On 16/03/2017 11:12 p.m., Mike Surcouf wrote: > @Amos > > Thanks for this > > so to recap if I currently have > > auth_param negotiate program /usr/lib64/squid/negotiate_kerberos_auth > auth_param negotiate children 20 > auth_param negotiate keep_alive on > > external_acl_type InternetAccessBanking %LOGIN > /usr/lib64/squid/ext_kerberos_ldap_group_acl -u > ldaps://aesdc02.surcouf.local:636 -b cn=SSSUsers,dc=surcouf,dc=local -g > InternetAccessBanking > > I could replace it by > > auth_param negotiate program /usr/lib64/squid/negotiate_kerberos_auth > auth_param negotiate children 20 > auth_param negotiate keep_alive > > acl InternetAccessBanking note group > S-1-5-21-123456789-123456789-123456789-1234 > > > Note where S-1-5-21-123456789-123456789-123456789-1234 is the SID for the > group InternetAccessBanking > >
Yes. Amos _______________________________________________ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
