From linux-umbrella-bounces@lug.lk Mon Sep 28 10:27:11 2009 Received: from localhost.pdn.ac.lk ([127.0.0.1] helo=penguin.lug.lk) by penguin.lug.lk with esmtp (Exim 4.63) (envelope-from ) id 1Ms8IR-0000cJ-7G; Mon, 28 Sep 2009 10:27:11 +0530 Received: from [192.248.40.1] (helo=hantana.pdn.ac.lk) by penguin.lug.lk with esmtp (Exim 4.63) (envelope-from ) id 1Ms8IO-0000cB-Q1 for linux@lug.lk; Mon, 28 Sep 2009 10:27:08 +0530 Received: from localhost (localhost.pdn.ac.lk [127.0.0.1]) by hantana.pdn.ac.lk (Postfix) with ESMTP id A316F5C01D for ; Mon, 28 Sep 2009 10:27:08 +0530 (LKT) X-Virus-Scanned: amavisd-new at pdn.ac.lk Received: from hantana.pdn.ac.lk ([127.0.0.1]) by localhost (hantana.pdn.ac.lk [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j2-A3dG7iu6t for ; Mon, 28 Sep 2009 10:27:07 +0530 (LKT) Received: from kitul.learn.ac.lk (kitul.learn.ac.lk [192.248.1.163]) by hantana.pdn.ac.lk (Postfix) with ESMTP id 8674D5C006 for ; Mon, 28 Sep 2009 10:27:07 +0530 (LKT) Received: from localhost (localhost [127.0.0.1]) by kitul.learn.ac.lk (Postfix) with ESMTP id 6E88617B890 for ; Mon, 28 Sep 2009 10:27:07 +0530 (IST) X-Virus-Scanned: amavisd-new at learn.ac.lk Received: from kitul.learn.ac.lk ([127.0.0.1]) by localhost (kitul.learn.ac.lk [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0FMIlB-tAtC1 for ; Mon, 28 Sep 2009 10:26:57 +0530 (IST) Received: from mail-px0-f175.google.com (mail-px0-f175.google.com [209.85.216.175]) by kitul.learn.ac.lk (Postfix) with ESMTP id F32CD17B811 for ; Mon, 28 Sep 2009 10:26:33 +0530 (IST) Received: by pxi5 with SMTP id 5so4674594pxi.12 for ; Sun, 27 Sep 2009 21:56:32 -0700 (PDT) MIME-Version: 1.0 Received: by 10.142.1.24 with SMTP id 24mr218649wfa.8.1254113792221; Sun, 27 Sep 2009 21:56:32 -0700 (PDT) In-Reply-To: References: Date: Mon, 28 Sep 2009 10:26:32 +0530 Message-ID: From: tidalbobo To: =?UTF-8?B?WWFqaXRoIEFqYW50aGEgRGF5YXJhdGhuYSB8IOC2uuC2ouC3kuC2reC3iiDgtoXgtqLgtrHgt4o=?= =?UTF-8?B?4LatIOC2r+C2uuC3j+C2u+C2reC3iuC2sQ==?= , linux@lug.lk Content-Type: multipart/alternative; boundary=001636b2be5717e40b04749c1fbf X-BeenThere: linux-umbrella@lug.lk X-Mailman-Version: 2.1.9 Precedence: list Sender: linux-umbrella-bounces@lug.lk Errors-To: linux-umbrella-bounces@lug.lk X-Mailman-Approved-At: Mon, 28 Sep 2009 15:17:44 +0530 Subject: Re: [linux] SQUID-LDAP problem X-BeenThere: linux@lug.lk List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Sep 2009 04:57:11 -0000 --001636b2be5717e40b04749c1fbf Content-Type: text/plain; charset=ISO-8859-1 Problem fixed. Thank you for all the help. i wrote an external helper using perl. If any one needs it, feel free to use. Its pretty crude, but functional. -------------------------------------- external_acl_type *ldap_ip* %LOGIN %SRC /usr/lib/squid/squid_ldap_ip acl iplocked external *ldap_ip* this is the squid_ldap_ip --------------------------------------- #!/usr/bin/perl # author : tidalbobo@gmail.com # use : validate ip from ldap for squid # GNU GPL # 2009/09/24 $|=1; $ldap_server_ip = "__________________"; $ldap_search_base = "______________________" while(<>) { chomp; @vals = split(/ /,$_); $name=$vals[0]; $ip=$vals[1]; $cmd="ldapsearch -h $ldap_server_ip -x -b O=$ldap_search_base -LLL \"(&(uid=$name)(c=$ip))\" $name"; $returncode = `$cmd`; if (!$returncode) { print "ERR\n"; } else { print "OK\n"; } } --------------------------------------- --001636b2be5717e40b04749c1fbf Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Problem fixed. Thank you for all the help.

i wrote an external helpe= r using perl. If any one needs it, feel free to use.
Its pretty crude, b= ut functional.


--------------------------------------
externa= l_acl_type ldap_ip %LOGIN %SRC /usr/lib/squid/squid_ldap_ip
acl iplocked external ldap_ip


this is the squid_ldap_ip=
---------------------------------------
#!/usr/bin/perl
# author = : tidalbobo@gmail.= com
# use : validate ip from ldap for squid
# GNU GPL
# 2009/09/24
$|=3D1;

$ldap_server_ip =3D "_____= _____________";
$ldap_search_base =3D "______________________&= quot;
while(<>) {
=A0 chomp;
=A0 @vals =3D split(/ /,$_);=A0 $name=3D$vals[0];
=A0 $ip=3D$vals[1];

=A0 $cmd=3D"ldapsearch -h $ldap_server_ip -= x -b O=3D$ldap_search_base -LLL \"(&(uid=3D$name)(c=3D$ip))\"= $name";
=A0 $returncode =3D `$cmd`;

=A0 if (!$returncode) {
=A0=A0=A0=A0= =A0=A0=A0=A0 print "ERR\n";
=A0 } else {
=A0=A0=A0=A0=A0=A0= =A0=A0 print "OK\n";
=A0 }
}


-------------------= --------------------

--001636b2be5717e40b04749c1fbf--