[squid-users] Problem with basic_ldap_auth

[Amos Jeffries]

On 29/03/2017 2:54 a.m., Max Giesbert wrote:
> Hi everyone,
> 
> I am running Squid from the repos on Ubuntu 16.04. I can login to Squid
> using basic_nsca_auth without problems. When I replace the according line
> using basic_ldap_auth I am unable to login. The browser keeps requesting
> the user credentials over and over again.
> 
> If I run the command in a shell it works as expected. I type:
> 
> /usr/lib/squid/basic_ldap_auth -v 3 -b ou="MYOU",dc=DOMAINNAME,dc=TLD -D
> ldap_squid at MYDOMAIN -w "THEPASSWORD" -f sAMAccountName=%s -h MYHOST
> 
> Then I type username and password separated by a space and it gives "OK" or
> ERR if wrong credentials are provided.
> 
> Any hints what could be wrong? How can I debug further what actually is
> happened behind the scenes?
> 

Why do you have quotes around the MYOU ?
 If that includes spaces or special characters you need quotes around
the whole "ou=...dc=TLD" parameter for Squid to pass it to the helper as
a single command line option.

Amos