Re: [squid-users] User Authentication

From: Mohammad Shoaib Irtaza <msirtaza@dont-contact.us>
Date: Fri, 24 Dec 2004 05:47:56 -0500

I have downloaded ip_user and compiled it on my
RH9 machine. I am runnig squid2.5.s1
I have created the configuration files according to
the readme file provided in the downloaded.

My entries in squid include

external_acl_type srcip %SRC %LOGIN /etc/squid/ip_user_check -f /usr/etc/example.conf
acl mynet external srcip
http_access allow mynet
http_access deny all

my example.conf includes
0.0.0.0/0.0.0.0 NONE
10.0.0.6 ALL

when I try accessing any site it gives me with

ERROR:Cache Access Denied

Sorry, you are not currently allowed to request:

    http://www.hotmail.com/

from this cache until you have authenticated yourself.

I dont know what a seems to be the problem. I have gone
through the configuration files but find nothing.
Am I missing something? Please help.

Shoaib Irtaza

>
> On Thu, 23 Dec 2004, Mohammad Shoaib Irtaza wrote:
>
> > external_acl_type mynet concurrency=10 ttl=4400 negative_ttl=1
> > %LOGIN /etc/squid/access.pl
> > acl mynet external mynet
> > http_access deny !mynet
> > deny_info index.php mynet
> >
> > Can this helper be used to provide squid with the authentication information.
>
> No, authentication is done separately via the auth_param directive.
> Your external_acl_type automatically triggers the request for
> authentication when used due to the %LOGIN key in the same manner
> as an proxy_auth acl would. Both relies on authentication to have
> been configured in auth_param for the actual authentication.
>
> You can make external acl helpers return login name information for
> the purpose of logging in Squid-2.5, but the session must then be
> based on some other key (usually the source IP of the user).
>
> Regards
> Henrik

-- 
___________________________________________________________
Sign-up for Ads Free at Mail.com
http://promo.mail.com/adsfreejump.htm
Received on Fri Dec 24 2004 - 03:48:02 MST

This archive was generated by hypermail pre-2.1.9 : Sat Jan 01 2005 - 12:00:03 MST