Hi, I finally made it work. It does not matter if helper is started under my account or under squid account, it works both ways.
Here's full command: ./ext_ldap_group_acl -R \ -b "DC=mimar,DC=rs" \ -D "CN=LDAP Binder,OU=00-System-00,OU=Users,OU=BG,OU=RS,DC=mimar,DC=rs" \ -w "mypass" \ -f "(&(objectclass=person)(sAMAccountName=%v)(memberof=CN=%a,OU=Web Services,OU=Groups,OU=BG,OU=RS,DC=mimar,DC=rs))" \ -h dc1.mimar.rs So, if i have user 'pacija', who is a member of security group 'squid_noaccess' which resides in 'Web Services OU'... mimar.rs -> RS -> BG -> Groups -> Web Services - squid_noaccess ...typing in: pacija squid_noaccess ...returns OK. Regards, -- Marko Cupać https://www.mimar.rs/ _______________________________________________ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users