<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:"Consolas","serif";
color:black;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body bgcolor=white lang=EN-US link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal><span style='color:#1F497D'>Hi Leonardo<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Thanks a lot for reply ,<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Let me ask you , do we need to do any delegation on the windows server ?<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Can u summarize to me wt we need on AD in additional to creating the users ?<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>cheers<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='color:windowtext'>From:</span></b><span style='color:windowtext'> squid-users [mailto:squid-users-bounces@lists.squid-cache.org] <b>On Behalf Of </b>Leonardo Rodrigues<br><b>Sent:</b> Monday, December 15, 2014 11:13 AM<br><b>To:</b> squid-users@lists.squid-cache.org<br><b>Subject:</b> Re: [squid-users] squid_ldap_auth: WARNING, could not bind to binddn 'Invalid credentials'<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal><br> I have several squids authenticating users using ldap_auth and it works fine. Users are located on the 'Users' OU and my config lines are:<br><br><br>(single line)<br>auth_param basic program /usr/lib/squid/squid_ldap_auth -P -R -b "dc=myad,dc=domain" -D "cn=ProxyUser,cn=Users,dc=myad,dc=domain"<br>-w "xxxxxxxxx" -f sAMAccountName=%s -h ad.ip.addr.ess<br><br>(single line)<br>external_acl_type ldap_group children=3 ttl=300 %LOGIN /usr/lib/squid/squid_ldap_group -P -R -b "dc=myad,dc=domain" -D "cn=ProxyUser,<br>cn=Users,dc=myad,dc=domain" -w "xxxxxxxxxxx" -f "(&(objectclass=person)(sAMAccountName=%v)(memberof=cn=%a,cn=Users,<br>dc=myad,dc=domain))" -h ad.ip.addr.ess<br><br><br>On 15/12/14 21:03, Ahmed Allzaeem wrote:<span style='font-size:12.0pt'><o:p></o:p></span></p></div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal>Hi guys <o:p></o:p></p><p class=MsoNormal>Im trying to use squid with active directory 2008 R2 as an external authentication<o:p></o:p></p><p class=MsoNormal>On DC called smart.ps<o:p></o:p></p><p class=MsoNormal>Create user squid and gave it delegation to the dc and put it also in the group admins in the OU=proxy<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p></blockquote><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><br><br><o:p></o:p></span></p><pre>-- <o:p></o:p></pre><pre><o:p> </o:p></pre><pre><o:p> </o:p></pre><pre> Atenciosamente / Sincerily,<o:p></o:p></pre><pre> Leonardo Rodrigues<o:p></o:p></pre><pre> Solutti Tecnologia<o:p></o:p></pre><pre> <a href="http://www.solutti.com.br">http://www.solutti.com.br</a><o:p></o:p></pre><pre><o:p> </o:p></pre><pre> Minha armadilha de SPAM, NÃO mandem email<o:p></o:p></pre><pre> <a href="mailto:gertrudes@solutti.com.br">gertrudes@solutti.com.br</a><o:p></o:p></pre><pre> My SPAMTRAP, do not email it<o:p></o:p></pre><pre><o:p> </o:p></pre><pre><o:p> </o:p></pre></div></body></html>