>>> >>> auth_param basic program /usr/lib/squid/ldap_auth -ZZ -b >>> "ou=peoples,dc=mydomain,dc=com" ldap >>> >>> external_acl_type ldap_group %LOGIN /usr/lib/squid/squid_ldap_group -ZZ >>> -b "cn=netgroup,ou=groups,dc=mydomain,dc=com" -f >> It seems "cn=netgroup,ou=groups,dc=mydomain,dc=com" is wrong (this means that you have somewehere a "cn=doe,cn=netgroup,ou=groups,dc=mydomain,dc=com"). >>> "(&(objectclass=posixGroup)(cn=%a)(member=%v))" -B >>> "ou=peoples,dc=mydomain,dc=com" -F uid="%s" -w pass >>> serveraddress:serverport >>> >>> acl password proxy_auth REQUIRED >>> acl password_group external ldap_group internet >>> >>> Regards. Ghislain Garçon.