<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml"><head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
</head><body style="font-family: arial,helvetica,sans-serif; font-size: 13pt"><p></p><p>Hi,</p><p>I have connected my debian to my active directory. I don't have machine authentication by user but only by ip. attached my squid.conf.</p><p><br></p><p>thanks</p><p><br></p><p>#<br># LDAP & Kerberos (Active Directory) Authentication<br>#<br># Negociate kerberos and ntlm authentication<br>auth_param negotiate program /usr/lib/squid/negotiate_wrapper_auth -d --ntlm /usr/bin/ntlm_auth --diagnostics --helper-protocol=squid-2.5-ntlmssp --domain=TRIEFUS --kerberos /usr/lib/squid/negotiate_kerberos_auth -d -s GSS_C_NO_NAME<br>auth_param negotiate children 10<br>auth_param negotiate keep_alive off<br># Pure ntlm Authentication<br>auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp<br>auth_param ntlm children 20<br>auth_param ntlm keep_alive off<br># Provide basic ldap authentication for clients not authenticated via kerberos/ntlm<br>auth_param basic program /usr/lib/squid/basic_ldap_auth -h SRVMASTER-BIS.triefus.home -D "CN=squid,CN=Users,DC=triefus,DC=home“ -b ”dc=triefus,dc=home" -W /etc/squid/ldappass.txt -f "(samaccountname=%s)"<br>auth_param basic children 5<br>auth_param basic realm “Proxy Authentication”<br>auth_param basic credentialsttl 2 hours<br># ldap authorisation<br>external_acl_type memberof %LOGIN /usr/lib/squid/ext_ldap_group_acl -R -K -b "dc=triefus,dc=home“ -D ”CN=squid,CN=Users,DC=triefus,DC=home" -W /etc/squid/ldappass.txt -f "(&(objectclass=person)(sAMAccountName=%v))" -h SRVMASTER-BIS.triefus.home</p><p><br></p><p><br></p><p> <br></p><blockquote type="cite"><p>envoyé : 20 octobre 2020 à 13:42<br>de : Amos Jeffries <squid3@treenet.co.nz><br>à : squid-users@lists.squid-cache.org<br>objet : Re: [squid-users] active directory 2008.<br><br><br>On 20/10/20 10:44 pm, Christophe Leloup wrote:</p><blockquote type="cite"><p>Good morning all,<br><br>I am French. excuse me for my English.<br>I am looking for a tutorial. how integrated an active directory 2008 with squid.<br><br>do you have any leads or websites?</p></blockquote><p>That depends on what you are trying to make Squid do, which you have not<br>mentioned. For better help please provide details.<br><br><https://wiki.squid-cache.org/> has a lot of info.<br><br>Amos<br>_______________________________________________<br>squid-users mailing list<br>squid-users@lists.squid-cache.org<br>http://lists.squid-cache.org/listinfo/squid-users</p></blockquote></body></html>