[Samba] Problems with Samba 4.6.3 Authentication

[Rowland Penny]

On Mon, 22 May 2017 18:12:58 -0300
Marcio Demetrio Bacci via samba <samba at lists.samba.org> wrote:

> Hi,
> 
> I have posted the following message to Squid-Users forum (
> squid-users at lists.squid-cache.org).
> 
> "I have migrated of Samba 4.2.1 to Samba 4.6.3 as DC, but now my Squid
> authentication doesn't work.
> 
> In samba 4.2.1 is working properly.
> 
> This is my authentication block:
> 
> auth_param basic program /usr/lib/squid3/basic_ldap_auth -R -b
> DC=empresa,DC=com,DC=br -D CN=proxy,CN=Users,DC=empresa,DC=com,DC=br
> -w password -h 192.168.10.4 -p 389 -s sub -v 3 -f "sAMAccountName=%s"
> auth_param basic children 50
> auth_param basic realm Access Monitored
> auth_param basic credentialsttl 8 hours
> auth_param basic casesensitive off
> 
> I'm using Squid 3.4.8
> 
> Can anybody help me ?"
> 
> 
> *Answer of the Squid-Users forum: *
> 
> "
> 
> *If the only thing that changed was Samba its clearly an issue with
> that end of the system.I suggest you compare those LDAP parameters
> with what the new Samba version needs, and if there is no issue there
> please contact your vendor or the Samba help channels*."
> 
> 
> 
> Thus, are there changes LDAP parameters in Samba 4.2.1 to 4.6.3 ?
> 
> Regards,
> 
> Márcio Bacci

Try using TLS '-Z' I think

Rowland