Group Ldap from fatgut.org, but squid
became unstabled after this. I can't tell you if it's our fault (probably)
but now we're using a modify group_ldap authentificator that work's without
the patch and everything is fine.
We just took off the part from the module that used the custom ACL from the
patch and put the group in the command line. We don't get as much
flexibility (you can only look in one group) but it fits our need pretty
well and we can use the last stable version of squid (2.4STABLE1 witch is
not available from fatgut.org).
So, for us, the group_ldap module work just like any other auth_mod for
squid.
It goes like this in the squid.conf :
authenticate_program /usr/local/squid/bin/group_ldap_auth o=myOrg
group_proxy myServer.myDomain.com 389
I can send you the modified module if you want.
Louis-Steve Desjardins
<frahimpour@y
ahoo.com> Pour : squid-users@squid-cache.org
cc :
2001-06-29 Objet : [squid-users] Group LDAP
09:59 Authentication
Hi all
I have the same problem as Markus Forrer :
#####################################################
Currently I'm try to authentificate the users of Squid
against a LDAP
Server.
I'm using Squid 2.3 Stable3 and the Patch for LDAP
Group
Authentification
from www.fatgut.org/squid/group_ldap_auth.
When I use the auth program on the shell, it works.
When I try to use the auth program with Squid, I get
the following
error.
assertion failed: acl.c:1346 "OK"
The acl look's like this
acl ldapuser ldap_auth REQUIRED
http_access allow ldapuser
http_acces deny all
If I comment out these lines squid working fine, only
without
authentification.......
Someone outhere who use this kind of authentification
??? Or is there
another solution around for using LDAP
Authentification with groups??
###############################################
I tried Peter Smith's solution, but nothing changed!
Any idea???
Thanks Advance
__________________________________________________
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail
http://personal.mail.yahoo.com/
Received on Tue Jul 03 2001 - 10:00:18 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:00:59 MST