On 16/03/2017 11:12 p.m., Mike Surcouf wrote: > @Amos > > Thanks for this > > so to recap if I currently have > > auth_param negotiate program /usr/lib64/squid/negotiate_kerberos_auth > auth_param negotiate children 20 > auth_param negotiate keep_alive on > > external_acl_type InternetAccessBanking %LOGIN /usr/lib64/squid/ext_kerberos_ldap_group_acl -u ldaps://aesdc02.surcouf.local:636 -b cn=SSSUsers,dc=surcouf,dc=local -g InternetAccessBanking > > I could replace it by > > auth_param negotiate program /usr/lib64/squid/negotiate_kerberos_auth > auth_param negotiate children 20 > auth_param negotiate keep_alive > > acl InternetAccessBanking note group S-1-5-21-123456789-123456789-123456789-1234 > > > Note where S-1-5-21-123456789-123456789-123456789-1234 is the SID for the group InternetAccessBanking > > Yes. Amos _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
