[squid-users] Re: important - ip_authenticate_ttl

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Wed, 21 Mar 2001 14:55:42 +0100

You are looking for "ip_authenticate_ttl_is_strict on".

Don't know if I have a separate patch for it, but it is available in
Squid-2.4 and later.

Henrik Nordstrom
Squid hacker
mmo@internetworking.ch wrote:
> Hello Henrik
> Well i just did a large SMB_auth stuff some month ago, maybe you remember
> me.
> Now i have to do a large enviroment with radius_auth.
> This works fine.
> The prob is the ip_authenticate_ttl got a bad touch:
>         if you have two stations with internetexplorers 5.3 or higher
>         and you say "save this password" on the login dialog box
>         the ip_authenticate_ttl dosnt bring something, because the users
>         dont see anything popping up anymore.
> My question is: can you make a patch, so that during the ip_authenticate_ttl
> it would not be possible to authenticate from another IP? the otehr ip
> should receive an error message and not a logon box, or when it isnt
> possible..he reveice a logon box but an denied message.
> The second station dont need a force login like now that you can simply
> login twice and it works. it should not be possible to login during this
> time.
> is this possible ? i guess it should be, but i dont know the structure of
> squid.
> please gimme feedback
> thankx
> max
Received on Wed Mar 21 2001 - 07:07:08 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:58:45 MST