summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2019-05-14 20:35:01 +0200
committerGitHub <noreply@github.com>2019-05-14 20:35:01 +0200
commitea486a3e40724cd3ffb864fb68516fb676967f41 (patch)
tree48915864da09a62e0a438c47ec5c03b1ad45523c
parent40d9e786e70d43e6ae8bce0d7ed6bb88fc399236 (diff)
parent60fbdfa07e0961b41f9281e30332f3986389f35f (diff)
downloadvyos-documentation-ea486a3e40724cd3ffb864fb68516fb676967f41.tar.gz
vyos-documentation-ea486a3e40724cd3ffb864fb68516fb676967f41.zip
Merge pull request #52 from rebortg/improve/webproxy
add explanation of ldap parameter
-rw-r--r--docs/services/webproxy.rst12
1 files changed, 9 insertions, 3 deletions
diff --git a/docs/services/webproxy.rst b/docs/services/webproxy.rst
index 096a80cd..75f9993a 100644
--- a/docs/services/webproxy.rst
+++ b/docs/services/webproxy.rst
@@ -90,11 +90,11 @@ Directory as authentication backend. Queries are done via LDAP.
children 5
credentials-ttl 60
ldap {
- base-dn DC=rgtest,DC=local
- bind-dn CN=proxyuser,CN=Users,DC=rgtest,DC=local
+ base-dn DC=example,DC=local
+ bind-dn CN=proxyuser,CN=Users,DC=example,DC=local
filter-expression (cn=%s)
password Qwert1234
- server 192.168.188.201
+ server ldap.example.local
username-attribute cn
}
method ldap
@@ -105,6 +105,12 @@ Directory as authentication backend. Queries are done via LDAP.
listen-address 192.168.188.103 {
disable-transparent
}
+
+* ``base-dn`` set the base directory for the search
+* ``bind-dn`` and ``password``: set the user, which is used for the ldap search
+* ``filter-expression``: set the exact filter which a authorized user match in a ldap-search. In this example every User is able to authorized.
+
+You can find more about the ldap authentication `here <http://www.squid-cache.org/Versions/v3/3.2/manuals/basic_ldap_auth.html>`_
Adjusting cache size
^^^^^^^^^^^^^^^^^^^^