Re: [squid-users] squid_ldap_group from command line

From: Leonardo Rodrigues Magalhães <leolistas_at_solutti.com.br>
Date: Thu, 29 May 2008 15:23:56 -0300

Squidly escreveu:
> I have tried quite a few variations of the squid_ldap_group eg:
>
> root_at_control:/usr/lib/squid# ./squid_ldap_group -b
> "ou=groups,dc=example,dc=com" -f
> "(&(cn=%v)(member=%u)(objectClass=group))" -B
> "ou=people,dc=example,dc=com"
> testuser testgroup
> ERR
>
>
> But cannot get this to run from the command line. Can someone help me
> with the syntax?
>
>

    i'm successfully using squid_ldap_group for matching Microsoft AD
groups using the following syntax:

external_acl_type ldap_group ttl=300 %LOGIN /usr/bin/squid_ldap_group -R
-b "dc=MY,dc=DOMAIN" -D "cn=MY_USER,ou=MYOU,dc=MY,dc=DOMAIN" -w
"MYPASSWORD" -f
"(&(objectclass=person)(sAMAccountName=%v)(memberof=cn=%a,ou=MYOU,dc=MY,dc=DOMAIN))"
-h LDAP_IP_ADDRESS

-- 
	Atenciosamente / Sincerily,
	Leonardo Rodrigues
	Solutti Tecnologia
	http://www.solutti.com.br
	Minha armadilha de SPAM, NÃO mandem email
	gertrudes_at_solutti.com.br
	My SPAMTRAP, do not email it
Received on Thu May 29 2008 - 18:24:13 MDT

This archive was generated by hypermail 2.2.0 : Tue Aug 05 2008 - 01:05:14 MDT