SquidGuard and Active Directory groups
- by Massimo
I'm configuring a Linux proxy with Squid and SquidGuard to filter Internet traffic.
I know how to authenticate users against Active Directory in Squid, and then how to filter access for users using SquidGuard.
The question: how to use Active Directory groups in SquidGuard instead of plain user names?
My goal is to be able to configure rules like "members of this group can go anywhere" or "members of this group can only visit certain sites".
I know SquidGuard can't manage group membership directly, but it can do LDAP searches on its own; but the syntax to look up wheter a user is member of a given group seems to be quite cryptic, and I couldn't find any good documentation around.