Re: [squid-users] About ip_user_check with ADS groups

From: Henrik Nordstrom <henrik@dont-contact.us>
Date: Tue, 03 Oct 2006 00:23:47 +0200

mån 2006-10-02 klockan 13:47 +0200 skrev Helpdesk:
> Hi,
> I'm running squid-2.5.STABLE6-3.4E.12 and samba-3.0.10-1.4E.9 on CentOS
> 4.4, all is working fine but I don't understand how to configure
> external ip_user_check with AD group:

No wonder, it's not something supported by ip_user_check.

The only groups known to ip_user_check is the groups known to the OS.

But you can combine other ACLs to get the desired results.

For the explicit user names use ip_user as you already have.

For l2 use a wbinfo_group acl + and src acl.

For the rest, deny all.

Regards
Henrik

Received on Mon Oct 02 2006 - 16:23:56 MDT

This archive was generated by hypermail pre-2.1.9 : Wed Nov 01 2006 - 12:00:04 MST