[ ipcop-Bugs-3544690 ] LDAP Auth with AD fails

SourceForge.net <[email protected]>
Newsgroups gmane.comp.security.ipcop.devel
Message-ID <[email protected]>
Bugs item #3544690, was opened at 2012-07-16 10:55
Message generated for change (Tracker Item Submitted) made by stenzer
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=3544690&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Web Proxy
Group: 2.0.0
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Stenzer (stenzer)
Assigned to: Nobody/Anonymous (nobody)
Summary: LDAP Auth with AD fails

Initial Comment:
I have currently setup ipcop with ldap auth over AD.
If the domain is dc=example,dc=local and you are using the root node as baseDN the authentifaciton fails.
If you use an OU or the standard Users every thing works fine.
So i did some search on the net and found the -R switch for the auth_ldap.
If i add manually the -R switch every thing works fine also the baseDN ist only set to dc=example,dc=local.
auth_param basic program /usr/lib/squid/suid_ldap_auth -R -b "dc=example,dc=local" ....

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=3544690&group_id=40604

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.