<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p><span id="result_box" class="" lang="en"><span title="Hola
comunidad, estoy intentando conectar mi squid a mi AD
utilizando ntml (i can´t use Kerberos).">#Hello community, I
am trying to connect my squid to my AD using ntml (i can't use
Kerberos). </span><span title="El problema radica que no he
encontrado la forma de hacer que los grupos que tengo en el AD
se vean en el squid.
">The problem is that I have not found a way to make the
groups I have in the AD look in the squid.<br>
<br>
</span><span title="esta es mi config actual
">#this is my current config using ldap using basic auth<br>
<br>
</span><span title="auth_param basic program
/usr/lib/squid/basic_ldap_auth -P -R -b
"dc=mi,dc=empresa,dc=cu" -D
cn=proxy,ou=ST,dc=mi,dc=empresa,dc=">auth_param basic program
/ usr / lib / squid / basic_ldap_auth -P -R -b "dc = mi, dc =
company, dc = cu" -D cn = proxy, ou = ST, dc = mi, dc =
company, dc = </span><span title="cu -W /etc/squid/ldap.txt
-f sAMAccountName=%s -v 3 -s sub -h 192.168.1.10
">cu -W /etc/squid/ldap.txt -f sAMAccountName =% s -v 3 -s sub
-h 192.168.1.10<br>
</span><span title="external_acl_type Group %LOGIN
/usr/lib/squid/ext_ldap_group_acl -R -b
"dc=mi,dc=empresa,dc=cu" -D
cn=proxy,ou=ST,dc=mi,dc=empresa,dc=cu">external_acl_type
Group% LOGIN / usr / lib / squid / ext_ldap_group_acl -R -b
"dc = mi, dc = company, dc = cu" -D cn = proxy, ou = ST, dc =
mi, dc = company, dc = cu </span><span title="-W
/etc/squid/ldap.txt -f
"(&(objectclass=user)(sAMAccountName=%u)(memberof=cn=%g,dc=mi,dc=empresa,dc=cu))"
-h">-W /etc/squid/ldap.txt -f "(& (objectclass = user)
(sAMAccountName =% u) (memberof = cn =% g, dc = mi, dc =
company, dc = cu))" -h </span><span title="192.168.1.10
">192.168.1.10<br>
</span><span title="auth_param basic children 10
">auth_param basic children 10<br>
</span><span title="auth_param basic realm apolo.mi.empresa.cu
">auth_param basic realm apolo.mi.empresa.cu<br>
</span><span title="auth_param basic credentialsttl 2 hour
">auth_param basic credentialsttl 2 hour<br>
</span><span title="acl basic_ldap_auth proxy_auth REQUIRED
">acl basic_ldap_auth proxy_auth REQUIRED<br>
</span><span title="http_access deny !basic_ldap_auth
">http_access deny! basic_ldap_auth<br>
<br>
</span><span title="de aqui saco 2 grupo
">#from here i get 2 group<br>
#<br>
</span><span title="i1 e i2
">#i1 and i2<br>
###########################<br>
</span><span title="acl i1 external Group Internet1
">acl i1 external Group Internet1<br>
</span><span title="acl i2 external Group Internet2
">acl i2 external Group Internet2<br>
<br>
</span><span
title="##################################################">####################################################################################################
</span><span title="#####
">#####<br>
<br>
</span><span title="mi configuración para ntml es
">#my configuration for ntml is<br>
<br>
</span><span title="auth_param ntlm program /usr/bin/ntlm_auth
--diagnostics --helper-protocol=squid-2.5-ntlmssp
--domain=mi.empresa.cu
">auth_param ntlm program / usr / bin / ntlm_auth
--diagnostics --helper-protocol = squid-2.5-ntlmssp --domain =
my.company.cu<br>
</span><span title="auth_param ntlm children 10
">auth_param ntlm children 10<br>
</span><span title="auth_param ntlm keep_alive off
">auth_param ntlm keep_alive off<br>
</span><span title="auth_param ntlm credentialsttl 2 hour
">auth_param ntlm credentialsttl 2 hour<br>
<br>
<br>
</span><span title="Lo que quiero es saber como poder utilizar
los grupos que se encuentran en mi active directory,
específicamente Internet1 e Internet2.
">#What I want is to know how to use the groups that are in my
active directory, specifically Internet1 and Internet2.<br>
<br>
</span><span title="cada ves que ejecuto "squid -k
parse" me muestra error en la línea donde defino los
grupos externos.
">#Every time I run "squid -k parse" it shows me an error in
the line where I define the external groups.<br>
<br>
</span><span title="estoy ejecutando la version 3.5.27">#I am
running version 3.5.27</span></span></p>
<pre class="moz-signature" cols="72">--
Saludos Cordiales
Lic. Alex Gutiérrez Martínez
Tel. +53 7 2710327</pre>
</body>
</html>