1.if !'po4a'hide' .TH ext_unix_group_acl 8 "12 August 2002"
2.
3.SH NAME
4ext_unix_group_acl \- Squid UNIX Group ACL helper
5.
6.SH SYNOPSIS
7.if !'po4a'hide' .B "ext_unix_group_acl [\-d] [\-g "
8group
9.if !'po4a'hide' .B "] [\-g "
10group
11.if !'po4a'hide' .B " ...] [\-p] [\-s]"
12.
13.SH DESCRIPTION
14.B ext_unix_group_acl
15allows Squid to base access controls on users memberships in UNIX groups.
16.
17.SH OPTIONS
18.if !'po4a'hide' .TP
19.if !'po4a'hide' .BI "\-d "
20Write debug info to stderr.
21.
22.if !'po4a'hide' .BI "\-g " "group "
23Specifies a group name to match.
24.
25.if !'po4a'hide' .TP
26.if !'po4a'hide' .BI \-p
27Also match the users primary group from
28.B /etc/passwd
29.
30.if !'po4a'hide' .TP
31.if !'po4a'hide' .BI \-s
32Strip NT domain name component from user names (/ or \\ separated)
33.
34.SH CONFIGURATION
35This
36.B squid.conf
37example defines two Squid acls.
38.I usergroup1
39matches users in
40.I group1
41, and
42.I usergroup2
43matches users in
44.I group2
45or
46.I group3
47.
48.if !'po4a'hide' .RS
49.if !'po4a'hide' .B external_acl_type unix_group %LOGIN /usr/local/squid/libexec/ext_unix_group_acl -p
50.if !'po4a'hide' .br
51.if !'po4a'hide' .B acl usergroup1 external unix_group group1
52.if !'po4a'hide' .br
53.if !'po4a'hide' .B acl usergroup2 external unix_group group2 group3
54.if !'po4a'hide' .RE
55.PP
56By default up to 11 groups can be matched in one acl (including commandline specified groups). This limit is defined by
57.B MAX_GROUPS
58in the source code.
59.
60.SH KNOWN ISSUES
61.PP
62Does not understand GID aliased groups sometimes used to work around groups size
63limitations. If you are using GID aliased groups then you must specify each alias
64by name.
65.
66.SH AUTHOR
67This program was written by
68.if !'po4a'hide' .I Rodrigo Campos <rodrigo@geekbunker.org>
69.PP
70This manual was written by
71.if !'po4a'hide' .I Henrik Nordstrom <hno@squid-cache.org>
72.
73.SH COPYRIGHT
74.PP
75 * Copyright (C) 1996-2021 The Squid Software Foundation and contributors
76 *
77 * Squid software is distributed under GPLv2+ license and includes
78 * contributions from numerous individuals and organizations.
79 * Please see the COPYING and CONTRIBUTORS files for details.
80.PP
81This program and documentation is copyright to the authors named above.
82.PP
83Distributed under the GNU General Public License (GNU GPL) version 2 or later (GPLv2+).
84.
85.SH QUESTIONS
86Questions on the usage of this program can be sent to the
87.I Squid Users mailing list
88.if !'po4a'hide' <squid-users@lists.squid-cache.org>
89.
90.SH REPORTING BUGS
91Bug reports need to be made in English.
92See http://wiki.squid-cache.org/SquidFaq/BugReporting for details of what you need to include with your bug report.
93.PP
94Report bugs or bug fixes using http://bugs.squid-cache.org/
95.PP
96Report serious security bugs to
97.I Squid Bugs <squid-bugs@lists.squid-cache.org>
98.PP
99Report ideas for new improvements to the
100.I Squid Developers mailing list
101.if !'po4a'hide' <squid-dev@lists.squid-cache.org>
102.PP
103Additionally bugs or bug\-fixes can be reported to
104.if !'po4a'hide' .I Rodrigo Campos <rodrigo@geekbunker.org>
105.
106.SH SEE ALSO
107.if !'po4a'hide' .BR squid "(8), "
108.if !'po4a'hide' .BR group "(5), "
109.if !'po4a'hide' .BR passwd "(5), "
110.if !'po4a'hide' .BR GPL "(7), "
111.br
112The Squid FAQ wiki
113.if !'po4a'hide' http://wiki.squid-cache.org/SquidFaq
114.br
115The Squid Configuration Manual
116.if !'po4a'hide' http://www.squid-cache.org/Doc/config/
117