Silahkan disesuaikan dengan kebutuhan masing-masing.

Kernel option :

# DTrace
options KDTRACE_HOOKS        # all architectures - enable general DTrace hooks
options DDB_CTF              # all architectures - kernel ELF linker loads CTF data
# Diskd
options         SYSVMSG
options         MSGMNB=8192     # max # of bytes in a queue
options         MSGMNI=40       # number of message queue identifiers
options         MSGSEG=512      # number of message segments per queue
options         MSGSSZ=64       # size of a message segment
options         MSGTQL=2048     # max messages in system
# Shared memory-diskd
options         SYSVSHM
options         SHMSEG=16       # max shared mem id's per process
options         SHMMNI=32       # max shared mem id's per system
options         SHMMAX=2097152  # max shared memory segment size (bytes)
options         SHMALL=4096     # max amount of shared memory (pages)
# ALTQ

dependensi :

cyrus-sasl-2.1.22.tar.gz
libtool-1.5.26.tar.gz
openldap-2.4.11.tgz
perl-5.8.9_2.tbz

Opsi kompilasi squid

/configure '--datadir=/usr/local/etc/squid' '--enable-auth=basic,digest' '--enable-basic-auth-helpers=NCSA,YP,LDAP' '--enable-digest-auth-helpers=password,ldap' '--enable-external-acl-helpers=ip_user,unix_group,ldap_group' '--enable-removal-policies=lru,heap' '--enable-storeio=aufs,ufs,diskd,null' '--localstatedir=/var/squid' '--enable-follow-x-forwarded-for' '--prefix=/usr/local/' '--bindir=/usr/local/sbin' '--sysconfdir=/usr/local/etc' '--mandir=/usr/local/man' '--infodir=/usr/local/info' 'LDFLAGS=-L/usr/local/lib' 'CPPFLAGS=-I/usr/local/include' '--enable-async-io' '--with-pthreads' '--enable-async-io=24' '--with-aio' '--with-dl' '--disable-wccp' '--disable-wccpv2' '--enable-cache-digests' '--with-large-files' '--enable-large-cache-files' '--enable-gnuregex' '--enable-err-languages=English' '--enable-ssl'

Config squid+ldap

auth_param basic program /usr/local/libexec/squid_ldap_auth -b "dc=xx,dc=xx,dc=xx" -f "uid=%s" -h ldap.server.com
acl ldapauth proxy_auth REQUIRED
http_access allow lan ldapauth