<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<font face="Bitstream Charter">Hi, community.<br>
<br>
I need to understand why this rules are not working.<br>
<br>
My squid is working with AD authentication.<br>
</font><br>
<font face="Bitstream Charter"><font face="Bitstream Charter">I need
to allow the group *AD_informatico* to visit facebook only
during *maniana_ocio* and *tarde_ocio* and have full access to
the web. They are not working. *AD_informatico* can visit
facebook without problems. I tryed something like this:
*http_access deny !maniana_ocio facebook AD_informatico*, it
denies the access but the browser shows a pop-up to login when
someone visits facebook or other site that tries to connect to
facebook. So, what happens? <br>
<br>
</font></font><font face="Bitstream Charter"><font face="Bitstream
Charter"><font face="Bitstream Charter">Here is my squid.conf (a
part of it):</font><br>
<small><br>
</small></font><small>####################################################<br>
#*******************HELPERS para Active
Directory**************************#<br>
####################################################<br>
<br>
auth_param ntlm program /usr/bin/ntlm_auth
--helper-protocol=squid-2.5-ntlmssp --DOMAIN=DOMAIN<br>
auth_param ntlm children 30<br>
auth_param ntlm keep_alive off<br>
<br>
auth_param basic program /usr/bin/ntlm_auth
--helper-protocol=squid-2.5-basic<br>
auth_param basic children 5<br>
auth_param basic realm Servidor proxy-cache de la DPR<br>
auth_param basic credentialsttl 2 hours<br>
<br>
#---------------------------ACL Active
Directory------------------------#<br>
external_acl_type Grupos_AD ttl=10 children=10 %LOGIN
/usr/lib/squid3/ext_wbinfo_group_acl -d<br>
acl AD_informatico external Grupos_AD informatico<br>
<br>
#--------------------Horarios de acceso
--------------------------------#<br>
acl maniana_ocio time MTWHF 07:00-07:59<br>
acl tarde_ocio time MTWHF 13:00-13:59<br>
<br>
#-----------------------Listado de
paginas------------------------------#<br>
acl facebook_m url_regex -i "/etc/squid3/ACLs/pagFacebook"<br>
acl facebook_t url_regex -i "/etc/squid3/ACLs/pagFacebook"<br>
<br>
####################################################<br>
#*****************************Reglas***************************************#<br>
####################################################<br>
<br>
acl auth proxy_auth REQUIRED<br>
http_access deny !auth<br>
http_access deny after_hours all<br>
<br>
#-----------------------------Grupo
*informatico*----------------------------#<br>
http_access allow maniana_ocio facebook_m AD_informatico<br>
http_access allow tarde_ocio facebook_t </small></font><font
face="Bitstream Charter"><small><font face="Bitstream Charter">AD_informatico
<br>
h</font>ttp_access allow AD_informatico<br>
<br>
http_access deny all</small><br>
<br>
One more question: when a I move a user from a group to another in
Active Directory, how much time does squid need to know about that
change?<br>
<br>
Thanks and sorry for my english.<br>
</font>
</body>
</html>