ext_wbinfo_group_acl(1) [centos man page]
EXT_WBINFO_GROUP_ACL.PL.IN(1) User Contributed Perl Documentation EXT_WBINFO_GROUP_ACL.PL.IN(1) NAME
ext_wbinfo_group_acl - external ACL helper for Squid to verify NT Domain group membership using wbinfo. SYNOPSIS
ext_wbinfo_group_acl [-dh] DESCRIPTION
ext_wbinfo_group_acl is an installed executable script. It uses wbinfo from Samba to lookup group membership of logged in users. This helper must be used in with an authentication scheme (typically Basic or NTLM) based on Windows NT/2000 domain users. It reads from the standard input the domain username and a list of groups and tries to match each against the groups membership of the specified username. OPTIONS
-d Write debug info to stderr. -h Print the help. -K downgrade Kerberos credentials to NTLM. CONFIGURATION
external_acl_type wbinfo_check %LOGIN /path/to/ext_wbinfo_group_acl acl allowed_group external wbinfo_check Group1 Group2 http_access allow allowed_group If the local perl interpreter is in a unusual location it may need to be added: external_acl_type wbinfo_check %LOGIN /path/to/perl /path/to/ext_wbinfo_group_acl AUTHOR
This program was written by Jerry Murdock <jmurdock@itraktech.com> This manual was written by Amos Jeffries <amosjeffries@squid-cache.org> COPYRIGHT
This program is put in the public domain by Jerry Murdock <jmurdock@itraktech.com>. It is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. QUESTIONS
Questions on the usage of this program can be sent to the Squid Users mailing list <squid-users@squid-cache.org> REPORTING BUGS
Bug reports need to be made in English. See http://wiki.squid-cache.org/SquidFaq/BugReporting for details of what you need to include with your bug report. Report bugs or bug fixes using http://bugs.squid-cache.org/ Report serious security bugs to Squid Bugs <squid-bugs@squid-cache.org> Report ideas for new improvements to the Squid Developers mailing list <squid-dev@squid-cache.org> SEE ALSO
The Squid FAQ wiki http://wiki.squid-cache.org/SquidFaq The Squid Configuration Manual http://www.squid-cache.org/Doc/config/ perl v5.10.1 2013-07-13 EXT_WBINFO_GROUP_ACL.PL.IN(1)
Check Out this Related Man Page
ext_unix_group_acl(8) System Manager's Manual ext_unix_group_acl(8) NAME
ext_unix_group_acl - Squid UNIX Group ACL helper SYNOPSIS
ext_unix_group_acl [-d] [-g group ] [-g group ...] [-p] [-s] DESCRIPTION
ext_unix_group_acl allows Squid to base access controls on users memberships in UNIX groups. OPTIONS
-d Write debug info to stderr. -g group Specifies a group name to match. -p Also match the users primary group from /etc/passwd -s Strip NT domain name component from user names (/ or separated) CONFIGURATION
This squid.conf example defines two Squid acls. usergroup1 matches users in group1 , and usergroup2 matches users in group2 or group3 external_acl_type unix_group %LOGIN /usr/local/squid/libexec/ext_unix_group_acl -p acl usergroup1 external unix_group group1 acl usergroup2 external unix_group group2 group3 By default up to 11 groups can be matched in one acl (including commandline specified groups). This limit is defined by MAX_GROUPS in the source code. KNOWN ISSUES
Does not understand GID aliased groups sometimes used to work around groups size limitations. If you are using GID aliased groups then you must specify each alias by name. AUTHOR
This program was written by Rodrigo Campos <rodrigo@geekbunker.org> This manual was written by Henrik Nordstrom <hno@squid-cache.org> COPYRIGHT
This program and documentation is copyright to the authors named above. Distributed under the GNU General Public License (GNU GPL) version 2 or later (GPLv2+). QUESTIONS
Questions on the usage of this program can be sent to the Squid Users mailing list <squid-users@squid-cache.org> REPORTING BUGS
Bug reports need to be made in English. See http://wiki.squid-cache.org/SquidFaq/BugReporting for details of what you need to include with your bug report. Report bugs or bug fixes using http://bugs.squid-cache.org/ Report serious security bugs to Squid Bugs <squid-bugs@squid-cache.org> Report ideas for new improvements to the Squid Developers mailing list <squid-dev@squid-cache.org> Additionally bugs or bug-fixes can be reported to Rodrigo Campos <rodrigo@geekbunker.org> SEE ALSO
squid(8), group(5), passwd(5), GPL(7), The Squid FAQ wiki http://wiki.squid-cache.org/SquidFaq The Squid Configuration Manual http://www.squid-cache.org/Doc/config/ 12 August 2002 ext_unix_group_acl(8)