squid_ldap_group doesn't work with SSL/startTLS

Solution Verified - Updated -

Issue

I am trying to get squid auth helpers working, the squid_ldap_group command works fine if we use ldap, and it returns Error if SSL/tls is used.
For example:

$ echo redhat test | /usr/lib64/squid/squid_ldap_group -s sub -R -K -b "dc=example,dc=com" -D <binddn> -W -f "(&(uid=%u)(memberOf=cn=%g,ou=general,ou=groups,dc=example,dc=com))" -h ldap1.gss.redhat.com -v 3 -Z
Could not Activate TLS connection
ERR

The CA certificates are added into /etc/pki/tls/certs and openssl s_client command works fine.

Environment

  • Red Hat Enterprise Linux 6
  • Squid-3.x

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.