I am trying to supplement squid_kerb_auth with squid_ldap_group, from
the cli, my external_acl_type string works fine, username and group
pairs return expected results.
Disregarding the ldap group check, the following authenticates correctly:
acl auth proxy_auth REQUIRED
http_access deny !auth
http_access allow auth localnet
http_access deny all
But when I modify it as follows it breaks:
external_acl_type ldapgroup %LOGIN /usr/lib64/squid/squid_ldap_group <...>
acl auth proxy_auth REQUIRED
acl acl_ldap external ldapgroup adGroup
http_access deny !auth
http_access allow auth acl_ldap localnet
http_access deny all
Anyone see what I have done wrong?
Thanks,
jlc
Received on Mon Feb 01 2010 - 05:21:23 MST
This archive was generated by hypermail 2.2.0 : Mon Feb 01 2010 - 12:00:05 MST