Re: [squid-users] question on digest_ldap_auth

You need a special hash, none of native AD

your properti should have

REALM:MD5(user:REALM:password)
On Tuesday 13 January 2009 08:59:46 Leonardo Rodrigues Magalhães wrote:
> i'm actually running squid (2.7 stable4) with squid_ldap_auth for
> authenticating users in my MS Active Directory tree. I'm running:
>
> auth_param basic program /usr/bin/squid_ldap_auth -R -b
> "dc=XXXXXXX,dc=XXXXX" -D "cn=XXXXX,ou=Internet,dc=XXXXXX,dc=XXXXXXX"
> -w "XXXXXX" -f sAMAccountName=%s -h 192.168.0.8
>
>
> i was trying to change from basic authentication to digest one, so
> avoiding cleartext passwords to flow over network. but i'm not having
> success on that.
>
>
> can anyone share a working digest_ldap_auth syntax that is working
> to authenticate users in MS AD ???
>
> Thanks.
Received on Wed Jan 14 2009 - 05:04:17 MST