<html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><div>of course I did read the documentation. Otherwise I would not have asked here. I would not ask for your time if the solution would be available for myself.</div>
<div>I am asking right here -after some weeks- because I do not know what is finally wrong.</div>
<div>I can't even figure out what the error means. Even google does not help me here so I am asking this community..</div>
<div>
<div>
<div name="quote" style="margin:10px 5px 5px 10px; padding: 10px 0 10px 10px; border-left:2px solid #C3D9E5; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div style="margin:0 0 10px 0;"><b>Gesendet:</b> Montag, 22. Februar 2021 um 10:24 Uhr<br/>
<b>Von:</b> "Amos Jeffries" <squid3@treenet.co.nz><br/>
<b>An:</b> squid-users@lists.squid-cache.org<br/>
<b>Betreff:</b> Re: [squid-users] Squid doesn't notice AD group changes</div>
<div name="quoted-content">On 22/02/21 9:26 pm, heimarbeit123.99 wrote:<br/>
> So I finally tried it on my Squid Proxy.<br/>
> I edited the squid like this:<br/>
> external_acl_type ad_group_member_check ttl=120 %LOGIN<br/>
> /usr/lib/squid/ext_ldap_group_acl -d -R -K -S -b "dc=domain,dc=com" -D<br/>
> ProxyUser@domain.com -W /etc/squid/ldappass.txt -f<br/>
> "(&(sAMAccountName=%u)(memberOf=CN=%g,OU=Groups,DC=domain,DC=com))" -h<br/>
> my.domain.com<br/>
<br/>
<br/>
<br/>
> But now I have the problem, that in the squid cache.log is written:<br/>
> ext_ldap_group_acl: WARNING: LDAP search error 'Referral'<br/>
> So it seems like LDAP can not check the groups but I have no clue why..<br/>
> Can someone help?<br/>
<br/>
Please read the documentation for that helper. Specifically pay<br/>
attention to what all those command line options do.<br/>
<<a href="http://www.squid-cache.org/Versions/v4/manuals/ext_ldap_group_acl.html" target="_blank">http://www.squid-cache.org/Versions/v4/manuals/ext_ldap_group_acl.html</a>><br/>
<br/>
<br/>
Amos<br/>
_______________________________________________<br/>
squid-users mailing list<br/>
squid-users@lists.squid-cache.org<br/>
<a href="http://lists.squid-cache.org/listinfo/squid-users" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a></div>
</div>
</div>
</div></div></body></html>