<html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><div>Hi All,</div>
<div> </div>
<div>I have Squid 3.5.27 running on Ubuntu 18.04.2, and have been unsuccesfull in being able to authenticate users via ldap (kerberos is working well)</div>
<div> </div>
<div>Currently it's iphone and android users that are having the issue - all other users are authenticating via kerberos.</div>
<div> </div>
<div>In squid.conf, I have:</div>
<div>auth_param basic program /usr/lib/squid/basic_ldap_auth -d -R -b "OU=users,DC=domain,DC=com" -D squid@domain.com -W /etc/squid/ldappass.txt -f sAMAccountName=%s -h dc.domain.com</div>
<div> </div>
<div>When a user attempts to browse via the proxy, I see in access.log:</div>
<div> </div>
<div>1559096820.116 0 10.99.88.77 TCP_DENIED/407 2248 GET <a href="http://www.google.com" target="_blank">http://www.google.com</a> - HIER_NONE/- text/html</div>
<div> </div>
<div>And the user is prompted for a username and password..</div>
<div> </div>
<div>I then see in cache.log:</div>
<div> </div>
<div>basic_ldap_auth.cc(691): pid=32625 :user filter 'sAMAccountName=username', searchbase 'OU=users,DC=domain,DC=com'<br/>
basic_ldap_auth.cc(746): pid=32625 :attempting to authenticate user 'CN=Users Fullname,OU=users,DC=domain,DC=com'</div>
<div> </div>
<div>But the user just keeps getting prompted for username and password over and over, and I continue to see:</div>
<div> </div>
<div>1559096820.116 0 10.99.88.77 TCP_DENIED/407 2248 GET <a href="http://www.google.com" target="_blank">http://www.google.com</a> - HIER_NONE/- text/html</div>
<div> </div>
<div> </div>
<div>If I run the following on the command line, it appears to authenticate correctly:</div>
<div> </div>
<div>/usr/lib/squid/basic_ldap_auth -d -R -b "OU=users,DC=domain,DC=com" -D squid@domain.com -W /etc/squid/ldappass.txt -f sAMAccountName=%s -h dc.domain.com</div>
<div>username password</div>
<div> </div>
<div>basic_ldap_auth.cc(691): pid=32625 :user filter 'sAMAccountName=username', searchbase 'OU=users,DC=domain,DC=com'<br/>
basic_ldap_auth.cc(746): pid=32625 :attempting to authenticate user 'CN=Users Fullname,OU=users,DC=domain,DC=com'</div>
<div>OK</div>
<div> </div>
<div> </div>
<div>What else can I do for troubleshooting?</div>
<div> </div>
<div> </div></div></body></html>