Re: winbindd and group lookups

On Mon, 2002-09-09 at 06:12, Jerry Murdock wrote:
> ----- Original Message -----
> From: "Henrik Nordström" <hno@marasystems.com>
> To: "Andrew Bartlett" <abartlet@samba.org>
> Cc: "Jerry Murdock" <jmurdock@itraktech.com>; "Squid-Dev (E-mail)"
> <squid-dev@squid-cache.org>
> Sent: Sunday, September 08, 2002 4:51 AM
> Subject: Re: winbindd and group lookups
>
>
> > On Sun, 8 Sep 2002, Andrew Bartlett wrote:
> >
> > Unfortunately Squid want's the group information later in a separate query
> > the way things are designed now, but have thought for a long time about
> > adding support for groups (or other attributes) to be returned by
> > authentication.
> >
> One thing I like about the current external_acl approach is that it allows a
> way to deny based on user without causing a login popup from the browser.
>
> Maybe I've been dense and missed another solution (wouldn't surprise me),
> but I'd hate to lose this ability.

Thats orthogonal to *when* squid gets the user group info.

Cheers,
Rob