[squid-users] Basic LDAP on 2008 R2, groups and refresh time

From: masterx81 <gecom_at_tubosider.it>
Date: Fri, 11 Jul 2014 03:53:16 -0700 (PDT)

Hi!
I've configured a squid version 3.HEAD-20140127-r13248 on centos (get
precompiled by http://ngtech.co.il/rpm/centos/6/$basearch) and i've
successfully configured it with basic LDAP authentication and groups
management.
It work as it should. If i add an user to a group it navigate, else it's not
allowed.
The problem is that if i remove an user from the group, the navigation isn't
blocked until i do a -k reconfigure on the squid server (and viceversa, if i
add someone, i'll need to do a reconfigure on the server for get it
working).
I can bypassing this with a cron every hour, but i think that there is a
more elegant way to do this...
The strange thing is that if i call manually the helpers from command line,
they work as they should and as soon as i remove the user from the group,
the ext_ldap_group_acl helper give me the error as the user isn't in the
group. Seem that squid caches the group membership and doesn't update until
a new reconfigure.
I've found others with same problem on the net (with different versions of
squid) but they also haven't solved the problem (or they haven't posted a
solution)

What i can try to do?

Any help is much appreciated!
Thanks!

--
View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Basic-LDAP-on-2008-R2-groups-and-refresh-time-tp4666845.html
Sent from the Squid - Users mailing list archive at Nabble.com.
Received on Fri Jul 11 2014 - 10:53:26 MDT

This archive was generated by hypermail 2.2.0 : Fri Jul 11 2014 - 12:00:04 MDT