Re: [squid-users] LDAP authentication to Squid

squid.conf do not understand about quoted arguments. Remove the quotes and
you should be fine.

Note: If any of the arguments to a helper needs to contain whitespace (space,
tab etc) then currently a wrapper script needs to be used to start the
helper..

#!/bin/sh
exec /path/to/helper arguments...

And give the path to this wrapper script in squid.conf.

Regards
Henrik

Stephen wrote:
> I'm having trouble authenticating squid against our openldap server. The
> message I get is "Proxy authentication failed! Do you want to retry?"
>
> Here is the setup with a vanilla squid.conf (fresh install on RedHat
> 7.3). I'm testing on the "localhost" and so there are no lan acls below.
> <snip>
> authenticate_program /usr/lib/squid/squid_ldap_auth -p -R -b
> "dc=shine,dc=co,d
> c=nz" -f uid=%s 192.168.0.2
>
> acl okuser proxy_auth REQUIRED
>
> http_access allow okuser
> <end snip>
>
>
> I can run the following
>
> ./usr/lib/squid/squid_ldap_auth -p -R -b "dc=shine,dc=co,d
> c=nz" -f uid=%s 192.168.0.2
> auser apssword
> OK
>
>
> I've searched the lists, but haven't seen a similar situation, i.e LDAP
> authentication is fine, however the proxy server isn't picking it up.
>
> Using redhat 7.3 with Squid 2.4.STABLE6 installed from the rpm. Openldap
> is 2.0.23-4 also from the RPM.
>
> (Aside: Thank you Henrik for your expert assistance on the list.
> Previous postings made the link to openldap reasonably straightforward.)
>
> Some assistance as to what to look for now would be much appreciated.
>
> Regards
> Stephen

-- 
Basic free Squid support provided thanks to MARA Systems AB
Your source of advanced reverse proxy solutions or customized
Squid solutions. http://www.marasystems.com/products/