<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=us-ascii" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 11.00.10570.1001"></HEAD>
<BODY>
<DIV dir=ltr align=left><SPAN class=117325706-29052019><FONT color=#0000ff
size=2 face=Arial>Hai, </FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=117325706-29052019><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=117325706-29052019><FONT color=#0000ff
size=2 face=Arial>You are probely missing in you smb.conf: </FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=117325706-29052019><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=117325706-29052019><FONT color=#0000ff
size=2 face=Arial>ntlm auth = yes </FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=117325706-29052019><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=117325706-29052019></SPAN><SPAN
class=117325706-29052019><FONT color=#0000ff size=2
face=Arial></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=117325706-29052019><FONT color=#0000ff
size=2 face=Arial>Greetz, </FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=117325706-29052019><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=117325706-29052019><FONT color=#0000ff
size=2 face=Arial>Louis</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=117325706-29052019><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV><BR>
<BLOCKQUOTE
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px"
dir=ltr>
<DIV lang=nl class=OutlookMessageHeader dir=ltr align=left>
<HR tabIndex=-1>
<FONT size=2 face=Tahoma><B>Van:</B> squid-users
[mailto:squid-users-bounces@lists.squid-cache.org] <B>Namens </B>Ilias
Clifton<BR><B>Verzonden:</B> woensdag 29 mei 2019 6:42<BR><B>Aan:</B>
squid-users@lists.squid-cache.org<BR><B>Onderwerp:</B> [squid-users] LDAP
authentication from android and iphones<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV style="FONT-SIZE: 12px; FONT-FAMILY: Verdana">
<DIV>Hi All,</DIV>
<DIV> </DIV>
<DIV>I have Squid 3.5.27 running on Ubuntu 18.04.2, and have been unsuccesfull
in being able to authenticate users via ldap (kerberos is working well)</DIV>
<DIV> </DIV>
<DIV>Currently it's iphone and android users that are having the issue - all
other users are authenticating via kerberos.</DIV>
<DIV> </DIV>
<DIV>In squid.conf, I have:</DIV>
<DIV>auth_param basic program /usr/lib/squid/basic_ldap_auth -d -R -b
"OU=users,DC=domain,DC=com" -D squid@domain.com -W /etc/squid/ldappass.txt -f
sAMAccountName=%s -h dc.domain.com</DIV>
<DIV> </DIV>
<DIV>When a user attempts to browse via the proxy, I see in access.log:</DIV>
<DIV> </DIV>
<DIV>1559096820.116 0 10.99.88.77 TCP_DENIED/407 2248 GET
<A href="http://www.google.com" target=_blank>http://www.google.com</A> -
HIER_NONE/- text/html</DIV>
<DIV> </DIV>
<DIV>And the user is prompted for a username and password..</DIV>
<DIV> </DIV>
<DIV>I then see in cache.log:</DIV>
<DIV> </DIV>
<DIV>basic_ldap_auth.cc(691): pid=32625 :user filter
'sAMAccountName=username', searchbase
'OU=users,DC=domain,DC=com'<BR>basic_ldap_auth.cc(746): pid=32625 :attempting
to authenticate user 'CN=Users Fullname,OU=users,DC=domain,DC=com'</DIV>
<DIV> </DIV>
<DIV>But the user just keeps getting prompted for username and password over
and over, and I continue to see:</DIV>
<DIV> </DIV>
<DIV>1559096820.116 0 10.99.88.77 TCP_DENIED/407 2248 GET
<A href="http://www.google.com" target=_blank>http://www.google.com</A> -
HIER_NONE/- text/html</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>If I run the following on the command line, it appears to authenticate
correctly:</DIV>
<DIV> </DIV>
<DIV>/usr/lib/squid/basic_ldap_auth -d -R -b "OU=users,DC=domain,DC=com" -D
squid@domain.com -W /etc/squid/ldappass.txt -f sAMAccountName=%s -h
dc.domain.com</DIV>
<DIV>username password</DIV>
<DIV> </DIV>
<DIV>basic_ldap_auth.cc(691): pid=32625 :user filter
'sAMAccountName=username', searchbase
'OU=users,DC=domain,DC=com'<BR>basic_ldap_auth.cc(746): pid=32625 :attempting
to authenticate user 'CN=Users Fullname,OU=users,DC=domain,DC=com'</DIV>
<DIV>OK</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>What else can I do for troubleshooting?</DIV>
<DIV> </DIV>
<DIV> </DIV></DIV></BLOCKQUOTE></BODY></HTML>