Browsing Afrikaans translation

165.

B<ext_ldap_group_acl> allows Squid to connect to a LDAP directory to authorize users via LDAP groups. LDAP options are specified as parameters on the command line, while the username(s) and group(s) to be checked against the LDAP directory are specified on subsequent lines of input to the helper, one username/group pair per line separated by a space.

166.

As expected by the B<external_acl_type> construct of Squid, after specifying a username and group followed by a new line, this helper will produce either B<OK> or B<ERR> on the following line to show if the user is a member of the specified group.

167.

The program operates by searching with a search filter based on the users user name and requested group, and if a match is found it is determined that the user belongs to the group.

168.

When to dereference aliases. Defaults to 'never'

169.

B<never> dereference aliases (default), B<always> dereference aliases, only during a B<search> or only to B<find> the base object

173.

Debug mode where each step taken will get reported in detail. Useful for understanding what goes wrong if the result is not what was expected.

174.

The DN and password to bind as while performing searches. Required if the LDAP directory does not allow anonymous searches.

175.

As the password needs to be printed in plain text in your Squid configuration and will be sent on the command line to the helper it is strongly recommended to use a account with minimal associated privileges. This to limit the damage in case someone could get hold of a copy of your Squid configuration file or extracts the password used from a process listing.

176.

The DN and the name of a file containing the password to bind as while performing searches.

177.

Less insecure version of the former parameter pair with two advantages: The password does not occur in the process listing, and the password is not being compromised if someone gets the squid configuration file without getting the secretfile.