[squid-users] R: [squid-users] Re: Configuring SQUID in Windows to authenticate with Active Directory

Hi,

You are using wrong "auth_param negotiate" options:

> auth_param negotiate realm Internet-Access
> auth_param negotiate credentialsttl 5 minute

Regards
 

Guido Serassio
Acme Consulting S.r.l.
Microsoft Gold Certified Partner
VMware Professional Partner
Via Lucia Savarino, 1 10098 - Rivoli (TO) - ITALY
Tel. : +39.011.9530135 Fax. : +39.011.9781115
Email: guido.serassio_at_acmeconsulting.it
WWW: http://www.acmeconsulting.it

> -----Messaggio originale-----
> Da: Lakshman Liyanage [mailto:one.lakshman_at_gmail.com]
> Inviato: mercoledì 23 marzo 2011 7.36
> A: squid-users_at_squid-cache.org
> Oggetto: Fwd: [squid-users] Re: Configuring SQUID in Windows to
> authenticate with Active Directory
>
> ---------- Forwarded message ----------
> From: Lakshman Liyanage <one.lakshman_at_gmail.com>
> Date: Wed, Mar 23, 2011 at 4:34 PM
> Subject: Re: [squid-users] Re: Configuring SQUID in Windows to
> authenticate with Active Directory
> To: Markus Moeller <huaraz_at_moeller.plus.com>, squid-users_at_squid-cache.org
>
>
> Thank You Marcus for reply.
>
> The reason I asked about squid_kerb_auth is  that someone on the list
> (Rafal Zawierta) mentioned that he/she got it to work in Windows
> 2008R2 (AD).
>
> Anyway, I tried what you suggested. Now I do not get a logon window in
> the browser for me to enter credentials - instead it throws me "Cache
> Access Denied"  message.
>
> As I mentioned earlier I am a newbie - so excuse me if I am missing
> obvious.  I have the following lines in my squid.conf:
>
> auth_param negotiate program c:/squid/libexec/mswin_negotiate_auth.exe
> auth_param negotiate children 5
> auth_param negotiate realm Internet-Access
> auth_param negotiate credentialsttl 5 minute
>
> acl password proxy_auth REQUIRED
> http_access allow password
> # http_accesss allow localhost
>
> What am I missing in my .conf?
>
> Many thanks
>
> Lakshman
> On Wed, Mar 23, 2011 at 9:47 AM, Markus Moeller <huaraz_at_moeller.plus.com>
> wrote:
> >
> > Look ay Amos's reply.  Three is no squid_kerb_auth on Windows.  You must
> use mswin_negotiate_auth
> >
> > Markus
> >
> > "Liyanage, Lakshman" <lakshman.liyanage_at_jcu.edu.au> wrote in message
> news:1997817097853D4CB2B2AD655359FD28051173BF65_at_SG1RD3XVS171.red003.local.
> ..
> >>
> >> Hi All,
> >>
> >> Just hoping thise Windows guys will help me with my query below -
> where/how would I find squid_kerb_auth helper  for 2.7?
> >>
> >> Thanks
> >>
> >> Lakshman
> >>
> >> ________________________________________
> >> From: Liyanage, Lakshman
> >> Sent: Wednesday, 16 March 2011 10:08 AM
> >> To: squid-users_at_squid-cache.org
> >> Subject: FW: Configuring SQUID in Windows to authenticate with Active
> Directory
> >>
> >> Hello All,
> >>
> >> I am trying configure SQUID 2.7 in Windows 2008 R2 (Sometime ago, then
> I had to postpone the project for a while) and I posted my cry for help
> here -  for which Rafal responded (see below).
> >>
> >> However, I can not see squid_kerb_auth helper  in my SQUID
> installation. Ho do I get this?
> >>
> >> Thanks and Regards
> >>
> >> L.
> >> -------
> >> From: Rafal Zawierta [zawierta_at_gmail.com]
> >> Sent: Saturday, 12 February 2011 8:10 PM
> >> To: Liyanage, Lakshman
> >> Subject: Re: [squid-users] Configuring SQUID in Windows to authenticate
> with Active Directory
> >> Hello, try squid_kerb_auth instead ldap. For me it works with AD
> 2008R2.
> >> Regards
> >> R
> >>
> >>
> >> ________________________________________
> >> From: Liyanage, Lakshman [lakshman.liyanage_at_jcu.edu.au]
> >> Sent: Saturday, 12 February 2011 1:41 PM
> >> To: squid-users_at_squid-cache.org
> >> Subject: [squid-users] Configuring SQUID in Windows to authenticate
> with Active Directory
> >>
> >> Hello All,
> >> I am new to SQUID and hence require some help.
> >> I have SQUID 2.7 Stable8 installed on a Windows Server 2008 R2. I am
> now trying to configure it to use MS Active Directory. I have the
> following lines  in the .conf file:
> >> -----
> >> auth_param basic program c:/squid/libexec/squid_ldap_auth -R -b "dc=ad-
> mycompany,dc=domain,dc=com" -D "cn=admin,cn=Users,dc=ad-
> mycompany,dc=domain,dc=com" -w "password" -f sAMAccountName=%s -h
> myipnumber
> >> auth_param basic children 5
> >> auth_param basic realm My_Company
> >> auth_param basic credentialsttl 5 minute
> >> ------
> >> When I try to start SQUID, Windows throws" Error 1067: The process
> terminated unexpectedly" at me.  I have a web server/service running on
> port 80 and 443.
> >> What am I missing here?
> >> Many many thanks for your help
> >>
> >> Lakshman
> >
> >
Received on Thu Mar 24 2011 - 10:35:50 MDT