Daniel Barron wrote: > > I would recommend matching the member attribute of group objects. > > I agree, however that seems more difficult as squid only passes the user name > in the form 'daniel' where as the filter needs it in > 'cn=daniel,ou=test,dc=jadeb,dc=com' so I opted for (b).
This is why the updated helper has options to look up the user DN in the same manner as squid_ldap_auth does. See the -F, -B and -u arguments. These corresponds directly to the -f, -b and -u arguments of squid_ldap_auth. Regards Henrik
