i have a pfsense with squid and squidguard. i want integrate ONLY SQUIDGUARD with ldap, because if i do the same with squid i receive a pop up when my users open a browser.

i configured my squidguard with account ldap with read privileges, and i configured my groups acl with ldapusersearch like this>

ldapusersearch  ldap://myip:3268/DC=mydomain,DC=local?sAMAccountName?sub?(&(sAMAccountName=%s)(memberOf=CN=mygroup%2cCN=Users%2cDC=mydomain%2cDC=local))

but i always receive block all sites and with default acl.

how you can help me?

thanks