[squid-users] Squid with AD - missing libraries

Verónica Ovando vero.ovando at live.com
Tue Sep 22 11:52:10 UTC 2015


Hi everybody,
I am newbie with Squid3. I am trying to integrate my squid con with Active Directory. Squid works well in non-transparent mode. I followed this tutorial: http://wiki.bitbinary.com/index.php/Active_Directory_Integrated_Squid_Proxy#Authentication for the set up.I need to authenticate clients not authenticated via Kerberos and users authenticated in the AD.
I installed squid3 and ldap-utils from repositories (over Debian Jessie), but i can´t find some libraries such as /usr/lib/squid3/squid_ldap_group and /usr/lib/squid3/squid_ldap_auth. They are not in the expected directories. I used apt-file search but with no results.
These are the libraries in the /usr/lib/squid3 dir:basic_db_auth		      basic_radius_auth		   	basic_fake_auth		      basic_sasl_auth		   	 basic_getpwnam_auth	      basic_smb_auth		   		 basic_ldap_auth		      basic_smb_auth.sh		   	 basic_msnt_auth		      	   		 basic_msnt_multi_domain_auth  		   		 basic_ncsa_auth		      		   basic_nis_auth		     			   		basic_pam_auth		      	   basic_pop3_auth		      cert_tool		digest_ldap_auth diskddigest_file_authext_kerberos_ldap_group_acl  ext_ldap_group_acl		ext_file_userip_aclext_unix_group_acl	ext_sql_session_aclext_session_acl	ext_ldap_group_acl	 ext_wbinfo_group_aclhelper-mux.pllog_db_daemon		log_file_daemonnegotiate_wrapper_auth negotiate_wrapper_authnegotiate_kerberos_auth_test ntlm_fake_authpingerstoreid_file_rewriteunlinkd url_fake_rewrite.shnegotiate_kerberos_auth url_fake_rewritentlm_smb_lm_auth
I can't test if an user belongs to a group as shown here/usr/lib/squid3/squid_ldap_group -R -K -S -b "dc=example,dc=local" -D squid at example.local -W /etc/squid3/ldappass.txt -f "(&(objectclass=person)(sAMAccountName=%v)(memberof=cn=%g,ou=Security Groups,ou=MyBusiness,dc=example,dc=local))" -h dc1.example.local
EXAMPLE\Username Internet%20Users%20StandardI had to use ext_wbinfo_group_acl to perform that test.
Because of the missing libraries, I can't create the authentication for users not authenticated with Kerberos/NTLM:auth_param basic program /usr/lib/squid3/squid_ldap_auth -R -b "dc=example,dc=local" -D squid at example.local -W /etc/squid3/ldappass.txt -f sAMAccountName=%s -h dc1.example.local
and cannot create the LDAP authorisation for groups:external_acl_type memberof %LOGIN /usr/lib/squid3/squid_ldap_group -R -K -S -b "dc=example,dc=local" -D squid at example.local -W /etc/squid3/ldappass.txt -f "(&(objectclass=person)(sAMAccountName=%v)(memberof=cn=%g,ou=Security Groups,ou=MyBusiness,dc=example,dc=local))" -h dc1.example.local

Why those libraries does not exists? Can I perform the same authentications using others? 
 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20150922/ecdeebbb/attachment.html>


More information about the squid-users mailing list