How to install WSTrust Integration to Squid and make it working together
You must have installed and running
WSTrust server part
libwww perl module (on the server where the Squid is installed)
There is comfortable installation script available for installation on Linux platform. You must assign “run” permissions for installation script file inst_wstrust_squid_1.2.1.bin (e.g. chmod + x inst_wstrust_squid_1.2.1.bin) and run it (./inst_wstrust_squid_1.2.1.bin). Script must be run on the server where the Squid is installed.
Than follow installation script instructions:
Enter or confirm IP address and port where the server part of WSTrust is available (default address is http://127.0.0.1:8485).
Enter or confirm LDAP server URL (e.g. ldaps://172.22.60.13:636)
Enter the DN and password of user which will be used for LDAP searching. You need to create this user with sufficient permissions to search for user objects and to query group membership. Search user DN will be stored in /etc/squid/wstrust_acl.conf and password in /etc/squid/wstrust_ldap_pass. We recommend you create special user for this – e.g. cn=wstrust_search,o=your_org or cn=wstrust_search,cn=Users,dc=your_domain,dc=local
Enter or confirm LDAP user search base container (e.g. o=org)
Enter or confirm LDAP group DN for users with full internet access (cn=FullInternetAccess,o=org)
Enter or confirm LDAP group DN for users with limited internet access (cn=LimitedInternetAccess,o=org)
Now you have to apply Squid configuration either from install script or anytime later by running squid -k reconfigure).
Privacy & Cookies Policy
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.