This project is a authentication plugin for the Squid proxy server that authenticates users against an ldapv3 server. It includes support for static and dynamic groups.
Be the first to post a text review of squid-group-ldap-auth. Rate and review a project by clicking thumbs up or thumbs down in the right column.
Changes between v1.3 and v1.4: * The auth module now reconnects to servers that have disconnected or bounced * The auth module now supports authenticated searching support via -d binddn and -w password. * ldap_auth_cache_ip_ttl can now be used in strict mode. It can now be forced to timeout before access from another ip is allowed. See the default squid.conf after applying the patch for more information. * The auth module can now connect over over SSL or TLS to a directory. Changes between v1.2 and v1.3: * Squid no longer crashes when a user who has expired from the auth cache reauthenticates. * Squid now properly requests authentication again if the user provides an ivalid password or username. * You can now specify the search scope on the command line via the -s flag. * You can now specify an additional search filter via the -f flag that will be ANDed with the uid search to get the user's DN. Changes between v1.1 and v1.2: * You can now have multiple http_access lines that use a ldap_auth acl. * You can specify the attribute used to store the uid in the directory via a command line switch. The default is uid. * Usernames and groups can now be mixed in the acl in any order. * Dynamic group searching now uses the uid or the user being authed in the filter to greatly increase the speed of the search. * Usernames and passwords with spaces are now supported. * Acl information loaded from a file now works properly. Changes between v1.0 and v1.1: * DN's weren't properly compared: if a DN was stored in the directory as uid=tocrawle, ou=people,o=fatgut.org but was listed as a group member as uid=tocrawle,ou=people,o=fatgut.org authentication would fail. This is no longer the case. * Squid would occasionally crash if the client failed to send a proxy-authorization: header. * The auth module debug log no longer contains user passwords. * Debug logging can now be turned on via a command line switch, and no longer requires the auth module to be recompiled. * Debug logging now contains timestamp information. * You can now specify on the command line the attribute used to find a group by name. The default is cn. * You can now specify on the command line the objectclass of groups. The default groupOfNames. * You can now specify on the command line the attribute used to denote membership in a group. The default is member.
Changes between v1.2 and v1.3: * Squid no longer crashes when a user who has expired from the auth cache reauthenticates. * Squid now properly requests authentication again if the user provides an ivalid password or username. * You can now specify the search scope on the command line via the -s flag. * You can now specify an additional search filter via the -f flag that will be ANDed with the uid search to get the user's DN. Changes between v1.1 and v1.2: * You can now have multiple http_access lines that use a ldap_auth acl. * You can specify the attribute used to store the uid in the directory via a command line switch. The default is uid. * Usernames and groups can now be mixed in the acl in any order. * Dynamic group searching now uses the uid or the user being authed in the filter to greatly increase the speed of the search. * Usernames and passwords with spaces are now supported. * Acl information loaded from a file now works properly. Changes between v1.0 and v1.1: * DN's weren't properly compared: if a DN was stored in the directory as uid=tocrawle, ou=people,o=fatgut.org but was listed as a group member as uid=tocrawle,ou=people,o=fatgut.org authentication would fail. This is no longer the case. * Squid would occasionally crash if the client failed to send a proxy-authorization: header. * The auth module debug log no longer contains user passwords. * Debug logging can now be turned on via a command line switch, and no longer requires the auth module to be recompiled. * Debug logging now contains timestamp information. * You can now specify on the command line the attribute used to find a group by name. The default is cn. * You can now specify on the command line the objectclass of groups. The default groupOfNames. * You can now specify on the command line the attribute used to denote membership in a group. The default is member.
Changes between v1.1 and v1.2: * You can now have multiple http_access lines that use a ldap_auth acl. * You can specify the attribute used to store the uid in the directory via a command line switch. The default is uid. * Usernames and groups can now be mixed in the acl in any order. * Dynamic group searching now uses the uid or the user being authed in the filter to greatly increase the speed of the search. * Usernames and passwords with spaces are now supported. * Acl information loaded from a file now works properly. Changes between v1.0 and v1.1: * DN's weren't properly compared: if a DN was stored in the directory as uid=tocrawle, ou=people,o=fatgut.org but was listed as a group member as uid=tocrawle,ou=people,o=fatgut.org authentication would fail. This is no longer the case. * Squid would occasionally crash if the client failed to send a proxy-authorization: header. * The auth module debug log no longer contains user passwords. * Debug logging can now be turned on via a command line switch, and no longer requires the auth module to be recompiled. * Debug logging now contains timestamp information. * You can now specify on the command line the attribute used to find a group by name. The default is cn. * You can now specify on the command line the objectclass of groups. The default groupOfNames. * You can now specify on the command line the attribute used to denote membership in a group. The default is member.
Changes between v1.1 and v1.2: * You can now have multiple http_access lines that use a ldap_auth acl. * You can specify the attribute used to store the uid in the directory via a command line switch. The default is uid. * Usernames and groups can now be mixed in the acl in any order. * Dynamic group searching now uses the uid or the user being authed in the filter to greatly increase the speed of the search. * Usernames and passwords with spaces are now supported. * Acl information loaded from a file now works properly. Changes between v1.0 and v1.1: * DN's weren't properly compared: if a DN was stored in the directory as uid=tocrawle, ou=people,o=fatgut.org but was listed as a group member as uid=tocrawle,ou=people,o=fatgut.org authentication would fail. This is no longer the case. * Squid would occasionally crash if the client failed to send a proxy-authorization: header. * The auth module debug log no longer contains user passwords. * Debug logging can now be turned on via a command line switch, and no longer requires the auth module to be recompiled. * Debug logging now contains timestamp information. * You can now specify on the command line the attribute used to find a group by name. The default is cn. * You can now specify on the command line the objectclass of groups. The default groupOfNames. * You can now specify on the command line the attribute used to denote membership in a group. The default is member.
Be the first person to add a text review.
Copyright © 2009 Geeknet, Inc. All rights reserved. Terms of Use
Thanks for your rating!
Would you also like to write a review?