SquidGuard or equivalent with support for groups in ActiveDirectory via LDAPS?

Question

LDAP

Good afternoon, colleagues!
Imagine the situation is SQUID.
There is SquidGuard, which pulls groups from the user from AD and lets or does not let the user into the site.

The March update promises to enable SSL/TLS for LDAP ( one , two ) and here the questions arise:
1. Authorization squid - is it possible to enable encryption?
can.

auth_param basic program /usr/lib/squid/basic_ldap_auth -Z -v 3  ....................

2. SquidGuard - is it possible to enable encryption?
you can't :-(

And actually the questions:
1. Is there a workaround?
2. How to replace SquidGuard (using 1.6 from debian ep)?
There is also ufdbGuard, but it doesn't support LDAP at all...

Answer 1

Strictly speaking, Squid can do everything itself. There is AD authentication, filtering lists, etc. Why didn't you like the built-in functionality of Squid?

Answer 2

To eat, negotiate_kerberos_auth has been working since unknown shaggy times, years ... well, I don’t remember, probably since 2010 ... There is also ext_kerberos_ldap_group_acl - what is the love for necrosoft? Is SquidGuard still alive?
There were a couple of articles on setting up a squid in the throwing magazine "System Administrator" (which last year notably threw me, then it seemed to promise to improve, but did not fix it), one of them was definitely devoted to the topic of access control through AD groups

Answer 3

The March update promised to disable LDAP and leave only LDAPS.
But according to the latest information, MS has postponed this to the second half of 2020.