ext_unix_group_acl8
Squid unix group acl helper
Usage
ext_unix_group_acl [-d]
[-g
group]
[-g
group ...]
[-p]
[-s]
Overview
ext_unix_group_acl allows Squid to base access controls on users memberships in UNIX groups.
Options
-
-d -
Write debug info to stderr. -g group Specifies a group name to match.
-
-p -
Also match the users primary group from
/etc/passwd
-
-s -
Strip NT domain name component from user names (/ or \ separated)
Configuration
This squid.conf example defines two Squid acls. usergroup1 matches users in group1 , and usergroup2 matches users in group2 or group3
external_acl_type unix_group %LOGIN /usr/local/squid/libexec/ext_unix_group_acl -p
acl usergroup1 external unix_group group1
acl usergroup2 external unix_group group2 group3
By default up to 11 groups can be matched in one acl (including commandline specified groups). This limit is defined by MAX_GROUPS in the source code.
Known issues
Does not understand GID aliased groups sometimes used to work around groups size limitations. If you are using GID aliased groups then you must specify each alias by name.
Questions
Questions on the usage of this program can be sent to the Squid Users mailing list <[email protected]>
History
- Arch Linux 2026-11-01: the text shown here
- Debian 13 (Trixie)
- Debian 12 (Bookworm)
- Debian 11 (Bullseye)
- Debian 10 (Buster)
- Debian 9 (Stretch)
- Debian 8 (Jessie)