Feature request: Squidguard with LDAP-Support. Working Patch inside!

[snowyrain]

Hello,

I have made a patch for using ldap-groups within squidguard. On my System it works great. But only with "squidguard-1.4.3". Is the new squidgaurd package build without ldap support?

• Please (re)activate the ldap support of the squidguard binary!
• Please integrate this patch in squidguard!

Greetings Snowyrain
squidquard_ldapgroups.patch.txt

[Nachtfalke]

The config which builds the packages says that there is ldap support:

	<build_options>WITH_SQUID_KERB_AUTH=true WITH_SQUID_LDAP_AUTH=true WITH_SQUID_NIS_AUTH=true WITH_SQUID_SASL_AUTH=true WITH_SQUID_DELAY_POOLS=true WITH_SQUID_SNMP=true WITH_SQUID_CARP=true WITH_SQUID_SSL=true WITHOUT_SQUID_PINGER=true WITHOUT_SQUID_DNS_HELPER=true WITH_SQUID_HTCP=true WITH_SQUID_VIA_DB=true WITH_SQUID_CACHE_DIGESTS=true WITH_SQUID_WCCP=true WITHOUT_SQUID_WCCPV2=true WITHOUT_SQUID_STRICT_HTTP=true WITH_SQUID_IDENT=true WITH_SQUID_REFERER_LOG=true WITHOUT_SQUID_USERAGENT_LOG=true WITH_SQUID_ARP_ACL=true WITH_SQUID_PF=true WITHOUT_SQUID_IPFILTER=true WITH_SQUID_FOLLOW_XFF=true WITH_SQUID_AUFS=true WITH_SQUID_COSS=true WITH_SQUID_KQUEUE=true WITH_SQUID_LARGEFILE=true WITHOUT_SQUID_STACKTRACES=true WITH_SAMPLE_BL=true WITH_LDAP=true WITH_SASL=true WITH_FETCH=true</build_options>

You can find it here:
https://github.com/bsdperimeter/pfsense-packages/blob/master/pkg_config.8.xml

[snowyrain]

Hello,

The command: "squidGuard-1.4_4 -d -c /usr/local/etc/squidGuard/squidGuard.conf" returns:

...
2012-11-18 14:44:30 [38957] syntax error in configfile /usr/local/etc/squidGuard/squidGuard.conf line 20 
...

Line 20:  ldapusersearch ldap://10.12.0.10/cn=squid,ou=Groups,dc=firma,dc=loc?memberUid?sub?(&(objectclass=posixGroup)(memberUid=%s))

I have tried a example file from squidguard.org. Even this file squidguard 1.4.4 could not open (1.4.3 could).

With the squidGuard binary from the squidGuard-1.4_3 package everythink works fine.  I have no idea why it is so. I know not how I need to build squidgaurd. But when somebody can build a new one, I will test this fill.

Other people in this forum have this problem too.

Greetings

Snowyrain

[marcelloc]

Did you got it working?

[snowyrain]

@marcelloc:

Did you got it working?

Yes it works very finewith the patch. Youhave todowngrade the squidguard binary http://forum.pfsense.org/index.php/topic,47100.msg298331.html#msg298331

Greetings

Snowyrain