I am trying to supplement squid_kerb_auth with squid_ldap_group, from the cli, my external_acl_type string works fine, username and group pairs return expected results. Disregarding the ldap group check, the following authenticates correctly: acl auth proxy_auth REQUIRED http_access deny !auth http_access allow auth localnet http_access deny all But when I modify it as follows it breaks: external_acl_type ldapgroup %LOGIN /usr/lib64/squid/squid_ldap_group <...> acl auth proxy_auth REQUIRED acl acl_ldap external ldapgroup adGroup http_access deny !auth http_access allow auth acl_ldap localnet http_access deny all Anyone see what I have done wrong? Thanks, jlc
