carta
squid_unix_group(8)

squid_unix_group8

Squid unix group external_acl helper

Usage

squid_unix_group [-g groupname] [-g groupname ...] [-p] [-s]

Overview

This helper allows Squid to base access controls on users memberships in UNIX groups.

-g groupname

Specifies a group name to match.

-p

Also match the users primary group from /etc/passwd

-s

Strip NT domain name component from user names (/ or \ separated)

Examples

This squid.conf example defines two Squid acls. usergroup1 matches users in group1, and usergroup2 matches users in group2 or group3

external_acl_type unix_group %LOGIN /usr/local/squid/libexec/squid_unix_group -p

acl usergroup1 external unix_group group1

acl usergroup2 external unix_group group2 group3

Notes

By default up to 11 groups can be matched in one acl (including commandline specified groups). This limit is defined by MAX_GROUPS in the source code.

Known issues

Does not understand gid aliased groups sometimes used to work around groups size limitations. If you are using gid aliased groups then you must specify each alias by name.

Questions

Any questions on usage can be sent to Squid Users <[email protected]>

History

  • Debian 7 (Wheezy) to Debian 4.0 (Etch): the text shown here
  • Debian 3.1 (Sarge)

-s since Debian 4.0 (Etch).

Author

This manual page was written by Henrik Nordstrom <[email protected]>

squid_unix_group is written by Rodrigo Campos <[email protected]>

Reporting bugs

Report bugs or bug-fixes to Rodrigo Campos <[email protected]> or Squid Developers <[email protected]>

From squid 2.7.STABLE9-4.1+deb7u1 in Debian 7 (Wheezy). Parsed by carta from the page's man source.