[Date Prev][Date Next] [Chronological] [Thread] [Top]

openldap & squid integration



I configured my squid.conf file to authenticate with openldap. but my browser always asking for the username and password though i put the correct username and password.

here is my squid.conf 

http_port 3128 

hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?

cache_mem 16 MB

cache_access_log /var/log/squid/access.log
request_body_max_size 0
refresh_pattern ^ftp:		1440	20%	10080
refresh_pattern ^gopher:	1440	0%	1440
refresh_pattern .		0	20%	4320
read_timeout 120 minutes

auth_param basic program /usr/lib/squid/squid_ldap_auth -b "dc=mycentos,dc=net" -f "uid=%s" -h 127.0.0.1 -D "cn=manager,dc=mycentos,dc=net" -w swi2010 -s one -v 3
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl webconfig_lan src 192.168.1.0/24
acl webconfig_to_lan dst 192.168.1.0/24
acl to_localhost dst 127.0.0.1/255.255.255.255
acl password proxy_auth REQUIRED

acl SSL_ports port 443 563
acl Safe_ports port 80
acl Safe_ports port 21
acl Safe_ports port 443 563
acl Safe_ports port 70
acl Safe_ports port 210
acl Safe_ports port 1025-65535
acl Safe_ports port 280
acl Safe_ports port 488
acl Safe_ports port 591
acl Safe_ports port 777
acl CONNECT method CONNECT


http_access allow manager localhost
http_access deny manager
http_access deny CONNECT !SSL_ports
http_access allow localhost password
http_access allow webconfig_to_lan
http_access allow webconfig_lan password
http_access deny all

http_reply_access allow all
icp_access allow all

if I run /usr/lib/squid/squid_ldap_auth -b "dc=mycentos,dc=net" -f "uid=%s" -h 127.0.0.1 -D "cn=manager,dc=mycentos,dc=net" -w swi2010 -s one -v 3 in command promt then it giving OK message.