Re: [squid-users] External users from Child AD domain unable to use local Squid proxy

Yes the Version we are using is 2.0 on Squid 2.7 stable 8 and and
clw.squid.full is a universal group

On Wed, Apr 21, 2010 at 09:19, Guido Serassio
<guido.serassio_at_acmeconsulting.it> wrote:
> Hi,
>
> Yes, but only if you are using the 2.x version of the helper and the CLW.Squid.Full group is group with the appropriate scope (Local, Global or Universal).
>
> Regards
>
> Guido Serassio
> Acme Consulting S.r.l.
> Microsoft Gold Certified Partner
> VMware Professional Partner
> Via Lucia Savarino, 1                10098 - Rivoli (TO) - ITALY
> Tel. : +39.011.9530135               Fax. : +39.011.9781115
> Email: guido.serassio_at_acmeconsulting.it
> WWW: http://www.acmeconsulting.it
>
>
>
>> -----Messaggio originale-----
>> Da: Milan [mailto:compguy030471_at_gmail.com]
>> Inviato: mercoledì 21 aprile 2010 14.52
>> A: Guido Serassio
>> Cc: squid-users_at_squid-cache.org
>> Oggetto: Re: [squid-users] External users from Child AD domain unable to
>> use local Squid proxy
>>
>> So instead of the way the line is now:
>>
>> acl InetAllow external AD_global_group CLW.Squid.Full
>>
>> The domain would be added to the group like below:
>>
>> acl InetAllow external AD_global_group NA\CLW.Squid.Full
>>
>>
>>
>> On Wed, Apr 21, 2010 at 06:19, Guido Serassio
>> <guido.serassio_at_acmeconsulting.it> wrote:
>> > Hi,
>> >
>> >> >> We have the below acl for users in the Ad global group
>> >> >>
>> >> >>
>> >> >> external_acl_type AD_global_group ttl=120 %LOGIN
>> >> >> c:/squid/libexec/mswin_check_ad_group.exe -G
>> >> >>
>> >> >> and another acl below that allows full access thru the squid proxy
>> >> >> using an ad group
>> >> >>
>> >> >> acl InetAllow external AD_global_group CLW.Squid.Full
>> >> >>
>> >> >>
>> >> >> any ideas????
>> >> >
>> >
>> > AGAIN:
>> >
>> > "When using mswin_check_ad_group.exe 1.x in global mode (-G options),
>> > the check is done always against a global group placed in the user's
>> > domain."
>> >
>> > So the question is: On which AD domain is defined the CLW.Squid.Full
>> > group ?
>> >
>> > Regards
>> >
>> > Guido
>> >
>> > Guido Serassio
>> > Acme Consulting S.r.l.
>> > Microsoft Gold Certified Partner
>> > VMware Professional Partner
>> > Via Lucia Savarino, 1                10098 - Rivoli (TO) - ITALY
>> > Tel. : +39.011.9530135               Fax. : +39.011.9781115
>> > Email: guido.serassio_at_acmeconsulting.it
>> > WWW: http://www.acmeconsulting.it
>> >
>> >
>> >
>> >
>
Received on Wed Apr 21 2010 - 13:34:17 MDT