Feature request: Squidguard with LDAP-Support. Working Patch inside!



  • Hello,

    I have made a patch for using ldap-groups within squidguard. On my System it works great. But only with "squidguard-1.4.3". Is the new squidgaurd package build without ldap support?

    • Please (re)activate the ldap support of the squidguard binary!
    • Please integrate this patch in squidguard!

    Greetings Snowyrain
    squidquard_ldapgroups.patch.txt



  • The config which builds the packages says that there is ldap support:

    
    	<build_options>WITH_SQUID_KERB_AUTH=true WITH_SQUID_LDAP_AUTH=true WITH_SQUID_NIS_AUTH=true WITH_SQUID_SASL_AUTH=true WITH_SQUID_DELAY_POOLS=true WITH_SQUID_SNMP=true WITH_SQUID_CARP=true WITH_SQUID_SSL=true WITHOUT_SQUID_PINGER=true WITHOUT_SQUID_DNS_HELPER=true WITH_SQUID_HTCP=true WITH_SQUID_VIA_DB=true WITH_SQUID_CACHE_DIGESTS=true WITH_SQUID_WCCP=true WITHOUT_SQUID_WCCPV2=true WITHOUT_SQUID_STRICT_HTTP=true WITH_SQUID_IDENT=true WITH_SQUID_REFERER_LOG=true WITHOUT_SQUID_USERAGENT_LOG=true WITH_SQUID_ARP_ACL=true WITH_SQUID_PF=true WITHOUT_SQUID_IPFILTER=true WITH_SQUID_FOLLOW_XFF=true WITH_SQUID_AUFS=true WITH_SQUID_COSS=true WITH_SQUID_KQUEUE=true WITH_SQUID_LARGEFILE=true WITHOUT_SQUID_STACKTRACES=true WITH_SAMPLE_BL=true WITH_LDAP=true WITH_SASL=true WITH_FETCH=true</build_options>
    
    

    You can find it here:
    https://github.com/bsdperimeter/pfsense-packages/blob/master/pkg_config.8.xml



  • Hello,

    The command: "squidGuard-1.4_4 -d -c /usr/local/etc/squidGuard/squidGuard.conf" returns:

    ...
    2012-11-18 14:44:30 [38957] syntax error in configfile /usr/local/etc/squidGuard/squidGuard.conf line 20 
    ...
    

    Line 20:  ldapusersearch ldap://10.12.0.10/cn=squid,ou=Groups,dc=firma,dc=loc?memberUid?sub?(&(objectclass=posixGroup)(memberUid=%s))

    I have tried a example file from squidguard.org. Even this file squidguard 1.4.4 could not open (1.4.3 could).

    With the squidGuard binary from the squidGuard-1.4_3 package everythink works fine.  I have no idea why it is so. I know not how I need to build squidgaurd. But when somebody can build a new one, I will test this fill.

    Other people in this forum have this problem too.

    Greetings

    Snowyrain



  • Did you got it working?



  • @marcelloc:

    Did you got it working?

    Yes it works very finewith the patch. Youhave todowngrade the squidguard binary http://forum.pfsense.org/index.php/topic,47100.msg298331.html#msg298331

    Greetings

    Snowyrain


Log in to reply