squid_unix_group(8) System Manager's Manual squid_unix_group(8)NAME
squid_unix_group - Squid UNIX Group external_acl helper
SYNOPSIS
squid_unix_group [-g groupname] [-g groupname...] [-p] [-s]
DESCRIPTION
This helper allows Squid to base access controls on users memberships in UNIX groups.
-g groupname
Specifies a group name to match.
-p Also match the users primary group from /etc/passwd
-s Strip NT domain name component from user names (/ or separated)
EXAMPLES
This squid.conf example defines two Squid acls. usergroup1 matches users in group1, and usergroup2 matches users in group2 or group3
external_acl_type unix_group %LOGIN /usr/local/squid/libexec/squid_unix_group -p
acl usergroup1 external unix_group group1
acl usergroup2 external unix_group group2 group3
NOTES
By default up to 11 groups can be matched in one acl (including commandline specified groups). This limit is defined by MAX_GROUPS in the
source code.
AUTHOR
This manual page was written by Henrik Nordstrom <hno@squid-cache.org>
squid_unix_group is written by Rodrigo Campos <rodrigo@geekbunker.org>
KNOWN ISSUES
Does not understand gid aliased groups sometimes used to work around groups size limitations. If you are using gid aliased groups then you
must specify each alias by name.
QUESTIONS
Any questions on usage can be sent to Squid Users <squid-users@squid-cache.org>
REPORTING BUGS
Report bugs or bug-fixes to Rodrigo Campos <rodrigo@geekbunker.org> or Squid Developers <squid-dev@squid-cache.org>
SEE ALSO group(5),passwd(5)Squid UNIX Group helper 12 August 2002 squid_unix_group(8)
Check Out this Related Man Page
ext_file_userip_acl(8) System Manager's Manual ext_file_userip_acl(8)NAME
ext_file_userip_acl - Restrict users to certain IP addresses, using a text file backend.
Version 1.0
SYNOPSIS
ext_file_userip_acl [-dh] [-f file name ]
DESCRIPTION
ext_file_userip_acl is an installed binary. An external helper for the Squid external acl scheme.
It works by reading a pair composed by an IP address and an username on STDIN and matching it against a configuration file.
OPTIONS -d Write debug info to stderr.
-f file Configuration file to load.
-h Display the binary help and command line syntax info using stderr.
CONFIGURATION
The squid.conf configuration for the external ACL should be:
external_acl_type type-name %SRC %LOGIN /path/to/ext_file_userip_acl -f /path/to/config.file
If the helper program finds a matching username/ip in the configuration file, it returns OK , otherwise it returns ERR .
The configuration file format is as follows:
ip_addr[/netmask] username|@group|ALL|NONE
Where ip_addr is a dotted quad format IP address, the netmask must be in dotted quad format too.
When the second parameter is prefixed with an @ , the program will lookup the /etc/group file entry for the specified username.
There are other two directives, ALL and NONE , which mean
AUTHOR
This program was written by Rodrigo Campos <rodrigo@geekbunker.org>
This manual was written by Rodrigo Campos <rodrigo@geekbunker.org> Amos Jeffries <amosjeffries@squid-cache.org>
COPYRIGHT
This program and documentation is copyright to the authors named above.
Distributed under the GNU General Public License (GNU GPL) version 2 or later (GPLv2+).
QUESTIONS
Questions on the usage of this program can be sent to the Squid Users mailing list <squid-users@squid-cache.org>
REPORTING BUGS
Bug reports need to be made in English. See http://wiki.squid-cache.org/SquidFaq/BugReporting for details of what you need to include with
your bug report.
Report bugs or bug fixes using http://bugs.squid-cache.org/
Report serious security bugs to Squid Bugs <squid-bugs@squid-cache.org>
Report ideas for new improvements to the Squid Developers mailing list <squid-dev@squid-cache.org>
SEE ALSO squid(8), GPL(7),
The Squid FAQ wiki http://wiki.squid-cache.org/SquidFaq
The Squid Configuration Manual http://www.squid-cache.org/Doc/config/
ext_file_userip_acl(8)