Ok. I found that in squid 3.x the ldap helper is change from previous release ; instead of squid_ldap_group there’s the helper basic_ldap_auth (located in /usr/lib64/squid on Fedora 18 x64). ( http://www.squid-cache.org/Versions/v3/3.2/RELEASENOTES.html#ss4.2 ) After some problem with firewall configuration and some test with basic_ldap_auth inserting the line below in squid.conf associated with ACL ldap-auth can gain internet access only to active directory user. auth_param basic program /usr/lib64/squid/basic_ldap_auth -R -b "dc=domain,dc=local" -D "CN=ADUser,OU=OU-ADUser,dc=domain,dc=local" -w pwd-ADUser -f sAMAccountName=%s -h IP-Ldap-Server:389 . . . acl ldap-auth proxy_auth REQUIRED http_access allow ldap-auth Now I must find how can I do with user belong to a single group present in active directory…previous version external acl helpers was squid_ldap_group. In squid 3.3.2 seems to be ext_ldap_group_acl …but I can’t find it !!! …and the story goes on … -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Issue-with-Squid-ldap-group-Windows-tp4663221p4663395.html Sent from the Squid - Users mailing list archive at Nabble.com.