From d9e6b361888e2492991be6522e0113cf30c63694 Mon Sep 17 00:00:00 2001
From: Alexander Bokovoy <ab@samba.org>
Date: Thu, 8 Apr 2004 12:37:02 +0000
Subject: [PATCH] Document --require-membership-of={SID|Name} (This used to be
 commit 83e7f9692302a7c459dda7ef35e26b836c85c23f)

---
 docs/manpages/ntlm_auth.1.xml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/docs/manpages/ntlm_auth.1.xml b/docs/manpages/ntlm_auth.1.xml
index fc5b34c3e47..422b58fc4e0 100644
--- a/docs/manpages/ntlm_auth.1.xml
+++ b/docs/manpages/ntlm_auth.1.xml
@@ -198,6 +198,13 @@
 	or prompts for one.</para>
         </listitem>
         </varlistentry>
+	
+	<varlistentry>
+	    <term>--require-membership-of={SID|Name}</term>
+	    <listitem><para>Require that a user be a member of specified 
+	    group (either name or SID) for authentication to succeed.</para>
+	    </listitem>
+	</varlistentry>
 
 	  &popt.common.samba;
 	  &stdarg.help;
@@ -223,6 +230,13 @@ auth_param basic credentialsttl 2 hours
       path, and that the group permissions on
       <filename>winbindd_privileged</filename> are as described above.</para></note>
 
+	<para>To setup ntlm_auth for use by squid 2.5 with group limitation in addition to the above
+	example, the following should be added to the <filename>squid.conf</filename> file.
+<programlisting>
+auth_param ntlm program ntlm_auth --helper-protocol=squid-2.5-ntlmssp --require-membership-of='WORKGROUP\Domain Users'
+auth_param basic program ntlm_auth --helper-protocol=squid-2.5-basic --require-membership-of='WORKGROUP\Domain Users'
+</programlisting></para>
+	
 </refsect1>
 
 <refsect1>
-- 
2.34.1