Re: [squid-users] squid, winbind authentication (ntlm) caching problems

On Wed, 4 Feb 2004, Markus Feilner wrote:

> This works fine, only members of a certain group may access the
> internet. When a new user is added to the Active Directory Group, it is
> almost immediately recognized by squid,

So you have a low negative ttl for the group helper.

> But not when it is deleted! it may take up to four days, until this user
> is blocked from accessing the internet. Only a restart of squid can
> change this. Then automatically all the new data is used.

Then use a low positive ttl for the group helper.

See external_acl_type.

Regards
Henrik
Received on Wed Feb 04 2004 - 09:19:15 MST