<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 07/31/2015 08:34 AM, Dan Purgert
wrote:<br>
</div>
<blockquote
cite="mid:20150731083414.Horde.O7Y8v3AWuEI4ynTA-wxyvw1@192.168.10.20"
type="cite">Quoting Eliezer Croitoru <a class="moz-txt-link-rfc2396E" href="mailto:eliezer@ngtech.co.il"><eliezer@ngtech.co.il></a>:
<br>
<br>
<blockquote type="cite">I managed to make it work!
<br>
I am using ubuntu 14.04.2 with openLDAP and phpldapadmin.
<br>
I have changed my server to look like yours and it still didn't
work.
<br>
So what I did was this: I changed the command to:
<br>
/usr/lib/squid3/ext_ldap_group_acl -d -b "dc=ngtech,dc=local" -D
"cn=admin,dc=ngtech,dc=local" -w password-f
"(&(objectClass=*)(memberUid=%u)(cn=%g))" -h 127.0.0.1
<br>
<br>
Which actually works great.
<br>
I enter:"user1 parents" and it says OK.
<br>
<br>
I have been reading that there might be a reason that memberOf
will not work as expected and was hoping someone here might know
about it.
<br>
<br>
</blockquote>
<br>
<br>
Oh right, I had to compile in(?) something to make "memberOf" play
nice. Don't remember if it was in slapd or squid though... would
need to grab my setup notes from that server to see.
<br>
<br>
Glad to hear you got it working though!
<br>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
squid-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a>
<a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a>
</pre>
</blockquote>
since you have phpLDAPAdmin, my exports should be a near 1:1 import
for you.<br>
<br>
load the module:<br>
<br>
dn: cn=module{2},cn=config #<-- adjust the number between { and }
to your env<br>
cn: module{2} # <-- same adjustment as above<br>
objectclass: olcModuleList<br>
objectclass: top<br>
olcmoduleload: {0}memberof.la # <-- this is 0 because its the
first module loaded in this cn<br>
olcmodulepath: /usr/lib64/openldap #<-- adjust for your env, this
where fedora places the *.la files; memberof.la should be in this
dir<br>
<br>
load the overlay into the database (not the DIT):<br>
<br>
dn: olcOverlay={2}memberof,olcDatabase={2}mdb,cn=config #<--
again adjust for your env it is coincidence that both #s are 2 in
my env.<br>
objectclass: olcOverlayConfig<br>
objectclass: olcMemberOf<br>
objectclass: top<br>
olcmemberofrefint: TRUE<br>
olcoverlay: {2}memberof # <-- adjust for your env, too<br>
<br>
i will send screenshots from my phpLDAPAdmin to you off list<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
</body>
</html>