[squid-users] squid_ldap_auth: WARNING, could not bind to binddn 'Invalid credentials'

Ahmed Allzaeem ahmed.zaeem at netstream.ps
Tue Dec 16 08:25:41 UTC 2014


Hi Leonardo

Thanks a lot for reply ,

Let me ask you , do we need to do any delegation on the windows server ?

 

Can u summarize to me wt we need on AD in additional to creating the users ?

 

 

cheers

 

From: squid-users [mailto:squid-users-bounces at lists.squid-cache.org] On Behalf Of Leonardo Rodrigues
Sent: Monday, December 15, 2014 11:13 AM
To: squid-users at lists.squid-cache.org
Subject: Re: [squid-users] squid_ldap_auth: WARNING, could not bind to binddn 'Invalid credentials'

 


    I have several squids authenticating users using ldap_auth and it works fine. Users are located on the 'Users' OU and my config lines are:


(single line)
auth_param basic program /usr/lib/squid/squid_ldap_auth -P -R -b "dc=myad,dc=domain" -D "cn=ProxyUser,cn=Users,dc=myad,dc=domain"
-w "xxxxxxxxx" -f sAMAccountName=%s -h ad.ip.addr.ess

(single line)
external_acl_type ldap_group children=3 ttl=300 %LOGIN /usr/lib/squid/squid_ldap_group -P -R -b "dc=myad,dc=domain" -D "cn=ProxyUser,
cn=Users,dc=myad,dc=domain" -w "xxxxxxxxxxx" -f "(&(objectclass=person)(sAMAccountName=%v)(memberof=cn=%a,cn=Users,
dc=myad,dc=domain))" -h ad.ip.addr.ess


On 15/12/14 21:03, Ahmed Allzaeem wrote:

Hi guys 

Im trying to use squid with active directory  2008 R2 as an external authentication

On DC called smart.ps

Create user squid and gave it delegation to the dc and put it also in the group admins in the OU=proxy

 





-- 
 
 
        Atenciosamente / Sincerily,
        Leonardo Rodrigues
        Solutti Tecnologia
        http://www.solutti.com.br
 
        Minha armadilha de SPAM, NÃO mandem email
        gertrudes at solutti.com.br <mailto:gertrudes at solutti.com.br> 
        My SPAMTRAP, do not email it
 
 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20141216/4fd77284/attachment-0001.html>


More information about the squid-users mailing list