Re: [squid-users] Squid and AD Group (ext_ldap_group_acl)

2016-02-08 Thread Amos Jeffries
On 8/02/2016 11:06 p.m., Olivier CALVANO wrote: > Hi Amos, > > Thanks for your help, > > buit if i don't put the line http_access deny !Group_Allowed, user not in > the group connect connect > and access to all internet > > my config: > > > > ##

Re: [squid-users] Squid and AD Group (ext_ldap_group_acl)

2016-02-08 Thread Olivier CALVANO
hum in logs: ext_ldap_group_acl.cc(587): pid=12990 :Connected OK ext_ldap_group_acl.cc(726): pid=12990 :group filter '(&(objectclass=person)(sAMAccountName=0)(memberof=CN=ocalvano,OU=Admin,OU=vpn,DC=mydomain,DC=fr))', searchbase 'DC=mydomain,DC=fr' ext_ldap_group_acl.cc(726): pid=12990 :group fil

Re: [squid-users] Squid and AD Group (ext_ldap_group_acl)

2016-02-08 Thread Olivier CALVANO
Hi Amos, Thanks for your help, buit if i don't put the line http_access deny !Group_Allowed, user not in the group connect connect and access to all internet my config: ## # ACL pour les Droits d'accès d'apres l'Active Direct

Re: [squid-users] Squid and AD Group (ext_ldap_group_acl)

2016-02-07 Thread Amos Jeffries
On 7/02/2016 9:39 p.m., Olivier CALVANO wrote: > Hi > > i have a problems with AD Group, i use this config: > > > external_acl_type AD_Group children-startup=5 children-max=100 > concurrency=80 ttl=1800 negative_ttl=900 %LOGIN > /usr/lib64/squid/ext_ldap_group_acl -d -S -K -R -b DC=mydomain,DC=f

[squid-users] Squid and AD Group (ext_ldap_group_acl)

2016-02-07 Thread Olivier CALVANO
Hi i have a problems with AD Group, i use this config: external_acl_type AD_Group children-startup=5 children-max=100 concurrency=80 ttl=1800 negative_ttl=900 %LOGIN /usr/lib64/squid/ext_ldap_group_acl -d -S -K -R -b DC=mydomain,DC=fr -D cn=UserAdmin,ou=vpn,dc=mydomain,dc=fr -w "Pa77word" -f (&(