NAME

       ext_wbinfo_group_acl - external ACL helper for Squid to verify NT Domain group membership using wbinfo.

SYNOPSIS

       ext_wbinfo_group_acl [-dh]

DESCRIPTION

       ext_wbinfo_group_acl is an installed executable script.  It uses wbinfo from Samba to lookup group
       membership of logged in users.

       This helper must be used in with an authentication scheme (typically Basic or NTLM) based on Windows
       NT/2000 domain users.

       It reads from the standard input the domain username and a list of groups and tries to match each against
       the groups membership of the specified username.

OPTIONS

               -d Write debug info to stderr.
               -h Print the help.
               -K downgrade Kerberos credentials to NTLM.

CONFIGURATION

               external_acl_type wbinfo_check %LOGIN /path/to/ext_wbinfo_group_acl
               acl allowed_group external wbinfo_check Group1 Group2
               http_access allow allowed_group

       If the local perl interpreter is in a unusual location it may need to be added:

               external_acl_type wbinfo_check %LOGIN /path/to/perl /path/to/ext_wbinfo_group_acl

AUTHOR

       This program was written by Jerry Murdock <jmurdock@itraktech.com>

       This manual was written by Amos Jeffries <amosjeffries@squid-cache.org>

COPYRIGHT

       This program is put in the public domain by Jerry Murdock <jmurdock@itraktech.com>. It is distributed in
       the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of
       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

QUESTIONS

       Questions on the usage of this program can be sent to the Squid Users mailing list
       <squid-users@squid-cache.org>

REPORTING BUGS

       Bug reports need to be made in English.  See http://wiki.squid-cache.org/SquidFaq/BugReporting for
       details of what you need to include with your bug report.

       Report bugs or bug fixes using http://bugs.squid-cache.org/

       Report serious security bugs to Squid Bugs <squid-bugs@squid-cache.org>

       Report ideas for new improvements to the Squid Developers mailing list <squid-dev@squid-cache.org>

SEE ALSO

       The Squid FAQ wiki http://wiki.squid-cache.org/SquidFaq

       The Squid Configuration Manual http://www.squid-cache.org/Doc/config/

perl v5.10.1                                       2013-07-13                      EXT_WBINFO_GROUP_ACL.PL.IN(1)