access control via external program?

Hi,

I'm about to install a small[1] squid setup for
someone with quite complicated access control
requirements.

Among other things, he wants to be able to allow
or ban groups of users depending upon the site,
group and time of day.

The user/site thing is OK, but I haven't yet found
any way to implement the time bit. It's also quite
likely the the requirements will change over time,
so I thought using an external program to control
allow/deny might be the way forward - it would accept
on the command line, or via the environment the
username and URL and return, say, 0 or 1 depending
upon whether access is permitted.

Obviously, this could quite seriously impact performance
but since it'll be a linux box[2] and not too busy,
that's not really an issue.

Has anyone implemented something like this? If not,
could someone point me to the right bit of code so that
I can do it myself?

TIA.

Cheers,
Matthew.

[1] Single machine / 384Kbit link
[2] ie. low fork()/exec() latencies
Received on Wed Dec 09 1998 - 08:50:01 MST