--------------------- PatchSet 10552 Date: 2008/05/17 12:05:01 Author: serassio Branch: nt Tag: (none) Log: Updated mswin_check_ad_group documentation Members: helpers/external_acl/mswin_ad_group/readme.txt:1.1.2.1->1.1.2.2 Index: squid/helpers/external_acl/mswin_ad_group/readme.txt =================================================================== RCS file: /cvsroot/squid-sf//squid/helpers/external_acl/mswin_ad_group/readme.txt,v retrieving revision 1.1.2.1 retrieving revision 1.1.2.2 diff -u -r1.1.2.1 -r1.1.2.2 --- squid/helpers/external_acl/mswin_ad_group/readme.txt 3 May 2008 08:58:26 -0000 1.1.2.1 +++ squid/helpers/external_acl/mswin_ad_group/readme.txt 17 May 2008 12:05:01 -0000 1.1.2.2 @@ -1,10 +1,10 @@ This is the readme.txt file for mswin_check_ad_group, an external -helper fo the External ACL Scheme for Squid. +helper for the External ACL Scheme for Squid. -This helper must be used in with an authentication scheme, tipically -basic, NTLM and Negotiate, based on Windows Active Directory domain users. +This helper must be used in with an authentication scheme (tipically +basic, NTLM or Negotiate) based on Windows Active Directory domain users. It reads from the standard input the domain username and a list of groups and tries to match it against the groups membership of the specified username. @@ -55,10 +55,10 @@ "Domain Users" NOTES: -- The standard group name comparation is case sensitive, so group name +- The standard group name comparison is case sensitive, so group name must be specified with same case as in the Active Directory Domain. - It's possible to enable not case sensitive group name comparation (-c), - but on on some non - English locales, the results can be unexpected. + It's possible to enable case insensitive group name comparison (-c), + but on some not-english locales, the results can be unexpected. - Native WIN32 NTLM and Basic Helpers must be used without the -A & -D switches. @@ -69,10 +69,10 @@ Testing ======= -I strongly reccomend that mswin_check_lm_group is tested prior to being used in a +I strongly reccomend that mswin_check_ad_group is tested prior to being used in a production environment. It may behave differently on different platforms. To test it, run it from the command line. Enter username and group -pairs separated by a space (username must entered with domain\\username +pairs separated by a space (username must entered with domain%5cusername syntax). Press ENTER to get an OK or ERR message. Make sure pressing behaves the same as a carriage return. Make sure pressing aborts the program.