[squid-users] Squid + Ldap + Lotus Notes Problem

From: William Mikanowski <wmikanowski@dont-contact.us>
Date: Tue, 10 Feb 2004 13:51:09 +0100 (CET)

Hi,
I have a problem with ldap authentication with Lotus
Notes 5.

My environment details :

OS : RH 7.3
Squid : squid-2.5.STABLE4

LDAP directory is structured using DN:s like
CN=<login>, O=DOM

I try, ldapsearch -x -D "UID=_Administrateur, O=DOM"
-W -b O=DOM "objectClass=*"

But it doesn’t retrieve the records.

So i try a X-Windows tool to test LDAP connectivity
and retrieve all the records

My squid.conf file :
######################################################
cache_effective_user squid
cache_effective_group squid

http_port 8080
icp_port 0

acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY

cache_mem 64 MB
cache_swap_low 90
cache_swap_high 95
maximum_object_size 4096 KB
cache_dir ufs /usr/local/squid/var/cache 4096 16 256
visible_hostname ProxySquid

cache_access_log /usr/local/squid/var/logs/access.log
cache_log /usr/local/squid/var/logs/cache.log
cache_store_log /usr/local/squid/var/logs/store.log
logfile_rotate 7

client_netmask 255.255.255.255
ftp_user proxy@dom.fr
error_directory /usr/local/squid/share/errors/French
cache_mgr admin@dom.fr

refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320

positive_dns_ttl 24 hours
negative_dns_ttl 5 minutes
connect_timeout 2 minutes
read_timeout 2 minutes
request_timeout 5 minutes

cache_peer VirusWall.dom.fr parent 8081 0 default
no-query

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl local_net src 10.0.0.0/255.0.0.0
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl CONNECT method CONNECT

#################### AUTHENTICATION
###################

auth_param basic program
/usr/local/squid/libexec/squid_ldap_auth -b o=dom -f
cn=%s -h 10.0.0.1
auth_param basic children 10
auth_param basic realm Authentification au Proxy Squid
auth_param basic credentialsttl 2 hours
acl user_auth proxy_auth REQUIRED
http_access allow user_auth

#######################################################

http_access allow local_net
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny all
http_reply_access allow all

#######################################################

How might I accomplish this?
Any idea's will be very helpful
Thanks in advance

Best regards

William Mikanowski

        

        
                
Yahoo! Mail : votre e-mail personnel et gratuit qui vous suit partout !
Créez votre Yahoo! Mail sur http://fr.benefits.yahoo.com/
Received on Tue Feb 10 2004 - 05:51:12 MST

This archive was generated by hypermail pre-2.1.9 : Mon Mar 01 2004 - 12:00:02 MST