im having troubles assigning ACL to ldap groups... i have this: external_acl_type gruposLDAP %LOGIN /usr/lib64/squid/squid_ldap_group -P -R -b OU=USUARIOS,DC=tierradelfuego,DC=gov,DC=ar -D proxyAuth -w password -f (&(objectClass=person)(sAMAccountName=%u)(memberOf=CN=%g,OU=GRUPOS,DC=tierradelfuego,DC=gov,DC=ar)) -h 10.1.9.33 -s sub -v 3 -d acl ProxyA external gruposLDAP _GP_US_PROXY_A acl ProxyB external gruposLDAP _GP_US_PROXY_B acl ad_users proxy_auth REQUIRED http_access deny !ad_users http_access deny ProxyB http_access allow ProxyA http_access allow all but no matters if a user is in ProxyA or ProxyB ... it cant navigate through this proxy server. Any ideas?