One of the things you want to do as you integrate your systems would be to have them authenticate from a common user base. That user base is usually an LDAP source, in my case Microsoft Active Directory (don’t say anything!!!). One of the systems you would want to use the common user base is your web proxy, Squid in my case. Here is how to integrate the two. It’s quite simple actually though, as usual, LDAP gave me a bit of a hard time.
First you need to configure Squid to use LDAP. Just add the following in your squid.conf:
auth_param basic program /usr/lib/squid/squid_ldap_auth -P -R -b “dc=your,dc=domain” -D “cn=user,cn=Users,dc=your,dc=domain” -w “password” -f “(&(objectClass=person)(sAMAccountName=%s))” yourldapserver
If you’re encountering problems add the -d parameter at the end and do a tail -f on /var/log/squid/cache.log Now that Squid can authenticate using LDAP, just add your ACLs in squid.conf:
acl youracl1 proxy_auth “/path/to/userlist”
http_access allow youracl1
That’s it!
Cloverfield
Tried Rufo’s early this morning (like 2AM early). Actually I’ve tried it almost exactly a week ago at Makati. That time, I ordered (what else?) tapsilog, their signature dish. Unusually, the tapa comes with sauce. In fact there’s more sauce than meat. They claim that the sauce alone is already viand. Frankly, I didn’t expect tapa to come with sauce since I’m used more to Rodic’s and Tapa King’s tapa which are more traditional. But I have to admit that it does taste nice. I like Rodic’s tapa better though. Anyway, this morning, I ordered embutido then switched to liempo because both Alex and Aby ordered it (shades of gluttony and envy in one sitting, beat that!) . But no regrets since it’s one of the best liempo I’ve had. I definitely want to try the other items on their menu.