RE: [squid-users] proxy_auth usernames tricks

From: Robert Collins <robert.collins@dont-contact.us>
Date: Wed, 30 May 2001 14:54:04 +1000

> -----Original Message-----
> From: Vladimir Yumashev [mailto:vlad@imi.ssau.ru]
> Sent: Wednesday, May 30, 2001 3:07 PM
> To: squid-users@squid-cache.org
> Subject: [squid-users] proxy_auth usernames tricks
>
>
> I use proxy authentication with smb_auth using NT domain.
>
> I have the following lines in my squid.conf:
> ===
> acl imi src 192.168.111.0/255.255.255.0
> acl users_denied proxy_auth -i "/usr/local/squid/etc/users_denied"
> http_access allow imi !users_denied
> ===
>
> /usr/local/squid/etc/users_denied contains list of baaaad users.
>
> When user "zoom" is in the list and he enters his name as "zoom" he is
> denied by Squid. BUT when he enters his name with letters'
> case changed
> ("Zoom", "ZOOM", etc.) he IS NOT denied.
>
> Usernames in NT/2000 domain are case-insensitive. And this is a great
> problem.
>
> How to avoid such behaviour? I can dig into the source if necessary.
>

What version of squid?

Rob

>
> WBR, Vladimir Yumashev
> +7 8462 35-75-04, vlad@imimail.ssau.ru
>
>
Received on Tue May 29 2001 - 23:03:00 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:00:20 MST