[prev in list] [next in list] [prev in thread] [next in thread] 

List:       squid-users
Subject:    Re: [squid-users] please help me test ext_ldap_group_acl from command line
From:       Marko =?UTF-8?B?Q3VwYcSH?= <marko.cupac () mimar ! rs>
Date:       2015-07-29 15:12:38
Message-ID: 20150729171238.00c447ea () efreet
[Download RAW message or body]

Hi,

I finally made it work. It does not matter if helper is started under
my account or under squid account, it works both ways.

Here's full command:
./ext_ldap_group_acl -R \
	-b "DC=mimar,DC=rs" \
	-D "CN=LDAP Binder,OU=00-System-00,OU=Users,OU=BG,OU=RS,DC=mimar,DC=rs" \
	-w "mypass" \
	-f "(&(objectclass=person)(sAMAccountName=%v)(memberof=CN=%a,OU=Web \
                Services,OU=Groups,OU=BG,OU=RS,DC=mimar,DC=rs))" \
	-h dc1.mimar.rs

So, if i have user 'pacija', who is a member of security group
'squid_noaccess' which resides in 'Web Services OU'...

mimar.rs
 -> RS
  -> BG
   -> Groups
    -> Web Services
       - squid_noaccess

...typing in:
pacija squid_noaccess

...returns OK.

Regards,
-- 
Marko Cupać
https://www.mimar.rs/
_______________________________________________
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users


[prev in list] [next in list] [prev in thread] [next in thread]