[squid-users] Problems with ldap authentication

Marcio Demetrio Bacci marciobacci at gmail.com
Mon Dec 7 18:47:57 UTC 2015

My LDAP Authentication do not work in Squid. I have already saw many
tutorials, but nothing solve this problem.
I have installed Squid 3.4 on Debian 8. My DC is a* Samba 4.2.*
In /var/log/squid3/cache.log appear the message:
*squid_ldap_auth: WARNING, could not bind to binddn 'Invalid credentials'*

Follows my squid.conf

http_port 3128
cache_mem 512 MB
cache_swap_low 80
cache_swap_high 90
maximum_object_size 512 MB
minimum_object_size 0 KB
maximum_object_size_in_memory 4096 KB
cache_replacement_policy heap LFUDA
memory_replacement_policy heap LFUDA
quick_abort_min -1 KB
detect_broken_pconn on
fqdncache_size 1024
refresh_pattern ^ftp:    1440    20%    10080
refresh_pattern ^gopher:    1440    0%    1440
refresh_pattern -i (/cgi-bin/|\?) 0 0%     0
refresh_pattern .        0    20%    4320
access_log /var/log/squid3/access.log
cache_log /var/log/squid3/cache.log
cache_dir aufs /var/spool/squid3 600 16 256

auth_param basic program /usr/lib/squid3/squid_ldap_auth -R -b
“dc=empresa,dc=com,dc=br” -D “cn=Administrator,dc=empresa,dc=com,dc=br” -w
"1234" -f sAMAccountName=%s -h
auth_param basic children 50
auth_param basic realm Web-Proxy
auth_param basic credentialsttl 1 minute

visible_hostname proxy.empresa.com.br
acl localhost src
acl SSL_ports port 22 443 563
acl Safe_ports port 80 8080
acl Safe_ports port 21
acl Safe_ports port 443 563
acl Safe_ports port 70
acl Safe_ports port 210
acl Safe_ports port 280
acl Safe_ports port 488
acl Safe_ports port 591
acl Safe_ports port 777
acl Safe_ports port 1025-65535
acl purge method PURGE
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
acl users proxy_auth REQUIRED
http_access allow users
acl lan src
http_access allow lan
http_access deny all
error_directory /usr/share/squid3/errors/en
coredump_dir /var/spool/squid3

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20151207/1bf96a6e/attachment.html>

More information about the squid-users mailing list