Comments on: Configure squid for LDAP authentication using squid_ldap_auth helper

By: Sagar

Sagar — Sat, 23 Jul 2011 13:12:37 +0000

while trying to communicate with the LDAP server, am getting an ERR.

/usr/local/squid/libexec/squid_ldap_auth -b o=xyz,c=IN -D cn=Manager,o=xyz,c=IN -w adDs7w543FDsf -h ldap.xyz.com
Where r we going wrong? However we are able to telnet LDAP server on the prescribed port…..
Can anyone help on this?????

By: Markus

Markus — Tue, 12 Jul 2011 21:37:37 +0000

Hello everyone,

please consider the following line in the squid.conf, if you try to authenticate against ldap server.
auth_param basic utf8 on

If the browser authentification is transmitted via iso 8859-1 (west europe) and ldap only understands UTF-8, some characters will not be correctly sent to and interpreted by the ldap server.
add the line and give it a try…

with kind regards

Markus (Germany)

By: Manoranjan

Manoranjan — Wed, 27 Apr 2011 11:29:38 +0000

thanks a ton bro…. mine started workin with -v 3
auth_param basic program /usr/lib64/squid/squid_ldap_auth -b dc=MYDOM -D cn=root,dc=MYDOM -w password -H ldap://127.0.0.1 -v 3 -f uid=%s

By: cristian

cristian — Mon, 18 Jan 2010 16:52:34 +0000

Its posible to setup squid with zimbra with enable/disable users suport only for internet access ?

By: khaled

khaled — Sun, 10 Jan 2010 10:23:32 +0000

i can ‘nt bind the server zimbra with php what i must to do?

By: Niraj M. Vara

Niraj M. Vara — Thu, 24 Sep 2009 05:27:54 +0000

this is perfect working for squid ldap authentication, my query is that we have any perl or cgi script which can change users password from anywhere.

By: Deiveegan.S

Deiveegan.S — Sat, 19 Sep 2009 06:09:18 +0000

hello sir

how to configure LDAP in Red hat Linux 5.3 .then how to make centralized login for windows and linux .Here we are having Nasstore ,Linux mail server, squid and one windows client . the user should login in one user name and password to all the system above please give me your suggestion and tutorial to do ..which flavor is essential for LDAP Fedora or red hat Linux

Thanking you,

with regards
Deiveegan.S
Tifac-Core
SASTRA University,
Thanjavur-613402
Mobile :09843015235

By: Zied Fakhfakh

Zied Fakhfakh — Tue, 19 May 2009 07:21:24 +0000

I got this error too,

and I’m pretty sure it’s a permission issue. As the LDAP server from LDAP won’t let you see (read) the userPassword Attribute.

Should we create a squid user on ldap, give him the permission to read userPassword and uid ?

any idea is welcome,
Zied.

By: eder

eder — Mon, 22 Dec 2008 14:21:17 +0000

Hello.
I’m trying to auth against zimbra with this command :

/usr/lib64/squid/squid_ldap_auth -v 3 -b dc=zimbra,dc=mydomain,dc=com,dc=br -f “(&(uid=%s)(objectClass=zimbraAccount))” -h myserver.mydomain.com.br

after inserting user pass and user@domain I get this answer.

squid_ldap_auth: WARNING, LDAP search error ‘No such object’
ERR Success

could you help me, please?

By: rajkumar

rajkumar — Tue, 16 Dec 2008 14:39:32 +0000

Hi Friends,

this is the first time i’m posting query.i need in help for configure squid proxy server . i.e, i want to block url and download by user based , not based on ip address. that while i’m trying to open IE (or) FIREFOX (or) OPERA , it have to ask for username and password , the permission will be granted accordimg to user. if any user can login in any system but proxy have to block according to their username and password. i need squid proxy based on user restriction not on ip address restricting. please try to solve my problem by sending configuration method to me. thank you friends

By: Paul

Paul — Mon, 15 Dec 2008 10:04:31 +0000

Excellent! I also had to specify version 3 before my query would work. Thanks.

By: John J. Martinez

John J. Martinez — Sat, 13 Dec 2008 20:46:13 +0000

Excelente!!!
Muchas gracias!!
Excelent!!!
Very thanks!!

By: Deepak

Deepak — Mon, 31 Mar 2008 05:13:49 +0000

IF i configured Active directory Ldap with Squid for authendication than ,how can i block internet access as per user ??? want to block internet access as per user.

By: tt binda

tt binda — Thu, 27 Mar 2008 10:33:02 +0000

Ehi! If you have any problem, start to try with -v 3 instead of ldap version 2.
I could bind to my ldap server in reason of this.
It is a good start this try:
# /usr/lib/squid/ldap_auth -b “dc=mydc” -D cn=admin,dc=mydc -w passwd -H ldap://ldapserver -v 3 -f “uid=%s”

when typed name and password you must see
OK. Be sure to have typed name and password with a blank separator.
byee