Re: [squid-users] squid_ldap_group - url access restrictions based on group

Thanks Thien. :-)
grol

----- Original Message -----
From: "Thien Vu" <thien.vu@gmail.com>
To: "D & E Radel" <radel@inet.net.nz>
Cc: "Henrik Nordstrom" <hno@squid-cache.org>; <squid-users@squid-cache.org>
Sent: Tuesday, April 19, 2005 12:01 PM
Subject: Re: [squid-users] squid_ldap_group - url access restrictions based
on group

# Define external authentication acl
external_acl_type ldap_group %LOGIN /usr/lib/squid/squid_ldap_group -B
ou=people,dc=yourcompany,ou=com -b ou=Group,dc=yourcompany,dc=com -f
(&(cn=%g)(memberUid=%u))" -h ldap.yourcompany.com

# Define the group
acl somegroup external ldap_group group_you_need_to_be_member_of

# Some URL
acl someurl url_regex ^http://foo.bar.baz/bam$

# deny the group access to the url
http_access deny somegroup someurl

Thien
Received on Mon Apr 18 2005 - 18:03:12 MDT