<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Could some point me to the right direction?<div><br></div><div>I want to use ext_ldap_group_acl to allow certain users who are members of the ad group for example</div><div><br></div><div>YouTube - Allowed, Twitter - Allowed</div><div><br></div><div>Yes with the blank space and dash in the group name. For that reason I have create files /<span style="font-size: 12pt;">adgroups/youtube.txt and </span><span style="font-size: 12pt;">/adgroups/youtube.txt</span></div><div><span style="font-size: 12pt;"><br></span></div><div><span style="font-size: 12pt;">The content of the file is "</span><span style="font-size: 12pt;">YouTube - Allowed" </span></div><div><span style="font-size: 12pt;">and the other file "</span><span style="font-size: 12pt;">Twitter - Allowed" </span></div><div><span style="font-size: 12pt;"><br></span></div><div><span style="font-size: 12pt;">Within quotes.</span></div><div><span style="font-size: 12pt;"><br></span></div><div><span style="font-size: 12pt;">What am I doing wrong, the websites are blocked even if a user is in the allowed group. Please help.</span></div><div><span style="font-size: 12pt;"><br></span></div><div><span style="font-size: 12pt;">Extract from squid.conf below</span></div><div><br></div><div><div>external_acl_type ldapgroup ttl=3600 negative_ttl=3600 %LOGIN /lib/squid/ext_ldap_group_acl -R -b "dc=mydomain,dc=com" -f "(&(samaccountname=%v)</div><div><br></div><div>(memberof=cn=%a,dc=mydomain,dc=com))" -D squid@mydomain.com -w MyPassword -h mydomain.com</div><div> </div><div><br></div><div>acl allowtwitter external ldapgroup /adgroups/twitter.txt</div><div>acl allowyoutube external ldapgroup /adgroups/youtube.txt</div><div><br></div><div>acl twitter dstdomain twitter.com</div><div>acl youtube dstdomain www.youtube.com</div><div><br></div><div>http_access deny !allowtwitter twitter</div><div>http_access deny !allowyoutube youtube</div><div><br></div><div>http_access allow allowtwitter</div><div>http_access allow allowyoutube</div></div> </div></body>
</html>