FW: [squid-users] Configuring SQUID in Windows to authenticate with Active Directory

From: Liyanage, Lakshman <lakshman.liyanage_at_jcu.edu.au>
Date: Sun, 13 Feb 2011 18:07:08 -0800

Hi Guido,

Thank you for your email. I added the .exe extension and now squid starts without any errors. However, I have a feeling that it does not talk to Micosoft Active Directory to authenticate users - if I key in an arbitary value for the -w "password" option, squid still starts. I was expecting to see an error.

cache.log has the following entry:
2011/01/27 16:51:09| Accepting proxy HTTP connections at 0.0.0.0, port 3128, FD 14.
Is that normal?

Also if I try to use a browser (I used Firefox)- it prompts for user credentials, but if I use any usernames in Microsoft Active Directory it does not authenticate against those usernames. The browser keeps on promptimng for a username and a password. access.log is filled with TCP_DENIED/407 errors.

Any assistance is muchly appreciated.

Thanks and Regards

Lakshman


________________________________________
From: Guido Serassio [guido.serassio_at_acmeconsulting.it]
Sent: Sunday, 13 February 2011 5:35 PM
To: Liyanage, Lakshman; squid-users_at_squid-cache.org
Subject: R: [squid-users] Configuring SQUID in Windows to authenticate with Active Directory

Hi,

You must add the .exe extension after squid_ldap_auth as noted in the
documentation.

Regards

Guido Serassio
Acme Consulting S.r.l.
Microsoft Gold Certified Partner
Via Lucia Savarino, 1 10098 - Rivoli (TO) - ITALY
Tel. : +39.011.9530135 Fax. : +39.011.9781115
Email: guido.serassio_at_acmeconsulting.it
WWW: http://www.acmeconsulting.it


> -----Messaggio originale-----
> Da: Liyanage, Lakshman [mailto:lakshman.liyanage_at_jcu.edu.au]
> Inviato: sabato 12 febbraio 2011 4.41
> A: squid-users_at_squid-cache.org
> Oggetto: [squid-users] Configuring SQUID in Windows to authenticate
with
> Active Directory
>
> Hello All,
> I am new to SQUID and hence require some help.
> I have SQUID 2.7 Stable8 installed on a Windows Server 2008 R2. I am
now
> trying to configure it to use MS Active Directory. I have the
following
> lines in the .conf file:
> -----
> auth_param basic program c:/squid/libexec/squid_ldap_auth -R -b
"dc=ad-
> mycompany,dc=domain,dc=com" -D "cn=admin,cn=Users,dc=ad-
> mycompany,dc=domain,dc=com" -w "password" -f sAMAccountName=%s -h
> myipnumber
> auth_param basic children 5
> auth_param basic realm My_Company
> auth_param basic credentialsttl 5 minute
> ------
> When I try to start SQUID, Windows throws" Error 1067: The process
> terminated unexpectedly" at me. I have a web server/service running
on
> port 80 and 443.
> What am I missing here?
> Many many thanks for your help
>
> Lakshman
Received on Mon Feb 14 2011 - 02:08:08 MST

This archive was generated by hypermail 2.2.0 : Mon Feb 14 2011 - 12:00:01 MST