samba - Sep 2014 - samba4 + squid 2.7 auth

Hi list, i have a samba4 AD server working, and squid 2.7 auth 
internal...so i need change the auth of squid to my samba4 server....i 
search in google but information is incomplete and diferent...any 
official site, wiki or user experince to get information about?

regards and thanks

-- 
Administrador de Redes
Nodo Provincial ESILT

                               OS: Debian 7.5 wheezy
           ,met$$$$$gg.        CPU: Intel Core i3-3220 CPU @ 3.3GHz
       ,g$$$$$$$$$$$$$$$P.     RAM: 2GB
     ,g$$P""       """Y$$.".   Kernel: i686 Linux
3.2.0-4-686-pae
    ,$$P'              `$$$.   Packages: 3429
   ',$$P       ,ggs.     `$$b: Shell: bash 4.2.37
   `d$$'     ,$P"'   .    $$$  Resolution: 1280x1024
    $$P      d$'     ,    $$P  DE: Gnome 3.4.2.1
    $$:      $$.   -    ,d$$'  WM: Mutter
    $$\;      Y$b._   _,d$P'   WM Theme: Adwaita
    Y$$.    `.`"Y$$$$P"'       GTK Theme: Adwaita [GTK3]
    `$$b      "-.__            Icon Theme: gnome-brave
     `Y$$                      Font: Cantarell 11
      `Y$$.                    Mail: Thunderbird
        `$$b.                  Browser: Mozilla
          `Y$$b.               TTY: nmap ssh mc dmesg htop nc mutt rsync
             `"Y$b._                iptraf dsniff gpm byobu rcconf irssi
                 `""""              elinks make msfconsole
iptables tail

These lines are for squid3, but work here:
> auth_param basic program /usr/lib/squid3/squid_ldap_auth -v 3 -P -R -u cn
-s sub -b "DC=samba,DC=company,DC=com" -D
"CN=ldap_search_account,CN=Users,DC=samba,DC=company,DC=com" -w
"ldap_search_account_password" -f
"(&(sAMAccountName=%s))" -h dc.company.com
> acl ldapauth proxy_auth REQUIRED
> http_access allow ldapauth
Hope this helps you,
Mourik Jan

On 09/04/2014 10:08 AM, Agust?n Dixan D?az Corrales
wrote:
> Hi list, i have a samba4 AD server working, and squid 2.7 auth
> internal...so i need change the auth of squid to my samba4 server....i
> search in google but information is incomplete and diferent...any
> official site, wiki or user experince to get information about?
>
> regards and thanks
>

Hai, 

beware of the config difference beween all squid version. 
squid 2.7 is way old, and i really suggest you upgrade to at least squid 3.1. (
debian wheezy )
as for 3.3 there were lots of improvements for the newer protocols. 
and there where kerberos fixes in 3.2 and up. 
rebuilding from jessie to wheezy isnt that here, google for it. 

this is my setup for squid 3.3.8. ( debian wheezy, but squid rebuild from debian
jessie )

see the -f and -D parameter, this is for a kerberos based auth against AD
domain.

auth_param basic program /usr/lib/squid3/basic_ldap_auth -R \
        -b "OU=Users,DC=internal,DC=domain,DC=tld" \
        -D ldap-bind at internal.domain.tld -W /etc/squid3/private/ldap-bind \
        -f (|(userPrincipalName=%s)(sAMAccountName=%s)) \
        -h dc1.internal.domain.tld

and this is the fallback for the above but ldap based. 

auth_param basic program /usr/lib/squid3/basic_ldap_auth -v 3 \
         -b "DC=internal,DC=domain,DC=tld" \
         -D cn=ldap-bind,dc=internal,DC=domain,DC=tld  -W
/etc/squid3/private/ldap-bind \
         -f uid=%s dc1.internal.domain.tld

Greetz, 

Louis
>-----Oorspronkelijk bericht-----
>Van: heupink at merit.unu.edu 
>[mailto:samba-bounces at lists.samba.org] Namens mourik jan 
>heupink - merit
>Verzonden: donderdag 4 september 2014 14:24
>Aan: samba at lists.samba.org
>Onderwerp: Re: [Samba] samba4 + squid 2.7 auth
>
>These lines are for squid3, but work here:
>
>> auth_param basic program /usr/lib/squid3/squid_ldap_auth -v 
>3 -P -R -u cn -s sub -b "DC=samba,DC=company,DC=com" -D 
>"CN=ldap_search_account,CN=Users,DC=samba,DC=company,DC=com" 
>-w "ldap_search_account_password" -f
"(&(sAMAccountName=%s))"
>-h dc.company.com
>> acl ldapauth proxy_auth REQUIRED
>> http_access allow ldapauth
>
>Hope this helps you,
>Mourik Jan
>
>On 09/04/2014 10:08 AM, Agust?n Dixan D?az Corrales wrote:
>> Hi list, i have a samba4 AD server working, and squid 2.7 auth
>> internal...so i need change the auth of squid to my samba4 
>server....i
>> search in google but information is incomplete and diferent...any
>> official site, wiki or user experince to get information about?
>>
>> regards and thanks
>>
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba
>
>