> external_acl_type AD_Group %LOGIN > /usr/lib/squid/squid_ldap_auth -b > cn=users,dc=dom1,dc=info,dc=co -D > cn=user1,cn=users,dc=dom1,dc=info,dc=co > -h 10.10.1.25 -w pass1 -S -f > "(&(cn=%u)(memberOf=cn=internet,cn=users,dc=dom1,dc=info,dc=co))"
it seems that your external_acl definition is wrong, isn't it? You should use squid_ldap_group instead of squid_ldap_auth here. May be this is why you hace a different behavior when you have a good or a wrong authentication
