Search squid archive

External ACL and Delay Pools

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello.

It seems delay pools don't work in my configuration. I use
squid_ldap_auth to authenticate users in Active Directory:

auth_param basic program /usr/local/libexec/squid/squid_ldap_auth \
  -R -b "DC=test,DC=com" -D "unix@xxxxxxxx" -w xxx -f "sAMAccountName=%s" 1.1.1.1

and

external_acl_type active_directory_group ttl=60 %LOGIN /usr/local/libexec/squid/squid_ldap_group \
  -R -b "DC=test,DC=com" -D "unix@xxxxxxxx" -w xxx \
  -f "(&(sAMAccountName=%u)(memberOf=CN=%g,OU=Proxy,OU=Internet Services,DC=test,DC=com))" 1.1.1.1


These are external ACLs for delay pools in config file:

acl ad_speed_128k external active_directory_group speed_128k
acl ad_speed_256k external active_directory_group speed_256k
acl ad_speed_512k external active_directory_group speed_512k


And to use different outgoing channels:

acl ad_channel_1 external active_directory_group channel_1
acl ad_channel_2 external active_directory_group channel_2
acl ad_channel_3 external active_directory_group channel_3


http_access allow ad_channel_1
http_access allow ad_channel_2
http_access allow ad_channel_3


I've configured Squid to use different outgoing channel for different
groups:

tcp_outgoing_address 192.168.252.5 ad_channel_2
tcp_outgoing_address 192.168.252.9 ad_channel_3


And limit speed for other groups:

delay_pools 3

delay_class 1 2
delay_class 2 2
delay_class 3 2

delay_access 1 allow ad_speed_128k
delay_access 1 deny all
delay_access 2 allow ad_speed_256k
delay_access 2 deny all
delay_access 3 allow ad_speed_512k
delay_access 3 deny all

delay_parameters 1 128000/128000 16000/16000
delay_parameters 2 256000/256000 32000/32000
delay_parameters 3 512000/512000 64000/64000


And when I add some user to speed_128k and channel_2 AD groups, he
uses 2nd channel as expected, but delay pools don't apply to it.


What is wrong?

If required I can past whole my config.


Thanks!

-- 
Sergey



[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux