Re: [squid-users] Syntax Correct group_ldap_auth ?

From: ROUTIER Gilles <gilles.routier@dont-contact.us>
Date: Thu, 07 Nov 2002 14:39:46 +0100

Thanks,

The OpenLdap libraries were not installed in the good directory.
Now it's OK but i do not manage to put on group_ldap_auth

I would like tu use group_ldap_auth
I have a group which names INTERNET, and I would want that only the persons of this
group can reach Proxy.
But, I do not know or to specify the name of the group ?
You can say to me if the syntax is correct?

SQUID.CONF
auth_param basic program /usr/lib/squid/squid_ldap_auth -u uid -b
ou=public,ou=cicoa,o=cnamts,c=fr -h hermes1.cicoa.cnamts.fr -p 389
auth_param basic children 5
auth_param basic realm Squid proxy-caching web serveruth_param basic program
auth_param basic credentialsttl 2 hours

external_acl_type ldapou %LOGIN /usr/lib/squid/group_ldap_auth -b
"ou=public,ou=cicoa,o=cnamts,c=fr" -f "(&(cn=INTERNET)(uid=%v)(ou=%a))" -h
hermes1.cicoa.cnamts.fr -p 389

acl ou_Testing external ldapou INTERNET
http_access allow ou_Testing
http_access deny all

Thanks
Gilles

"Waitman C. Gobble" a écrit :

> hello
>
> perhaps it cannot find the ldap headers on your system, if in fact they
> are installed. that would be my first guess at that type of error.
>
> did you build openldap from scratch or use an rpm?
>
> i searched dejanews.com for some reference to setting the ldap install
> location in the ./configure command, however i didn't have any luck yet.
>
> if i find an answer i will post it here, however it is kind of sleepy in
> my timezone... might not be speedy.
>
> best,
>
> Waitman Gobble
> EMK Design
> Buena Park CA
> +1.7145222528
>
> On Thu, 2002-11-07 at 02:13, Robert Collins wrote:
> Dude, have some patience. This is a volunteer list, not a commercial
> support forum!
>
> I suspect you need to install some libraries. As I don't build with ldap
> myself, thats all I can offer.
>
> Rob
>
>
> On Thu, 2002-11-07 at 20:04, ROUTIER Gilles wrote:
> > I have Download Squid2.5STABLE1.
> > It's running on REDHAT 7.2
> >
> > I configure squid like this :
> >
> > ./configure --prefix==/etc/squid --sysconfdir=/etc/squid --exec-prefix=/usr
> > --libexecdir=/usr/lib/squid --enable-external-acl-helpers="ldap_group"
> > --enable-basic-auth-helpers="LDAP"
> >
> > When i launch make, i have this error :
> >
> > Making all in LDAP
> > make[3]: Entre dans le répertoire
> > `/usr/src/squid/squid-2.5.STABLE1/helpers/basic_auth/LDAP'
> > gcc -g -O2 -Wall -g -o squid_ldap_auth squid_ldap_auth.o
> > -L../../../lib -lmiscutil -lldap -llber -lm -lresolv -lbsd -lnsl
> > squid_ldap_auth.o: In function `squid_ldap_errno':
> > /usr/src/squid/squid-2.5.STABLE1/helpers/basic_auth/LDAP/squid_ldap_auth.c:78:
> > undefined reference to `ldap_get_option'
> > squid_ldap_auth.o: In function `squid_ldap_set_aliasderef':
> > /usr/src/squid/squid-2.5.STABLE1/helpers/basic_auth/LDAP/squid_ldap_auth.c:84:
> > undefined reference to `ldap_set_option'
> > squid_ldap_auth.o: In function `squid_ldap_set_referrals':
> > /usr/src/squid/squid-2.5.STABLE1/helpers/basic_auth/LDAP/squid_ldap_auth.c:90:
> > undefined reference to `ldap_set_option'
> > collect2: ld returned 1 exit status
> > make[3]: *** [squid_ldap_auth] Erreur 1
> > make[3]: Quitte le répertoire
> > `/usr/src/squid/squid-2.5.STABLE1/helpers/basic_auth/LDAP'
> > make[2]: *** [all-recursive] Erreur 1
> > make[2]: Quitte le répertoire
> > `/usr/src/squid/squid-2.5.STABLE1/helpers/basic_auth'
> > make[1]: *** [all-recursive] Erreur 1
> > make[1]: Quitte le répertoire `/usr/src/squid/squid-2.5.STABLE1/helpers'
> >
> > make: *** [all-recursive] Erreur 1
> >
> >
> > I don't understand
> > You have a idea, please.
> >
> > Thanks
> > Gilles
> >
>
>
>
>
Received on Thu Nov 07 2002 - 06:41:45 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:11:11 MST