auth_param negotiate program /usr/local/libexec/squid/negotiate_kerberos_auth -r -d -k /usr/local/etc/squid/squidproxy.keytab
auth_param negotiate children 1000
auth_param negotiate keep_alive on
external_acl_type kerberos_group ttl=60 negative_ttl=60 %LOGIN /usr/local/libexec/squid/ext_kerberos_ldap_group_acl -a -g Internet_Access -l ldap://ZENTYAL.TEST.LOCAL -u squid -p mypassword -D TEST.LOCAL
acl GroupProxy external kerberos_group
http_access allow GroupProxy
http_access deny all