To all, thanks for the direction I seem to be running into one problem. We have multiple companies in our domain. They are all in different OU's What I'm trying to do is create a different log file for each OU. So say if user from OU Domain Users authenticates, I want logging of this user to go to /var/log/squid/Domain_Users. Looks like creating an access_log for that acl should work. But how would squid log each different OU? So I was attempting to use wbinfo_group.pl to solve this problem. I might be useing this wrong, if I am, please let me know. So i set up squid to also use wbinfo_group.pl external_acl_type nt_group ttl=0 children=5 %LOGIN /usr/lib64/squid/wbinfo_group.pl -d Then I have an acl acl 40_auth external nt_group hoffman #ntgroup group in AD acl adm_auth external nt_group BUILTIN\Administrators #Admin group in AD Then the http_access http_access allow authuser 40_auth adm_auth Now looking at the debug for wbinfo_group.pl I was getting this error Got username ntgroup from squid User: -usernamel- Group: -ntgroup- SID: -S-1-5-21-1607859618-1323328405-3834754132-2829- GID: -10016- Sending ERR to squid But if I comment out #acl 40_auth external nt_group ntgroup #ntgroup group in AD I get Got username BUILTIN%5cAdministrators from squid User: -username- Group: -BUILTIN\Administrators- SID: -S-1-5-32-544- GID: -10000- Sending OK to squid I thought squid was populating the Group name. Looks like it's grabbing it from the squid.conf file. Anyone have any thoughts? On Wed, Oct 15, 2008 at 12:56 PM, Chris Robertson <crobertson@xxxxxxx> wrote: > Kevin Blackwell wrote: >> >> Hi, >> >> We have implemented squid and sarg with ntlm_auth. everything is >> working fine. I have been requested to do something a bit different >> though. >> >> Where I work at we have different divisions within the company. What I >> would like to do is create a different access log file depending on >> what OU container your in on Windows. >> >> So >> >> squid log files. >> >> Comp A /var/log/squid/compA_access.log >> Comp B /var/log/squid.compB_access.log >> >> etc... >> >> Anyone know if that is possible? >> > > http://www.squid-cache.org/Versions/v3/3.0/cfgman/access_log.html > > Seems like it should be. > > Chris > >
