Re: [squid-users] External users from Child AD domain unable to use local Squid proxy

So instead of the way the line is now:

acl InetAllow external AD_global_group CLW.Squid.Full

The domain would be added to the group like below:

acl InetAllow external AD_global_group NA\CLW.Squid.Full

On Wed, Apr 21, 2010 at 06:19, Guido Serassio
<guido.serassio_at_acmeconsulting.it> wrote:
> Hi,
>
>> >> We have the below acl for users in the Ad global group
>> >>
>> >>
>> >> external_acl_type AD_global_group ttl=120 %LOGIN
>> >> c:/squid/libexec/mswin_check_ad_group.exe -G
>> >>
>> >> and another acl below that allows full access thru the squid proxy
>> >> using an ad group
>> >>
>> >> acl InetAllow external AD_global_group CLW.Squid.Full
>> >>
>> >>
>> >> any ideas????
>> >
>
> AGAIN:
>
> "When using mswin_check_ad_group.exe 1.x in global mode (-G options),
> the check is done always against a global group placed in the user's
> domain."
>
> So the question is: On which AD domain is defined the CLW.Squid.Full
> group ?
>
> Regards
>
> Guido
>
> Guido Serassio
> Acme Consulting S.r.l.
> Microsoft Gold Certified Partner
> VMware Professional Partner
> Via Lucia Savarino, 1                10098 - Rivoli (TO) - ITALY
> Tel. : +39.011.9530135               Fax. : +39.011.9781115
> Email: guido.serassio_at_acmeconsulting.it
> WWW: http://www.acmeconsulting.it
>
>
>
>
Received on Wed Apr 21 2010 - 12:51:53 MDT