'Squid authentication with Windows Active Directory logon error
I have a Windows Active Directory running and I have configured correctly Squid's authentication, but I have a problem: the only users allowed to login are the ones with the AD option to "Logon on All computers".
I have configured DNS and it responds properly, but Squid server is on PFSENSE and it doesn't allow to integrate to AD at least to my knowledge, so I can't configure a user to logon only to Squid server because that computer doesn't exist in AD.
If I try to manually create that computer in AD I'm unable to change DNS address to point to correct location.
This is the options in the AD I'm talking about just in case:
I want to know if it is possible and if so how to configure AD so that users can only logon to Squid server so that the script basic_ldap_auth doesn't return this error:
Case 1: User with option to login to Only specific computers
> test password
basic_ldap_auth.cc(698): pid=40748 :user filter 'sAMAccountName=test', searchbase 'DC=a,DC=b,DC=c'
basic_ldap_auth.cc(753): pid=40748 :attempting to authenticate user 'CN=test,OU=Users,DC=a,DC=b,DC=c'
ERR Invalid credentials (**Note: Password is being entered correctly**)
Case 2: User with option to login to All computers
> test.test password
basic_ldap_auth.cc(698): pid=40748 :user filter 'sAMAccountName=test.test', searchbase 'DC=a,DC=b,DC=c'
basic_ldap_auth.cc(753): pid=40748 :attempting to authenticate user 'CN=test test,OU=Users,DC=a,DC=b,DC=c'
OK
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|