[Samba] Problems search using ldapusersearch + Samba4 (v4.4.4)

[Gabriel O. Franca]

Good afternoon friends,

I am implementing squid + squidguard the pfsense authenticating samba 4
version 4.4.4

And always I get this message in squidguard logs.

2016-06-20 17:30:55 [75446] (squidGuard): ldap_simple_bind_s failed:
Strong(er) authentication required
2016-06-20 17:30:55 [75446] Added LDAP source: administrator
2016-06-20 17:30:55 [75446] (squidGuard): ldap_simple_bind_s failed:
Strong(er) authentication required
2016-06-20 17:30:55 [75446] Added LDAP source: administrator
2016-06-20 17:30:55 [75446] (squidGuard): ldap_simple_bind_s failed:
Strong(er) authentication required
2016-06-20 17:30:55 [75446] Added LDAP source: administrator
2016-06-20 17:30:55 [75446] source not found
2016-06-20 17:30:55 [75446] no ACL matching source, using default

The message happens when I put this filter ldap search:

ldapusersearch
ldap://172.16.1.4:3268/DC=cmc,DC=corp?sAMAccountName?sub?(&(sAMAccountName=%s)(memberOf=CN=grp-ilivre%2cCN=Users%2cDC=cmc%2cDC=corp))

To take a doubt did the same procedure by accessing an AD 2008R2 and it
worked.

the squidguard can not do a search on the Samba LDAP base and therefore
can not identify users within the Samba4 groups.

They know how I can change this search or a way to make it work?

IPC: password I'm using to authenticate: qBo%23or%Fasesee that it passes
the safety criterion of Samba4 passwords

Regards,

Gabriel Franca

[Gabriel O. Franca]

Hi Marc,

thanks a lot !!!

solved my problem.

Regards,

Gabriel Franca

Hello Gabriel,

Post by Gabriel O. Franca
Strong(er) authentication required

https://wiki.samba.org/index.php/Updating_Samba#Default_for_LDAP_Connections_Requires_Strong_Authentication_.28updating_from_.3C.3D4.4.0.2C_.3C.3D4.3.6_or_.3C.3D4.2.9.29
Regards,
Marc