?? squid的Ldap認(rèn)證(AD),因?yàn)锳D不允許匿名LDAP查詢，所以需要有一個(gè)可查詢的AD帳號(hào),
? man squid_ldap_auth?的解釋
???? If? you? want to search for the user DN and your directory does not allow anonymous searches then you must also use the -D and -w flags to specify a user DN and password to log in as to perform the searches, as in the? following complex Active Directory example
????
squid_ldap_auth -P -R -b "dc=your,dc=domain" -D "cn=squid,cn=users,dc=your,dc=domain"
-w "squidpasswd" -f "(&(userPrincipalName=%s)(objectClass=Person))" -h ad_ip
?
?使用userPrincipalName,所以u(píng)serid=userid@your.domain
?使用sAMAccountName,所以使用userid
-b basedn
-D binddn with -w
使用前測(cè)試AD是否工作正常
ldapsearch -x -b "cn=manager,dc=your,dc=domain" -D "cn=manager,dc=your,dc=domain" -w "managerpasswd" -h ad_ip
也可以使用
ldapsearch -x -b "dc=your,dc=domain" -D "cn=manager,dc=your,dc=domain" -w "managerpasswd" -h ad_ip
顯示所有user
?
squid設(shè)置
?
auth_param basic program /usr/lib/squid/squid_ldap_auth -P -R -b "dc=your,dc=domain" -D "cn=ldaptest,cn=users,dc=your
,dc=domain" -w "passwd" -f "(&(userPrincipalName=%s)(objectClass=Person))" -h ip
auth_param basic children 5
auth_param basic realm?squid auth system?
acl ldapauth proxy_auth REQUIRED
http_access allow ldapauth

轉(zhuǎn)載于:https://blog.51cto.com/gary407568105/213668

總結(jié)

以上是生活随笔為你收集整理的squid ldap认证（AD）的全部?jī)?nèi)容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網(wǎng)站內(nèi)容還不錯(cuò)，歡迎將生活随笔推薦給好友。