I am having a very hard time getting the group external_acl to work with my active directory. Here is the command that I am using: external_acl_type InetGroup %LOGIN /usr/lib/squid/squid_ldap_group -R -b "dc=ADVANTAGE,dc=com" -D "cn=admin1,cn=USERS,dc=ADVANTAGE,dc=com" -w "**********" -f "(&(objectclass=person)(sAMAccountName=%v)(memberof=cn=%a,cn=Users,dc=AD VANTAGE,dc=com))" -h 192.168.1.13 My domain name is ADVANTAGE. The group (in active directory) is called InternetAccessGroup. Here is the ACL: acl InetAccess external InetGroup InternetAccessGroup Can someone please tell me if I am missing something? I got the squid_ldap_auth to work properly with active directory using a very similar configuration to the "group" above. Thanks, Zack