[squid-users] Problem with ext_ldap_group_acl

[Marcio Demetrio Bacci]

I'm trying authenticate Squid (3.4.8) in the Samba 4.

The first block is working perfectly.

auth_param basic program /usr/lib/squid3/basic_ldap_auth -R -b \
DC=empresa,DC=com,DC=br -D CN=proxy,CN=Users,DC=empresa,DC=com,DC=br \
-w 12345 -h 192.168.0.25 -p 389 -s sub -v 3 -f "sAMAccountName=%s"
auth_param basic children 50
auth_param basic realm Proxy Server Squid
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off


But when I try to use external_acl_type,

external_acl_type ad_group %LOGIN /usr/lib/squid3/ext_ldap_group_acl -v 3
-R -b \
DC=empresa,DC=com,DC=br -f
“(&(cn=%v)(memberOf=cn=%a,DC=empresa,DC=com,DC=br ))” -D \
CN=proxy,CN=Users,DC=empresa,DC=com,DC=br -w 12345 -P 192.168.0.25:389


I have the following problem:

*ext_ldap_group_acl: WARNING: LDAP search error 'Bad search filter'*

Could anybody help me?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20151209/6b31441a/attachment-0001.html>