Hi Henrik, Since our last conversation we have spent some time learning a bit more about how the squid_ldap_group authentication works. Now realize that the ldap group membership test does strip the domain as you said it does. My problem appears to be with the squid_ldap_auth as it does not appear to be able to strip the domain and I am trying to use both auth and group features together. I am still unsure as to whether I am using these modules in the correct way, if I am then I would need the auth module to strip the domain as well. I would appreciate any comments you would have about the way I am trying to do things. Thanks, Clayton York Barone, Budge & Dominick 011-5328577 -----Original Message----- From: Clayton York Sent: Thursday, July 16, 2009 10:26 AM To: 'Henrik Nordstrom' Cc: Squid Users Subject: RE: Help Please : NT Domain name stripping in squid_ldap_group Hi Henrik, We are running squid-2.6.STABLE21-3.el5. Clayton York -----Original Message----- From: Henrik Nordstrom [mailto:henrik@xxxxxxxxxxxxxxxxxxx] Sent: Thursday, July 16, 2009 8:58 AM To: Clayton York Cc: Squid Users Subject: RE: Help Please : NT Domain name stripping in squid_ldap_group ons 2009-07-15 klockan 11:07 +0200 skrev Clayton York: > Thanks for the feedback I have added values %u and %g as per below and authentication is working when using the username and password but still fails when using domain\username and password, ie still does not seem to be stripping the domain name when I look at the access log file even though the -S option is added. Which Squid version is your squid_ldap_group from? Note: access.log always shows the full username. The removal of the domain part is done by squid_ldap_group when checking the group membership only. Regards Henrik
