[squid-users] AD Ldap (automatically take the user that is logging on PC)
Yuri Voinov
yvoinov at gmail.com
Wed Aug 17 21:28:08 UTC 2016
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Vips do not want enter username and password? :)
18.08.2016 2:58, erdosain9 пишет:
> Hi
> Squid configured to authenticate with AD with LDAP. this is the relevant
> configuration.
>
>
> # Active Directory
> auth_param basic program /usr/lib64/squid/basic_ldap_auth -R -b
> "cn=Users,dc=example,dc=lan" -D squid at example.lan -w pass -f
> sAMAccountName=%s -v 3 -s sub -h 192.168.1.60
> auth_param basic children 10
> auth_param basic realm Proxy
> auth_param basic credentialsttl 2 hour
>
> external_acl_type ldap_group ttl=360 %LOGIN
> /usr/lib64/squid/ext_ldap_group_acl -d -R -b "dc=example,dc=lan" -D
> squid at example.lan -w pass -f
>
"(&(objectclass=person)(sAMAccountName=%v)(memberof=cn=%a,ou=group,dc=example,dc=lan))"
> -h 192.168.1.60
>
> acl vip external ldap_group vip
> acl control external ldap_group control
>
>
> It works well. Except I do not want to ask for username and password
in the
> webbrowser. I want squid automatically take the user that is logging
on PC.
> What I can do?
> greetings and thanks.
>
>
>
> --
> View this message in context:
http://squid-web-proxy-cache.1019090.n4.nabble.com/AD-Ldap-automatically-take-the-user-that-is-logging-on-PC-tp4678994.html
> Sent from the Squid - Users mailing list archive at Nabble.com.
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
iQEcBAEBCAAGBQJXtNbmAAoJENNXIZxhPexGRV8H/ifU+Q6Wu4pYc59rzH+7kTu4
BxfiVm+DvZK31dGBNPrA71mAD15d3YiI//rZjtaPpy0M0Zn1M6sF6exH4RMqcWps
ChLrxrwymtc4SGFhHPzjHhOhoiaIvP21U9VRVi+svJ1AjtuWCg3Q2vrhnac4473o
10HyDPKudDMa8I1ktvuQgxxwECE2ELKuO1NMDOmLaUiLUTi8o5qIbSHPdVA85c9V
klUw6ViQmoLpV+Wp35LF7M//x+IxOuyfNPhlDeE6daBofDg6weJse2G5t/GXogJp
1dWXci8a+yedR2ay3k8MjiehvAKQa979oy83FVsMO0Vj54TXEoK3MRiQkNGstKQ=
=xFmV
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0x613DEC46.asc
Type: application/pgp-keys
Size: 2437 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160818/435bdfb4/attachment.key>
More information about the squid-users
mailing list