On 30/06/2015 9:30 p.m., masterx81 wrote: > Hi... > I'm trying to limit download bandwidth to some user groups based on AD using > external helpers, using the following command: > delay_pools 1 > delay_class 1 1 > delay_access 1 allow InternetLimitato InternetLibero InternetCentralino > !CONNECT > delay_parameters 1 500000/500000 > > "InternetLimitato InternetLibero InternetCentralino" are some AD groups, and > i want to add theyr traffic to the 1 delay pool, but with this configuration > not work. Else, if i apply the delay pool to "all" all works as expected. > > It's like this by design? Yes. delay_access is a "fast"/synchroniuous category control. <http://wiki.squid-cache.org/SquidFaq/SquidAcl#Fast_and_Slow_ACLs> The way to use group checks in the fast category access controls is with helper annotations and the "note" type ACL. NP: The Negotiate/Kerberos helper is the only one currently presenting group=X annotations. Thats the *auth* helper, not the external ACL group check. You may need to write a wrapper script around your chosen group helper to add the kv-pair. Amos _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
