Search squid archive

ext_ldap_group_acl - allowing websites based on ad group membership

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Could some point me to the right direction?

I want to use ext_ldap_group_acl to allow certain users who are members of the ad group for example

YouTube - Allowed, Twitter - Allowed

Yes with the blank space and dash in the group name. For that reason I have create files /adgroups/youtube.txt and /adgroups/youtube.txt

The content of the file is "YouTube - Allowed" 
and the other file "Twitter - Allowed" 

Within quotes.

What am I doing wrong, the websites are blocked even if a user is in the allowed group. Please help.

Extract from squid.conf below

external_acl_type ldapgroup ttl=3600 negative_ttl=3600 %LOGIN /lib/squid/ext_ldap_group_acl -R -b "dc=mydomain,dc=com" -f "(&(samaccountname=%v)

(memberof=cn=%a,dc=mydomain,dc=com))" -D squid@xxxxxxxxxxxx -w MyPassword -h mydomain.com
 

acl allowtwitter external ldapgroup /adgroups/twitter.txt
acl allowyoutube external ldapgroup /adgroups/youtube.txt

acl twitter dstdomain twitter.com
acl youtube dstdomain www.youtube.com

http_access deny !allowtwitter twitter
http_access deny !allowyoutube youtube

http_access allow allowtwitter
http_access allow allowyoutube
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users

[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux