Search squid archive

Re: Re: Re: Re: Re: Re: Re: squid_ldap_group against nested groups/Ous

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi.

On 01.08.2012 23:02, Markus Moeller wrote:
Hi Eugene,

Are all 12 groups for the same control ? If so you can use -g Group1:Group2:Group3:.....

No, I map them to different acls, and then those acls are used to restrict various levels of the access.

Like:

(it was)
external_acl_type ldap_group [...]

acl ad-internet-users external ldap_group "/usr/local/etc/squid/ad-internet-users.acl" acl ad-privileged external ldap_group "/usr/local/etc/squid/ad-privileged-users.acl"
acl ad-icq-only external ldap_group "/usr/local/etc/squid/ad-icq-only.acl"
acl ad-no-icq external ldap_group "/usr/local/etc/squid/ad-no-icq.acl"

http_access allow ad-internet-users something
http_access deny ad-internet-users something1
http_access allow ad-privileges something1

and so on.

Eugene.


[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux