Hi.

On 01.08.2012 23:02, Markus Moeller wrote:
Hi Eugene,

Are all 12 groups for the same control ? If so you can use -g Group1:Group2:Group3:.....

No, I map them to different acls, and then those acls are used to restrict various levels of the access.

Like:

(it was)
external_acl_type ldap_group [...]

acl ad-internet-users external ldap_group "/usr/local/etc/squid/ad-internet-users.acl" acl ad-privileged external ldap_group "/usr/local/etc/squid/ad-privileged-users.acl"
acl ad-icq-only external ldap_group "/usr/local/etc/squid/ad-icq-only.acl"
acl ad-no-icq external ldap_group "/usr/local/etc/squid/ad-no-icq.acl"

http_access allow ad-internet-users something
http_access deny ad-internet-users something1
http_access allow ad-privileges something1

and so on.

Eugene.

Reply via email to