Re: [squid-users] external_acl_type problem. Please help.

Hi,

At 15.51 05/02/2005, Henrik Nordstrom wrote:

>On Sat, 5 Feb 2005, [ISO-8859-1] Flávio Henrique wrote:
>
>>But I trying to use external_acl_type too, but not working. Always I got
>>Access Denied,
>>even when the script returns OK (at least I got "OK" in console).
>
>Is there any errors from "squid -k parse"?
>
>Did you try the script running as your cache_effective_user or as root?
>Many permission errors go unnoticed when testing helpers as root.
>
>>external_acl_type autorizacao %LOGIN "/etc/squid/modulos/users.sh"
>>
>>acl autorizados external autorizacao
>>
>>acl LAN1 src 192.168.100.0/24
>>http_access allow LAN1 autorizados
>>http_access deny all
>
>Looks fine to me. No obvious configuration errors from what I can tell.

My be a username format problem in the external ACL helper:

Flávio is using NTLM and basic Samba authentication, so the username should
provided to the external acl helper as domain\\username.

Flávio: try to output to stderr what users.sh is receiving from squid and
look into cache.log.

Regards

Guido

-
========================================================
Guido Serassio
Acme Consulting S.r.l. - Microsoft Certified Partner
Via Gorizia, 69 10136 - Torino - ITALY
Tel. : +39.011.3249426 Fax. : +39.011.3293665
Email: guido.serassio@acmeconsulting.it
WWW: http://www.acmeconsulting.it/
Received on Sat Feb 05 2005 - 08:13:34 MST