Re: Using AD groups from negotiate_kerberos_auth in ssl-bumped connections.

Amos Jeffries <[email protected]> Thu, 26 Mar 2026 11:03:44 +1300
Newsgroups gmane.comp.web.squid.general
Message-ID <[email protected]>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