]> git.ipfire.org Git - thirdparty/squid.git/commit
ext_ldap_group_acl: Require base dn and user search filter (#2167)
authorJoshua Rogers <MegaManSec@users.noreply.github.com>
Sat, 13 Sep 2025 12:02:58 +0000 (12:02 +0000)
committerSquid Anubis <squid-anubis@squid-cache.org>
Sat, 13 Sep 2025 12:06:17 +0000 (12:06 +0000)
commit567b10a49a1b33729288a9092d80033328f0e8c3
treede1171c8600c19f99d243e773fe7632ec484240f
parent2228d481f130e238c41ea470d7e9444894981b54
ext_ldap_group_acl: Require base dn and user search filter (#2167)

Make ext_ldap_group_acl require -B (user base DN) and -F (user search
filter) so the helper finds the user before checking group membership.
Fix LDAP referrals handling and make %v always expand to the requested
group name. Improve logging and errors, and include release notes for
the breaking flag requirements.
doc/release-notes/release-8.sgml.in
src/acl/external/LDAP_group/ext_ldap_group_acl.cc