[squid-users] Replacing Microsoft TMG by Squid.
Yuri Voinov
yvoinov at gmail.com
Fri Oct 16 19:28:20 UTC 2015
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
I have no sources right now, but looks like pure LDAP auth helper does
not selected....
17.10.15 1:10, Sebastien.Boulianne at cpu.ca пишет:
> I builded my own version too…
>
> I used these options.
>
> squid -v
> Squid Cache: Version 3.5.10-20151001-r13933
> Service Name: squid
> configure options: '--build=x86_64-redhat-linux-gnu'
'--host=x86_64-redhat-linux-gnu' '--program-prefix=' '--prefix=/usr'
'--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin'
'--sysconfdir=/etc' '--datadir=/usr/share' '--includedir=/usr/include'
'--libdir=/usr/lib64' '--libexecdir=/usr/libexec'
'--sharedstatedir=/var/lib' '--mandir=/usr/share/man'
'--infodir=/usr/share/info' '--disable-strict-error-checking'
'--exec_prefix=/usr' '--libexecdir=/usr/lib64/squid'
'--datadir=/usr/share/squid' '--sysconfdir=/etc/squid'
'--with-logdir=/var/log/squid' '--with-pidfile=/var/run/squid.pid'
'--disable-dependency-tracking' '--enable-eui'
'--enable-follow-x-forwarded-for' '--enable-auth'
'--enable-auth-basic=DB,LDAP,NCSA,NIS,POP3,RADIUS,SASL,SMB,getpwnam'
'--enable-auth-ntlm=smb_lm,fake'
'--enable-auth-digest=file,LDAP,eDirectory'
'--enable-auth-negotiate=kerberos'
'--enable-external-acl-helpers=file_userip,LDAP_group,time_quota,session,unix_group,wbinfo_group'
'--enable-cache-digests' '--enable-cachemgr-hostname=localhost'
'--enable-delay-pools' '--enable-epoll' '--enable-icap-client'
'--enable-ident-lookups' '--enable-linux-netfilter'
'--enable-removal-policies=heap,lru' '--enable-snmp' '--enable-ssl'
'--enable-ssl-crtd' '--enable-storeio=aufs,diskd,ufs' '--enable-wccpv2'
'--enable-esi' '--with-aio' '--with-default-user=squid'
'--with-filedescriptors=16384' '--with-dl' '--with-openssl'
'--with-pthreads' 'build_alias=x86_64-redhat-linux-gnu'
'host_alias=x86_64-redhat-linux-gnu' 'CFLAGS=-O2' --enable-ltdl-convenience
>
> De : squid-users [mailto:squid-users-bounces at lists.squid-cache.org] De
la part de Yuri Voinov
> Envoyé : 16 octobre 2015 15:09
> À : squid-users at lists.squid-cache.org
> Objet : Re: [squid-users] Replacing Microsoft TMG by Squid.
>
>
> To do custom build, you must build Squid from source yourself, and not
get from any repos, which is it's owner preferences impress.
>
> 17.10.15 1:06,
Sebastien.Boulianne at cpu.ca<mailto:Sebastien.Boulianne at cpu.ca> пишет:
> > I dont have any
> /usr/lib/squid/squid_ldap_auth.
>
>
>
> > There is no /usr/lib/squid directory.
>
>
>
> > De : squid-users
> [mailto:squid-users-bounces at lists.squid-cache.org] De la part de
> Yuri Voinov
>
> > Envoyé : 16 octobre 2015 15:03
>
> > À :
squid-users at lists.squid-cache.org<mailto:squid-users at lists.squid-cache.org>
>
> > Objet : Re: [squid-users] Replacing Microsoft TMG by Squid.
>
>
>
>
>
> > http://wiki.squid-cache.org/Features/Authentication
>
>
>
> > 17.10.15 1:01,
>
Sebastien.Boulianne at cpu.ca<mailto:Sebastien.Boulianne at cpu.ca><mailto:Sebastien.Boulianne at cpu.ca><mailto:Sebastien.Boulianne at cpu.ca>
> пишет:
>
> > > Is squid_ldap_auth was replaced
>
> > by digest_ldap_auth ?
>
>
>
>
>
>
>
> > > Thanks!
>
>
>
>
>
>
>
> > > [cid:image002.jpg at 01D10823.82D2DDB0]
>
>
>
>
>
>
>
> > > De : squid-users
>
> > [mailto:squid-users-bounces at lists.squid-cache.org] De
> la part de
>
> > Yuri Voinov
>
>
>
> > > Envoyé : 16 octobre 2015 14:53
>
>
>
> > > À :
>
squid-users at lists.squid-cache.org<mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org>
>
>
>
> > > Objet : Re: [squid-users] Replacing Microsoft TMG
> by Squid.
>
>
>
>
>
>
>
>
>
>
>
> > > Start from here:
>
>
>
>
>
>
>
> > >
> http://wiki.squid-cache.org/ConfigExamples/Authenticate/Ldap
>
>
>
>
>
>
>
> > > 16.10.15 23:51,
>
>
>
Sebastien.Boulianne at cpu.ca<mailto:Sebastien.Boulianne at cpu.ca><mailto:Sebastien.Boulianne at cpu.ca><mailto:Sebastien.Boulianne at cpu.ca><mailto:Sebastien.Boulianne at cpu.ca><mailto:Sebastien.Boulianne at cpu.ca><mailto:Sebastien.Boulianne at cpu.ca><mailto:Sebastien.Boulianne at cpu.ca>
>
> > пишет:
>
>
>
> > > > Hi all,
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> > > > Like you know, Microsoft discountinued
> the TMG.
>
>
>
>
>
>
>
> > > > The TMG was used as a reverse proxy.
>
>
>
>
>
>
>
> > > > Since many days, I work to replace our
> TMG by a
>
> > Squid server
>
>
>
> > > v3.5.10 with Oracle Linux 7 x64.
>
>
>
>
>
>
>
> > > > I moved some sites this week but I have
> a little
>
> > problem now.
>
>
>
>
>
>
>
> > > > How can I ask LDAP credentials for a
> user who want
>
> > to access
>
>
>
> > > a directory on another server ?
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> > > > I currently do that with our TMG.
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> > > > I used Google but I can only find doc
> about LDAP
>
> > auth for
>
>
>
> > > users they want to access the internet.
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> > > > [root at squid squid]# cd
> /usr/lib64/squid/
>
>
>
>
>
>
>
> > > > [root at squid squid]# ls
>
>
>
>
>
>
>
> > > > basic_db_auth
> basic_pam_auth
>
>
>
> > > cert_valid.pl ext_session_acl
>
>
>
> > > negotiate_kerberos_auth
> url_fake_rewrite
>
>
>
>
>
>
>
> > > > basic_getpwnam_auth
> basic_pop3_auth
>
>
>
> > > digest_edirectory_auth ext_time_quota_acl
>
>
>
> > > negotiate_kerberos_auth_test
> url_fake_rewrite.sh
>
>
>
>
>
>
>
> > > > basic_ldap_auth
> basic_radius_auth
>
>
>
> > > digest_file_auth ext_unix_group_acl
>
> > ntlm_fake_auth
>
>
>
>
>
>
>
> > > > basic_msnt_auth
> basic_sasl_auth
>
>
>
> > > digest_ldap_auth ext_wbinfo_group_acl
>
> > ntlm_smb_lm_auth
>
>
>
>
>
>
>
> > > > basic_msnt_multi_domain_auth
> basic_smb_auth
>
>
>
> > > diskd
> helper-mux.pl ssl_crtd
>
>
>
>
>
>
>
> > > > basic_ncsa_auth
> basic_smb_auth.sh
>
>
>
> > > ext_file_userip_acl log_db_daemon
>
> > storeid_file_rewrite
>
>
>
>
>
>
>
> > > > basic_nis_auth
> cachemgr.cgi
>
>
>
> > > ext_ldap_group_acl
> log_file_daemon unlinkd
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> > > > Thanks.
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> > > > Sebastien
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> > > >
> _______________________________________________
>
>
>
>
>
>
>
> > > > squid-users mailing list
>
>
>
>
>
>
>
> > > >
>
>
>
squid-users at lists.squid-cache.org<mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org>
>
>
>
>
>
>
>
> > > >
> http://lists.squid-cache.org/listinfo/squid-users
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> > > _______________________________________________
>
>
>
> > > squid-users mailing list
>
>
>
> > >
>
squid-users at lists.squid-cache.org<mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org>
>
>
>
> > > http://lists.squid-cache.org/listinfo/squid-users
>
>
>
>
>
>
>
> > _______________________________________________
>
> > squid-users mailing list
>
> >
squid-users at lists.squid-cache.org<mailto:squid-users at lists.squid-cache.org>
>
> > http://lists.squid-cache.org/listinfo/squid-users
>
>
>
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
iQEcBAEBCAAGBQJWIU/TAAoJENNXIZxhPexGZfoIAMEf8fbiOj/IfaJkCCsgOC45
F9up8PZescUvFUkreIMo14Esqqty3MuZZj3gqqakz775Sgky8XZuqaeMheQBatOq
M5w/x3g/q/X7wJNaVNxGLtXykg8mZ8D6LAEh3JufBFyvJBy4wW4Qp+8nG661nbd1
SshZci8w+oG5zX1PwhGWM0qfqkKqRDhCctekVOZ64jPEQhKhpqL2X7baeAYY2o35
NnPSvkTfQOgiPmXg9IMk6LvtLPFefw/vpkGgBhQBwHvoNitSkH4DqPMCxgLByhgF
L3KsHA4NWQNsh4ro4Lg8218e36RRUjV5QZzPcxDnGfqlxPmDm8hl71YMYVotI+0=
=odYl
-----END PGP SIGNATURE-----
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20151017/2f5d7ef4/attachment-0001.html>
More information about the squid-users
mailing list