>[оверквотинг удален]
>>> acl {
>>> my_users {
>>> pass !mail all
>>> default {
>>> pass none
>>> log /var/log/squid/default.log
>> Вот пример работающего запроса:
>> ldapusersearch ldap://dc-00.local:3268/DC=domain,DC=local?sAMAccountName?sub?(&(memberof=CN=oit,OU=InternetAccess,OU=OU_GROUPS,DC=DC-00,DC=LOCAL)(sAMAccountName=%s))
> не работает :((((((( не мог ли бы Вы скинуть мне работающую конфигурацию
> squid.conf и squidGuard.conf Полностью кидать squid.conf смысла не вижу, вот кусок касаемо squidGuard:
url_rewrite_program /usr/local/bin/squidGuard
url_rewrite_children 200
url_rewrite_concurrency 0
url_rewrite_host_header on
url_rewrite_access deny lan_servers
url_rewrite_access allow all
redirector_bypass on
Вот основные моменты из squidGuard.conf:
# CONFIG FILE FOR SQUIDGUARD
#
dbhome /var/db/squidGuard
logdir /usr/local/var/squid/logs/squidGuard
### --------------------- LDAP OPTIONS ----------------------------###
ldapbinddn CN=squidGuard,OU=ServiceAccounts,OU=OU_USERS,DC=domain,DC=local
ldapbindpass password
ldapcachetime 600
### ------------------------------------------------------------------
#
# TIME RULES:
# abbrev for weekdays:
# s = sun, m = mon, t =tue, w = wed, h = thu, f = fri, a = sat
time workhours {
weekly mtwhf 07:00 - 17:30
date *-*-01 07:00 - 17:30
}
time high-privilegy {
weekly smtwhfa 00:00-24:00
}
time low-privilegy {
weekly smtwhfa 07:00-20:00
}
#
# SOURCE ADDRESSES:
#
## LDAP SUPPORT ###
#
#
src OIT {
ldapusersearch ldap://dc-00.domain.local:3268/DC=DOMAIN,DC=LOCAL?sAMAccountName?sub?(&(memberof=CN=oit,OU=InternetAccess,OU=OU_GROUPS,DC=DOMAIN,DC=LOCAL)(sAMAccountName=%s))
}
#
#
#
# DESTINATION CLASSES:
#
dest ads {
domainlist ads/domains
urllist ads/urls
expressionlist ads/expressions
redirect 302:http://proxy/replace/1x1.gif
}
acl {
OIT within high-privilegy {
pass all
redirect http://proxy/cgi-bin/block.cgi?clientaddr=%a&clientname...
}
### DEFAULT ###
default {
pass !ads !in-addr none
redirect http://proxy/replace/ERR_NOT_ALLOWED_INET.html
}
}
Не забывайте про "squid -k parse" и "squidGuard -d"
Вариант для распечатки
(ok) on 13-Авг-12, 14:40 
