Re: [squid-users] External Acl type ...

On Mon, 25 Apr 2005, ansari imtiyaz ahmed khadim husain wrote:

> Has anyone used external acl type "squid_ldap_match".

Yes.. is't current name is squid_ldap_group and is distributed with Squid.

> I want to know the steps involved in implementing it.

1. Define the required external_acl_type telling Squid how to use the
helper (see squid_ldap_group manual). It helps a lot if you have your
squid_ldap_auth settings next to you when doing this as the two shares a
lot. You also need to know how groups are implemented in your LDAP
directory.

2. Define ACLs for the groups you want to match.

3. Use the ACLs in http_access to give each group the desired level of
access.

> I want to know how to create groups in ldap so as to use it.

There is very many ways to create groups in LDAP. The most common is to
use groupOfNames whith the DNs of each user as member.

    -F [from squid_ldap_auth -f] -f "(&(objectClass=groupOfNames)(cn=%g)(member=%u))"

Regards
Henrik
Received on Mon Apr 25 2005 - 03:07:50 MDT