Re: squid authentication / skolelinux ldap docs

[Gavin McCullagh <gavin@fiachra.ucd.ie>]

On Fri, 21 Jan 2005, Finn-Arne Johansen wrote:

> No - you can use iptables to check for user accessing the web - but you 
> need newer iptables than the one in woody. I have used the one from 
> backports.org with success. I have been able to set that only squid is 
> allowed to access the web, and everyone else would access squid.

That's pretty cool.  I'll have to think about which way to go.

> Unless you have changed your ldap db, you only have
>  ou=People,dc=skole,dc=skolelinx,dc=no
> 
> But I think you also have a group
>  cn=teachers,ou=Group,dc=skole,dc=skolelinux,dc=no

Excellent.  That's exactly what I want.

> See above
> 
> ldapsearch -LLL -h ldap -x -b ou=group,dc=skole,dc=skolelinux,dc=no \
>            "cn=admins" memberUid
> 
> gives me a list of admins

Convenient, thanks.
Gavin