ext_wbinfo_group_acl(8)

ext_wbinfo_group_acl8

Usage

ext_wbinfo_group_acl [-dhK]

Overview

ext_wbinfo_group_acl is an installed executable script. It uses wbinfo from Samba to lookup group membership of logged in users.

This helper must be used in with an authentication scheme (typically Basic or NTLM) based on Windows NT/2000 domain users.

It reads from the standard input the domain username and a list of groups and tries to match each against the groups membership of the specified username.

Options

-d

Write debug info to stderr.

-h

Print the help.

-K

Downgrade Kerberos credentials to NTLM.

Configuration

  external_acl_type wbinfo_check %LOGIN /path/to/ext_wbinfo_group_acl
  acl allowed_group external wbinfo_check Group1 Group2
  http_access allow allowed_group

If the local perl interpreter is in a unusual location it may need to be added:

  external_acl_type wbinfo_check %LOGIN /path/to/perl /path/to/ext_wbinfo_group_acl

Questions

Questions on the usage of this program can be sent to the Squid Users mailing list <[email protected]>

Releases

7 releases since Debian 8 (Jessie); the text changed 6 times.

  1. 8
  2. 9
  3. 10
  4. 11
  5. 12
  6. 13
  7. Arch

-K since Debian 9 (Stretch); -d since Debian 9 (Stretch); -h since Debian 9 (Stretch).

Author

This program was written by Jerry Murdock <[email protected]>

This manual was written by Amos Jeffries <[email protected]>

Reporting bugs

Bug reports need to be made in English. See https://wiki.squid-cache.org/SquidFaq/BugReporting for details of what you need to include with your bug report.

Report bugs or bug fixes using https://bugs.squid-cache.org/

Report serious security bugs to Squid Bugs <[email protected]>

Report ideas for new improvements to the Squid Developers mailing list <[email protected]>

From squid 7.7-1 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.