[squid-users] Error: squid_ldap_group: No such file or directory

[dolson at ihcrc.org]

Thank you for your help Amos.  Due to this new information, I'm looking at the squid.conf file I'm supposed to be writing and I see two statements that I would like to ask about.
1)
auth_param negotiate program /usr/local/bin/negotiate_wrapper -d --ntlm /usr/bin/ntlm_auth --diagnostics --helper-protocol=squid-2.5-ntlmssp --domain=EXAMPLE --kerberos /usr/lib/squid3/squid_kerb_auth -d -s GSS_C_NO_NAME

I know I need to change squid_kerb_auth to negotiate_kerberos_auth, but what I want to ask about is the command --helper-protocol=squid-2.5-ntlmssp  Is this command still valid?  It is in another portion of the squid.conf file as well, so I want to make sure.

Thank you again for your help.


-----Original Message-----
From: squid-users [mailto:squid-users-bounces at lists.squid-cache.org] On Behalf Of Amos Jeffries
Sent: Thursday, October 29, 2015 4:56 PM
To: squid-users at lists.squid-cache.org
Subject: Re: [squid-users] Error: squid_ldap_group: No such file or directory

On 30/10/2015 10:19 a.m., dolson wrote:
> Greetings,
> 
> I am working on setting up Squid 3 to authenticate from Active 
> directory by using the instructions found 
> http://wiki.squid-cache.org/ConfigExamples/Authenticate/WindowsActiveD
> irectory
> and
> http://wiki.bitbinary.com/index.php/Active_Directory_Integrated_Squid_
> Proxy and have had success until I reach the section for configuring 
> Squid.
> In the instructions found in the second link, there is a test for 
> testing squid_ldap_group.
> 
> squid_ldap_group testing Add testing section here for squid_ldap_group 
> - Thanks Robert. e.g.
> /usr/lib/squid3/squid_ldap_group -R -K -S -b "dc=example,dc=local" -D 
> squid at example.local -W /etc/squid3/ldappass.txt -f 
> "(&(objectclass=person)(sAMAccountName=%v)(memberof=cn=%g,ou=Security
> Groups,ou=MyBusiness,dc=example,dc=local))" -h dc1.example.local 
> EXAMPLE\Username Internet%20Users%20Standard Connected OK
> 
> When I am trying to complete this command, I get the following
> message:
> 
> Bash:  /usr/lib/squid3/squid_ldap_group:  No such file or directory
> 
> I have gone to the directory /usr/lib/squid3/ there is no directory or 
> file with that name.
> 
> I have installed Squid version 3.4.8.
> 
> I have been searching Google and all over the Squid site to see if I 
> can find any information as to how to resolve this issue, and I have 
> not yet found anything.  Any help would be greatly appreciated.

The tutorial(s) a bit old. The Squid-3.2 release notes explain it:
<http://www.squid-cache.org/Versions/v3/3.2/RELEASENOTES.html#ss2.6>

The new name for the same helper in your Squid version is ext_ldapgroup_acl

The "3" in the "squid3" paths are an artifact of the author having used a Debian based OS. Your OS may have different paths.


Cheers
Amos
_______________________________________________
squid-users mailing list
squid-users at lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users