Group acl on squidguard not working please help



  • I have setup the following group acl

    ldapusersearch ldap://ldap.zxc.asd.qwe:389/DC=zxc,DC=asd,DC=qwe?sAMAccountName?sub?(&(sAMAccountName=%s)(memberOf=CN=interlan%2cOU=Usuarios%2cDC=zxc%2cDC=asd%2cDC=qwe))

    I know tested the ad server by using this on my terminal:

    ldapsearch -b "ou=Usuarios, dc=zxc, dc=asd, dc=qwe" -D "cn=adminuser, cn=Users, dc=zxc, dc=asd, dc=qwe" -w "something" -H ldap://ldap.zxc.asd.qwe:389 "(&(sAMAccountName=batman)(memberOf=CN=interlan,OU=Usuarios,DC=zxc,DC=asd,DC=qwe))"

    yet the pfsense doesn't seem to allow internet conection
    if I change the Client (source) to my ip leaving the rest untouched I get internet access

    Could anyone help me?



  • try this

    ldapusersearch ldap://dc1.domain.com.uy:3268/dc=domain,dc=com,dc=uy?sAMAccountName?sub?(&(sAMAccountName=%s)(memberOf=CN=Internet,OU=Grupos,dc=domain,dc=com,dc=uy))

    "Internet" is my AD group located at "OU=Grupos"