[squid-users] Replacing Microsoft TMG by Squid.

Sebastien.Boulianne at cpu.ca Sebastien.Boulianne at cpu.ca
Fri Oct 16 20:02:32 UTC 2015


How should I select it ? :(

Thanks Yuri!
De : squid-users [mailto:squid-users-bounces at lists.squid-cache.org] De la part de Yuri Voinov
Envoyé : 16 octobre 2015 15:28
À : squid-users at lists.squid-cache.org
Objet : Re: [squid-users] Replacing Microsoft TMG by Squid.


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

I have no sources right now, but looks like pure LDAP auth helper does not selected....

17.10.15 1:10, Sebastien.Boulianne at cpu.ca<mailto:Sebastien.Boulianne at cpu.ca> пишет:
> I builded my own version too…

      >

      > I used these options.

      >

      > squid -v

      > Squid Cache: Version 3.5.10-20151001-r13933

      > Service Name: squid

      > configure options:  '--build=x86_64-redhat-linux-gnu'
      '--host=x86_64-redhat-linux-gnu' '--program-prefix='
      '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin'
      '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share'
      '--includedir=/usr/include' '--libdir=/usr/lib64'
      '--libexecdir=/usr/libexec' '--sharedstatedir=/var/lib'
      '--mandir=/usr/share/man' '--infodir=/usr/share/info'
      '--disable-strict-error-checking' '--exec_prefix=/usr'
      '--libexecdir=/usr/lib64/squid' '--datadir=/usr/share/squid'
      '--sysconfdir=/etc/squid' '--with-logdir=/var/log/squid'
      '--with-pidfile=/var/run/squid.pid'
      '--disable-dependency-tracking' '--enable-eui'
      '--enable-follow-x-forwarded-for' '--enable-auth'
      '--enable-auth-basic=DB,LDAP,NCSA,NIS,POP3,RADIUS,SASL,SMB,getpwnam'
      '--enable-auth-ntlm=smb_lm,fake'
      '--enable-auth-digest=file,LDAP,eDirectory'
      '--enable-auth-negotiate=kerberos'
      '--enable-external-acl-helpers=file_userip,LDAP_group,time_quota,session,unix_group,wbinfo_group'
      '--enable-cache-digests' '--enable-cachemgr-hostname=localhost'
      '--enable-delay-pools' '--enable-epoll' '--enable-icap-client'
      '--enable-ident-lookups' '--enable-linux-netfilter'
      '--enable-removal-policies=heap,lru' '--enable-snmp'
      '--enable-ssl' '--enable-ssl-crtd'
      '--enable-storeio=aufs,diskd,ufs' '--enable-wccpv2' '--enable-esi'
      '--with-aio' '--with-default-user=squid'
      '--with-filedescriptors=16384' '--with-dl' '--with-openssl'
      '--with-pthreads' 'build_alias=x86_64-redhat-linux-gnu'
      'host_alias=x86_64-redhat-linux-gnu' 'CFLAGS=-O2'
      --enable-ltdl-convenience

      >

      > De : squid-users
      [mailto:squid-users-bounces at lists.squid-cache.org] De la part de
      Yuri Voinov

      > Envoyé : 16 octobre 2015 15:09

      > À : squid-users at lists.squid-cache.org<mailto:squid-users at lists.squid-cache.org>

      > Objet : Re: [squid-users] Replacing Microsoft TMG by Squid.

      >

      >

      > To do custom build, you must build Squid from source
      yourself, and not get from any repos, which is it's owner
      preferences impress.

      >

      > 17.10.15 1:06,
      Sebastien.Boulianne at cpu.ca<mailto:Sebastien.Boulianne at cpu.ca><mailto:Sebastien.Boulianne at cpu.ca><mailto:Sebastien.Boulianne at cpu.ca>
      пишет:

      > > I dont have any

      >       /usr/lib/squid/squid_ldap_auth.

      >

      >

      >

      >       > There is no /usr/lib/squid directory.

      >

      >

      >

      >       > De : squid-users

      >       [mailto:squid-users-bounces at lists.squid-cache.org] De
      la part de

      >       Yuri Voinov

      >

      >       > Envoyé : 16 octobre 2015 15:03

      >

      >       > À :
squid-users at lists.squid-cache.org<mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org>

      >

      >       > Objet : Re: [squid-users] Replacing Microsoft TMG
      by Squid.

      >

      >

      >

      >

      >

      >       >
      http://wiki.squid-cache.org/Features/Authentication

      >

      >

      >

     >       > 17.10.15 1:01,

      >
Sebastien.Boulianne at cpu.ca<mailto:Sebastien.Boulianne at cpu.ca><mailto:Sebastien.Boulianne at cpu.ca><mailto:Sebastien.Boulianne at cpu.ca><mailto:Sebastien.Boulianne at cpu.ca><mailto:Sebastien.Boulianne at cpu.ca><mailto:Sebastien.Boulianne at cpu.ca><mailto:Sebastien.Boulianne at cpu.ca>

      >       пишет:

      >

      >       > > Is squid_ldap_auth was replaced

      >

      >       >       by digest_ldap_auth ?

      >

      >

      >

      >

      >

      >

      >

      >       >       > Thanks!

      >

      >

      >

      >

      >

      >

      >

      >       >       > [cid:image002.jpg at 01D10823.82D2DDB0]

      >

      >

      >

      >

      >

      >

      >

      >       >       > De : squid-users

      >

      >       >
      [mailto:squid-users-bounces at lists.squid-cache.org] De

      >       la part de

      >

      >       >       Yuri Voinov

      >

      >

      >

      >       >       > Envoyé : 16 octobre 2015 14:53

      >

      >

      >

      >       >       > À :

      >
squid-users at lists.squid-cache.org<mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org>

      >

      >

      >

      >       >       > Objet : Re: [squid-users] Replacing
      Microsoft TMG

      >       by Squid.

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >       >       > Start from here:

      >

      >

      >

      >

      >

      >

      >

      >       >       >

      >
      http://wiki.squid-cache.org/ConfigExamples/Authenticate/Ldap

      >

      >

      >

      >

      >

      >

      >

      >       >       > 16.10.15 23:51,

      >

      >

      >
Sebastien.Boulianne at cpu.ca<mailto:Sebastien.Boulianne at cpu.ca><mailto:Sebastien.Boulianne at cpu.ca><mailto:Sebastien.Boulianne at cpu.ca><mailto:Sebastien.Boulianne at cpu.ca><mailto:Sebastien.Boulianne at cpu.ca><mailto:Sebastien.Boulianne at cpu.ca><mailto:Sebastien.Boulianne at cpu.ca><mailto:Sebastien.Boulianne at cpu.ca><mailto:Sebastien.Boulianne at cpu.ca><mailto:Sebastien.Boulianne at cpu.ca><mailto:Sebastien.Boulianne at cpu.ca><mailto:Sebastien.Boulianne at cpu.ca><mailto:Sebastien.Boulianne at cpu.ca><mailto:Sebastien.Boulianne at cpu.ca><mailto:Sebastien.Boulianne at cpu.ca>

      >

      >       >       пишет:

      >

      >

      >

      >       >       > > Hi all,

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >       >       >       > Like you know, Microsoft
      discountinued

      >       the TMG.

      >

      >

      >

      >

      >

      >

      >

      >       >       >       > The TMG was used as a
      reverse proxy.

      >

      >

      >

      >

      >

      >

      >

      >       >       >       > Since many days, I work to
      replace our

      >       TMG by a

      >

      >       >       Squid server

      >

      >

      >

      >       >       >       v3.5.10 with Oracle Linux 7 x64.

      >

      >

      >

      >

      >

      >

      >

      >       >       >       > I moved some sites this week
      but I have

      >       a little

      >

      >       >       problem now.

      >

      >

      >

      >

      >

      >

      >

      >       >       >       > How can I ask LDAP
      credentials for a

      >       user who want

      >

      >       >       to access

      >

      >

      >

      >       >       >       a directory on another server ?

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >       >       >       > I currently do that with our
      TMG.

      >

      >

      >

      >

      >

      >

      >

      >

      >

     >

      >

      >

      >

      >

      >

      >       >       >       > I used Google but I can only
      find doc

      >       about LDAP

      >

      >       >       auth for

      >

      >

      >

      >       >       >       users they want to access the
      internet.

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >       >       >       > [root at squid squid]# cd

      >       /usr/lib64/squid/

      >

      >

      >

      >

      >

      >

      >

      >       >       >       > [root at squid squid]# ls

      >

      >

      >

      >

      >

      >

      >

      >       >       >       > basic_db_auth

      >       basic_pam_auth

      >

      >

      >

      >       >       >       cert_valid.pl
      ext_session_acl

      >

      >

      >

      >       >       >       negotiate_kerberos_auth

      >       url_fake_rewrite

      >

      >

      >

      >

      >

      >

      >

      >       >       >       > basic_getpwnam_auth

      >       basic_pop3_auth

      >

      >

      >

      >       >       >       digest_edirectory_auth
      ext_time_quota_acl

      >

      >

      >

      >       >       >       negotiate_kerberos_auth_test

      >       url_fake_rewrite.sh

      >

      >

      >

      >

      >

      >

      >

      >       >       >       > basic_ldap_auth

      >       basic_radius_auth

      >

      >

      >

      >       >       >       digest_file_auth
      ext_unix_group_acl

      >

      >       >       ntlm_fake_auth

      >

      >

      >

      >

      >

      >

      >

      >       >       >       > basic_msnt_auth

      >       basic_sasl_auth

      >

      >

      >

      >       >       >       digest_ldap_auth
      ext_wbinfo_group_acl

      >

      >       >       ntlm_smb_lm_auth

      >

      >

      >

      >

      >

      >

      >

      >       >       >       > basic_msnt_multi_domain_auth

      >       basic_smb_auth

      >

      >

      >

      >       >       >       diskd

      >       helper-mux.pl         ssl_crtd

      >

      >

      >

      >

      >

      >

      >

      >       >       >       > basic_ncsa_auth

      >       basic_smb_auth.sh

      >

      >

      >

      >       >       >       ext_file_userip_acl
      log_db_daemon

      >

      >       >       storeid_file_rewrite

      >

      >

      >

      >

      >

      >

      >

      >       >       >       > basic_nis_auth

      >       cachemgr.cgi

      >

      >

      >

      >       >       >       ext_ldap_group_acl

      >       log_file_daemon       unlinkd

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >       >       >       > Thanks.

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >       >       >       > Sebastien

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >       >       >       >

      >       _______________________________________________

     >

      >

      >

      >

      >

      >

      >

      >       >       >       > squid-users mailing list

      >

      >

      >

      >

      >

      >

      >

      >       >       >       >

      >

      >

      >
squid-users at lists.squid-cache.org<mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org>

      >

      >

      >

      >

      >

      >

      >

      >       >       >       >

      >       http://lists.squid-cache.org/listinfo/squid-users

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >

      >       >       >
      _______________________________________________

      >

      >

      >

      >      >       > squid-users mailing list

      >

      >

      >

      >       >       >

      >
squid-users at lists.squid-cache.org<mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org>

      >

      >

      >

      >       >       >
      http://lists.squid-cache.org/listinfo/squid-users

      >

      >

      >

      >

      >

      >

      >

      >       > _______________________________________________

      >

      >       > squid-users mailing list

      >

      >       >
squid-users at lists.squid-cache.org<mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org>

      >

      >       > http://lists.squid-cache.org/listinfo/squid-users

      >

      >

      >

      > _______________________________________________

      > squid-users mailing list

      > squid-users at lists.squid-cache.org<mailto:squid-users at lists.squid-cache.org>

      > http://lists.squid-cache.org/listinfo/squid-users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJWIU/TAAoJENNXIZxhPexGZfoIAMEf8fbiOj/IfaJkCCsgOC45
F9up8PZescUvFUkreIMo14Esqqty3MuZZj3gqqakz775Sgky8XZuqaeMheQBatOq
M5w/x3g/q/X7wJNaVNxGLtXykg8mZ8D6LAEh3JufBFyvJBy4wW4Qp+8nG661nbd1
SshZci8w+oG5zX1PwhGWM0qfqkKqRDhCctekVOZ64jPEQhKhpqL2X7baeAYY2o35
NnPSvkTfQOgiPmXg9IMk6LvtLPFefw/vpkGgBhQBwHvoNitSkH4DqPMCxgLByhgF
L3KsHA4NWQNsh4ro4Lg8218e36RRUjV5QZzPcxDnGfqlxPmDm8hl71YMYVotI+0=
=odYl
-----END PGP SIGNATURE-----
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20151016/d220bd1e/attachment-0001.html>


More information about the squid-users mailing list