Kungani ukuqinisekisa kwe-Squid Basic LDAP kusacela iphasiwedi

Ukulungiselelwa kwe-Squid kungahlola amaphasiwedi ku-Active Directory futhi kusabonisa ibhokisi lokungena. Lokho akusho ukuthi kukhona okugqekile. I-AD ichaza ukuthi i-akhawunti itholakala kuphi; ayichazi ukuthi isiphequluli sizobufakazela kanjani ukuthi umsebenzisi ungubani.

Kulolu mugqa, igama elibalulekile yi-basic:

auth_param basic realm Windows Logon

Amagama alandela i-realm aqamba indawo evikelekile yokuqinisekisa. Awaceli ithokheni yokufinyelela ye-Windows futhi awashintshi inselele ibe yi-Negotiate. Umsizi we-Basic LDAP wamukela ubufakazi obunikeziwe bese ebuqinisekisa kuhlu lwemibhalo.

Ekuhlelweni okuvamile kunezinqumo ezintathu ezihlukene: indlela i-Squid ebeka inselele ngayo kuklayenti, indlela umsizi aqinisekisa ngayo leyo mpendulo, nokuthi imuphi umsebenzisi noma iqembu eliqinisekisiwe elivunyelwe umthetho wokufinyelela. Ukusesha kweqembu le-LDAP okuphumelelayo kubhekana nesinqumo sokugcina kuphela. Akukwazi ukunikeza ubufakazi obungekho kusiphequluli.

Uma imfuneko iwukungena buthule

Khetha uhlelo lokuqinisekisa oluhlanganisiwe olusekelwa isiphequluli bese ulungiselela izimo zalo zangaphambili ohlangothini lweseva. Ku-Negotiate esekelwe ku-Kerberos, lokho kufaka ubunikazi besevisi kanye nezinto zokhiye, kanye nenqubomgomo yeklayenti evumela ukuqinisekisa kuleyo proxy. Ukushintsha kuphela ifayela elisebenzayo lomsizi ekuhlelweni kwe-Basic ngeke kwenza lokho kuguqulwa.

Nquma ukuthi yimuphi umphumela owudingayo ngaphambi kokushintsha ukulungiselelwa kwe-LDAP okusebenzayo. Ukwamukela igama lomsebenzisi nephasiwedi elifanayo nelisetshenziselwa ukungena esiteshini somsebenzi kuyimfuneko ye-Basic enengqondo. Ukuphinda usebenzise ubunikazi be-Windows obungene kakade ngaphandle kokubuza leyo phasiwedi kungenye imfuneko, enomsebenzi ohlukile wephrothokholi nokwethulwa.