[squid-users] squid_ldap_group trouble

From: Joseph L. Casale <jcasale_at_activenetwerx.com>
Date: Mon, 1 Feb 2010 05:21:22 +0000

I am trying to supplement squid_kerb_auth with squid_ldap_group, from
the cli, my external_acl_type string works fine, username and group
pairs return expected results.

Disregarding the ldap group check, the following authenticates correctly:

acl auth proxy_auth REQUIRED

http_access deny !auth
http_access allow auth localnet
http_access deny all

But when I modify it as follows it breaks:

external_acl_type ldapgroup %LOGIN /usr/lib64/squid/squid_ldap_group <...>

acl auth proxy_auth REQUIRED
acl acl_ldap external ldapgroup adGroup

http_access deny !auth
http_access allow auth acl_ldap localnet
http_access deny all

Anyone see what I have done wrong?

Thanks,
jlc
Received on Mon Feb 01 2010 - 05:21:23 MST

This archive was generated by hypermail 2.2.0 : Mon Feb 01 2010 - 12:00:05 MST