[squid-users] Re: important - ip_authenticate_ttl

You are looking for "ip_authenticate_ttl_is_strict on".

Don't know if I have a separate patch for it, but it is available in
Squid-2.4 and later.

--
Henrik Nordstrom
Squid hacker
mmo@internetworking.ch wrote:
> 
> Hello Henrik
> 
> Well i just did a large SMB_auth stuff some month ago, maybe you remember
> me.
> Now i have to do a large enviroment with radius_auth.
> This works fine.
> The prob is the ip_authenticate_ttl got a bad touch:
>         if you have two stations with internetexplorers 5.3 or higher
>         and you say "save this password" on the login dialog box
>         the ip_authenticate_ttl dosnt bring something, because the users
>         dont see anything popping up anymore.
> 
> My question is: can you make a patch, so that during the ip_authenticate_ttl
> it would not be possible to authenticate from another IP? the otehr ip
> should receive an error message and not a logon box, or when it isnt
> possible..he reveice a logon box but an denied message.
> 
> The second station dont need a force login like now that you can simply
> login twice and it works. it should not be possible to login during this
> time.
> 
> is this possible ? i guess it should be, but i dont know the structure of
> squid.
> 
> please gimme feedback
> 
> thankx
> 
> max