Re: [squid-users] Squid_ldap_group

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Thu, 24 Oct 2002 18:23:33 +0200

Sorry, the acl line should obviously read

acl ou_testing external ldapou Testing

Regards
Henrik

Jack wrote:
> Hello Henrik,
>
> While i run squid after changing squid configuration according to your
> guide i got following error:
>
> 2002/10/24 19:08:41| squid.conf line 1287: acl ou_testing ldapou Testing
> 2002/10/24 19:08:41| aclParseAclLine: Invalid ACL type 'ldapou'
> 2002/10/24 19:08:41| squid.conf line 1766: http_access allow ldapou
> 2002/10/24 19:08:41| aclParseAccessLine: ACL name 'ldapou' not found.
> 2002/10/24 19:08:41| squid.conf line 1766: http_access allow ldapou
> 2002/10/24 19:08:41| aclParseAccessLine: Access line contains no ACL's,
> skipping
>
> I Compiled squid with following configuration option:
> ./configure --prefix=/usr/local/squid25S1 --enable-snmp --enable-ssl
> --enab le-external-acl-helpers="ldap_group"
>
> How to set acl for ldap_group
>
> Thanks,
> Jack
>
> > The -f argument to suqid_ldap_group needs to contain special codes
> > referring to the login or group names. The correct external_acl_type
> > line reads:
> >
> > external_acl_type ldapou %LOGIN
> > /usr/local/squid/libexec/squid_ldap_group -b "dc=xxx,dc=com" -f
> > "(&(uid=%v)(ou=%a))" -h localhost
> >
> > acl ou_testing ldapou Testing
> >
> > These magic codes is documented in the squid_ldap_group documentation
> > shipped with Squid.
> >
> > Regards
> > Henrik Nordström
>
> __________________________________________________
> Do You Yahoo!?
> Everything you'll ever need on one web page
> from News and Sport to Email and Music Charts
> http://uk.my.yahoo.com
Received on Thu Oct 24 2002 - 10:23:37 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:10:54 MST