auth_param basic program /usr/local/squid/libexec/squid_ldap_auth -b DC=mansfield13104,DC=lancsngfl,DC=ac,DC=uk -D CN=Administrator,CN=Users,DC=mansfield13104,DC=lancsngfl,DC=ac,DC=uk -f sAMAccountName=%s -w password -h pit-pony:389
#auth_param digest children 5 
#auth_param digest realm Squid proxy-caching web server
#auth_param digest nonce_garbage_interval 5 minutes
#auth_param digest nonce_max_duration 30 minutes
#auth_param digest nonce max_count 50
#auth_param ntlm program <uncomment and complete this line to activate>
#auth_param ntlm children 5
#auth_param ntml max_challenge_reuses 0
#auth_param ntlm max_challenge_lifetime 2 minutes
auth_param basic children 5
auth_param basic realm Squid proxy server on Red Hat Linux 8.0
auth_param basic credentialsttl 2 hours

external_acl_type ldap_group %LOGIN /usr/local/squid/libexec/squid_ldap_group -b
DC=mansfield13104,DC=lancsngfl,DC=ac,DC=uk -D CN=Administrator,CN=Users,DC=mansfield13104,DC=lancsngfl,DC=ac,DC=uk -w password -f (&(CN=%g)(member=CN=%u,OU=2002 Pupils,OU=All Users,DC=mansfield13104,DC=lancsngfl,DC=ac,DC=uk))

acl password proxy_auth REQUIRED
acl proxy_users external ldap_group proxygrp

http_access deny !proxy_users
http_access allow password