EXT_WBI...OUP_ACL(8)

📦
version 7.7 · 27 versions
, in arch rolling

💅 EXT_WBI...OUP_ACL(8) — like, the whole vibe

okay so before we even start: this page lives in the User Contributed Perl Documentation corner of the man-page universe, and its full glow-up name is EXT_WBI...OUP_ACL(8) (yes the ellipsis is part of the name, don't @ me, it's iconic in a chaotic way). Anyway. Sit down, bestie, we're learning about an external ACL helper for Squid 🦑✨

🎀 NAME 🎀

ext_wbinfo_group_acl — an external ACL helper for Squid that verifies NT Domain group membership using wbinfo. no cap, that's literally the whole job 💅

✨ SYNOPSIS ✨

ext_wbinfo_group_acl [-dhK]

three little flags, one big job. slay.

🦋 DESCRIPTION 🦋

ext_wbinfo_group_acl is an installed executable script, bestie — meaning it's already chilling on your system waiting for you. it uses wbinfo from Samba to look up the group membership of logged-in users 🔍

now here's the important part, okay? this helper must be used with an authentication scheme — typically Basic or NTLM — that's based on Windows NT/2000 domain users. so like, it's not a standalone main character, it's a supporting role with main character energy 👑

what it actually does: it reads from standard input the domain username plus a list of groups, and tries to match each of those groups against the group membership of the username you gave it. like a little bouncer checking the guest list against the VIP list 🎟️💖

🔥 OPTIONS 🔥

  • -d — writes debug info to stderr. for when you need to see what's actually happening under the hood, iykyk 🕵️‍♀️
  • -h — prints the help. the classic "help me help you" move 🫶
  • -K — downgrades Kerberos credentials to NTLM. that's the whole thing, no extra lore 💀

🌈 CONFIGURATION 🌈

here's the configuration setup, and yes you're gonna want to copy it exactly:

external_acl_type wbinfo_check %LOGIN /path/to/ext_wbinfo_group_acl
acl allowed_group external wbinfo_check Group1 Group2
http_access allow allowed_group

and listen — if your local perl interpreter is in an unusual location (it happens, we don't judge 💀), it may need to be added in there like this:

external_acl_type wbinfo_check %LOGIN /path/to/perl /path/to/ext_wbinfo_group_acl

see how /path/to/perl just slid in there before the script? that's the whole trick. periodt 💅

🧚 AUTHOR 🧚

this program was written by Jerry Murdock <jmurdock@itraktech.com> — legend behavior honestly 🌟

and this manual was written by Amos Jeffries <amosjeffries@squid-cache.org> — a real one for documenting it 📝💖

okay so here's the legal bit, but make it cute:

 * Copyright (C) 1996-2026 The Squid Software Foundation and contributors
 *
 * Squid software is distributed under GPLv2+ license and includes
 * contributions from numerous individuals and organizations.
 * Please see the COPYING and CONTRIBUTORS files for details.

tl;dr — Squid software goes out under the GPLv2+ license, and it includes contributions from a whole crowd of individuals and organizations. the receipts are in the COPYING and CONTRIBUTORS files 📚

and then, separately:

this program is put in the public domain by Jerry Murdock <jmurdock@itraktech.com>. it is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. so like… no promises, bestie 😭🙈

💀 QUESTIONS 💀

got questions about using this program? send them to the Squid Users mailing list <squid-users@lists.squid-cache.org> — they're the group chat for this kinda thing 🫶

🍓 REPORTING BUGS 🍓

  • bug reports need to be made in English. that's the rule, fr fr.
  • for details of what you need to include with your bug report, see https://wiki.squid-cache.org/SquidFaq/BugReporting — read it before you hit send, please and thank you 🙏
  • report bugs or bug fixes using https://bugs.squid-cache.org/ 🐛
  • report serious security bugs to Squid Bugs <squid-bugs@lists.squid-cache.org> — that's the serious channel, treat it with the respect it deserves 🚨
  • got ideas for new improvements? those go to the Squid Developers mailing list <squid-dev@lists.squid-cache.org> 💡

💜 SEE ALSO 💜

go forth and read, bestie 📖✨

and that's the whole page!! footer energy for the record: this lil doc is from perl v5.42.2, dated 2026-08-25, and the page is EXT_WBI...OUP_ACL(8) — mwah, take care, don't forget to check your group membership 💋🎀🦋

📦 where this page comes from