Hi everybody,<div><br></div><div>I spent some days reading the ebook &quot;Ldap for rocket scientists&quot; (<a href="http://zytrax.com/books/ldap/">zytrax.com/books/ldap/</a>) and I&#39;ve succesfully (I think it&#39;s a success =3 ) created a VM with debian lenny and openldap running. </div>

<div><br></div><div>After that, I created another VM, running IPfire (<a href="http://www.ipfire.org">www.ipfire.org</a>) distro, this will be the firewall of the SMB I&#39;m working for. Now I&#39;m trying to authenticate the squid proxy, installed in IPFire distro, integrating it with my openldap server. A screenshot of my IPFire&#39;s webGUI and phpldapadmin webGUI can be seen at this topic: <a href="http://forum.ipfire.org/index.php?topic=3404.0">http://forum.ipfire.org/index.php?topic=3404.0</a></div>

<div><br></div><div>But the authentication isn&#39;t running, the browser using squid proxy keeps asking me for username and password. Suspecting that the webGUI could be making some mistake in squid config file, I started editing it&#39;s parameters manually. Right now, the ldap authentication line in my squid.conf looks like this: </div>

<div><br></div><div><b>auth_param basic program /usr/lib/squid/squid_ldap_auth -D &quot;cn=admin,dc=pisolar&quot; -w &quot;mypassword&quot; -b &quot;ou=usuarios,dc=pisolar&quot; -h 192.168.1.7 -v 3</b></div><div><b><br></b></div>

<div><b>cn=admin,dc=pisolar </b>= my root user.</div><div><b><br></b></div><div><b>ou=usuarios,dc=pisolar </b>= the OU where my users are stored. </div><div><b><br></b></div><div>I opened slapd in debug mode (slapd -d 255) in my openldap debian-powered VM, and this is the text shown when I try to authenticate in my browser: </div>

<div><br></div><div><div>daemon: activity on 1 descriptor</div><div>daemon: activity on:</div><div>slap_listener_activate(8): </div><div>daemon: epoll: listen=7 active_threads=0 tvp=zero</div><div>daemon: epoll: listen=8 busy</div>

<div>&gt;&gt;&gt; slap_listener(ldap:///)</div><div>daemon: listen=8, new connection on 13</div><div>daemon: added 13r (active) listener=(nil)</div><div>daemon: activity on 2 descriptors</div><div>daemon: activity on: 13r</div>

<div>daemon: epoll: listen=7 active_threads=0 tvp=zero</div><div>daemon: epoll: listen=8 active_threads=0 tvp=zero</div><div>daemon: activity on 1 descriptor</div><div>daemon: activity on: 13r</div><div>daemon: read active on 13</div>

<div>daemon: epoll: listen=7 active_threads=0 tvp=zero</div><div>daemon: epoll: listen=8 active_threads=0 tvp=zero</div><div>connection_get(13)</div><div>connection_get(13): got connid=0</div><div>connection_read(13): checking for input on id=0</div>

<div>ber_get_next</div><div>ldap_read: want=8, got=8</div><div>  0000:  30 34 02 01 01 60 2f 02                            04...`/.          </div><div>ldap_read: want=46, got=46</div><div>  0000:  01 03 04 20 75 69 64 3d  6c 61 6d 70 73 2c 6f 75   ... uid=lamps,ou  </div>

<div>  0010:  3d 75 73 75 61 72 69 6f  73 2c 64 63 3d 70 69 73   =usuarios,dc=pis  </div><div>  0020:  6f 6c 61 72 80 08 6c 34  77 64 30 67 67 30         olar..userpassword    </div><div>ber_get_next: tag 0x30 len 52 contents:</div>

<div>ber_dump: buf=0xa0598a0 ptr=0xa0598a0 end=0xa0598d4 len=52</div><div>  0000:  02 01 01 60 2f 02 01 03  04 20 75 69 64 3d 6c 61   ...`/.... uid=la  </div><div>  0010:  6d 70 73 2c 6f 75 3d 75  73 75 61 72 69 6f 73 2c   mps,ou=usuarios,  </div>

<div>  0020:  64 63 3d 70 69 73 6f 6c  61 72 80 08 6c 34 77 64   dc=pisolar..userpass  </div><div>  0030:  30 67 67 30                                        word              </div><div>ber_get_next</div><div>ldap_read: want=8 error=Resource temporarily unavailable</div>

<div>daemon: activity on 1 descriptor</div><div>daemon: activity on:</div><div>daemon: epoll: listen=7 active_threads=0 tvp=zero</div><div>daemon: epoll: listen=8 active_threads=0 tvp=zero</div><div>conn=0 op=0 do_bind</div>

<div>ber_scanf fmt ({imt) ber:</div><div>ber_dump: buf=0xa0598a0 ptr=0xa0598a3 end=0xa0598d4 len=49</div><div>  0000:  60 2f 02 01 03 04 20 75  69 64 3d 6c 61 6d 70 73   `/.... uid=lamps  </div><div>  0010:  2c 6f 75 3d 75 73 75 61  72 69 6f 73 2c 64 63 3d   ,ou=usuarios,dc=  </div>

<div>  0020:  70 69 73 6f 6c 61 72 80  08 6c 34 77 64 30 67 67   pisolar..userpasswor  </div><div>  0030:  30                                                 d                 </div><div>ber_scanf fmt (m}) ber:</div><div>

ber_dump: buf=0xa0598a0 ptr=0xa0598ca end=0xa0598d4 len=10</div><div>  0000:  00 08 6c 34 77 64 30 67  67 30                     ..userpassword        </div><div>&gt;&gt;&gt; dnPrettyNormal: &lt;uid=lamps,ou=usuarios,dc=pisolar&gt;</div>

<div>=&gt; ldap_bv2dn(uid=lamps,ou=usuarios,dc=pisolar,0)</div><div>&lt;= ldap_bv2dn(uid=lamps,ou=usuarios,dc=pisolar)=0 </div><div>=&gt; ldap_dn2bv(272)</div><div>&lt;= ldap_dn2bv(uid=lamps,ou=usuarios,dc=pisolar)=0 </div>

<div>=&gt; ldap_dn2bv(272)</div><div>&lt;= ldap_dn2bv(uid=lamps,ou=usuarios,dc=pisolar)=0 </div><div>&lt;&lt;&lt; dnPrettyNormal: &lt;uid=lamps,ou=usuarios,dc=pisolar&gt;, &lt;uid=lamps,ou=usuarios,dc=pisolar&gt;</div><div>

do_bind: version=3 dn=&quot;uid=lamps,ou=usuarios,dc=pisolar&quot; method=128</div><div>==&gt; bdb_bind: dn: uid=lamps,ou=usuarios,dc=pisolar</div><div>bdb_dn2entry(&quot;uid=lamps,ou=usuarios,dc=pisolar&quot;)</div><div>

=&gt; bdb_dn2id(&quot;dc=pisolar&quot;)</div><div>&lt;= bdb_dn2id: got id=0x1</div><div>=&gt; bdb_dn2id(&quot;ou=usuarios,dc=pisolar&quot;)</div><div>&lt;= bdb_dn2id: got id=0xb</div><div>=&gt; bdb_dn2id(&quot;uid=lamps,ou=usuarios,dc=pisolar&quot;)</div>

<div>&lt;= bdb_dn2id: got id=0x10</div><div>entry_decode: &quot;uid=lamps,ou=usuarios,dc=pisolar&quot;</div><div>&lt;= entry_decode(uid=lamps,ou=usuarios,dc=pisolar)</div><div>=&gt; access_allowed: auth access to &quot;uid=lamps,ou=usuarios,dc=pisolar&quot; &quot;userPassword&quot; requested</div>

<div>=&gt; acl_get: [1] attr userPassword</div><div>=&gt; slap_access_allowed: result not in cache (userPassword)</div><div>=&gt; acl_mask: access to entry &quot;uid=lamps,ou=usuarios,dc=pisolar&quot;, attr &quot;userPassword&quot; requested</div>

<div>=&gt; acl_mask: to value by &quot;&quot;, (=0) </div><div>&lt;= check a_dn_pat: cn=admin,dc=pisolar</div><div>&lt;= check a_dn_pat: anonymous</div><div>&lt;= acl_mask: [2] applying none(=0) (stop)</div><div>&lt;= acl_mask: [2] mask: none(=0)</div>

<div>=&gt; slap_access_allowed: auth access denied by none(=0)</div><div>=&gt; access_allowed: no more rules</div><div>send_ldap_result: conn=0 op=0 p=3</div><div>send_ldap_result: err=49 matched=&quot;&quot; text=&quot;&quot;</div>

<div>send_ldap_response: msgid=1 tag=97 err=49</div><div>ber_flush2: 14 bytes to sd 13</div><div>  0000:  30 0c 02 01 01 61 07 0a  01 31 04 00 04 00         0....a...1....    </div><div>ldap_write: want=14, written=14</div>

<div>  0000:  30 0c 02 01 01 61 07 0a  01 31 04 00 04 00         0....a...1....    </div><div>daemon: activity on 1 descriptor</div><div>daemon: activity on: 13r</div><div>daemon: read active on 13</div><div>daemon: epoll: listen=7 active_threads=0 tvp=zero</div>

<div>daemon: epoll: listen=8 active_threads=0 tvp=zero</div><div>connection_get(13)</div><div>connection_get(13): got connid=0</div><div>connection_read(13): checking for input on id=0</div><div>ber_get_next</div><div>ldap_read: want=8, got=7</div>

<div>  0000:  30 05 02 01 02 42 00                               0....B.           </div><div>ber_get_next: tag 0x30 len 5 contents:</div><div>ber_dump: buf=0xa0039c0 ptr=0xa0039c0 end=0xa0039c5 len=5</div><div>  0000:  02 01 02 42 00                                     ...B.             </div>

<div>ber_get_next</div><div>ldap_read: want=8, got=0</div><div><br></div><div>ber_get_next on fd 13 failed errno=0 (Success)</div><div>connection_read(13): input error=-2 id=0, closing.</div><div>connection_closing: readying conn=0 sd=13 for close</div>

<div>daemon: activity on 1 descriptor</div><div>daemon: activity on:</div><div>daemon: epoll: listen=7 active_threads=0 tvp=zero</div><div>daemon: epoll: listen=8 active_threads=0 tvp=zero</div><div>connection_close: deferring conn=0 sd=13</div>

<div>conn=0 op=1 do_unbind</div><div>connection_resched: attempting closing conn=0 sd=13</div><div>connection_close: conn=0 sd=13</div><div>daemon: removing 13</div><div>daemon: activity on 1 descriptor</div><div>daemon: activity on:</div>

<div>slap_listener_activate(8): </div><div>daemon: epoll: listen=7 active_threads=0 tvp=zero</div><div>daemon: epoll: listen=8 busy</div><div>&gt;&gt;&gt; slap_listener(ldap:///)</div><div>daemon: activity on 1 descriptor</div>

<div>daemon: activity on:</div><div>daemon: epoll: listen=7 active_threads=0 tvp=zero</div><div>daemon: epoll: listen=8 active_threads=0 tvp=zero</div><div><br></div></div><div>=================================</div><div>

<br></div><div><br></div><div>I tried to set a lot of different config syntaxes at squid.conf, but it always come to the same kind of problem at slapd debug: After reading the user CN and his password, slapd fails to read something else (ldap_read: want=8 error=Resource temporarily unavailable) and then it doesn&#39;t authenticates. </div>

<div><br></div><div>What I&#39;m doing wrong? Is there any problem with my openldap server? With squid? =(</div><div><br></div><div>I&#39;d like to thank you all in advance for any support, and say sorry for my broken english. =D</div>

<meta http-equiv="content-type" content="text/html; charset=utf-8">