Re: [squid-users] proxy_auth usernames tricks

From: Simon Bryan <sbryan@dont-contact.us>
Date: Sun, 03 Jun 2001 16:24:06 +1000

Why aren't you letting the authentication be done by the NT Domain as in
the smb_auth instructions? Then this becomes a non-problem.

At 15:07 30/05/2001, you wrote:
>I use proxy authentication with smb_auth using NT domain.
>
>I have the following lines in my squid.conf:
>===
>acl imi src 192.168.111.0/255.255.255.0
>acl users_denied proxy_auth -i "/usr/local/squid/etc/users_denied"
>http_access allow imi !users_denied
>===
>
>/usr/local/squid/etc/users_denied contains list of baaaad users.
>
>When user "zoom" is in the list and he enters his name as "zoom" he is
>denied by Squid. BUT when he enters his name with letters' case changed
>("Zoom", "ZOOM", etc.) he IS NOT denied.
>
>Usernames in NT/2000 domain are case-insensitive. And this is a great
>problem.
>
>How to avoid such behaviour? I can dig into the source if necessary.
>
>
>WBR, Vladimir Yumashev
>+7 8462 35-75-04, vlad@imimail.ssau.ru

Simon Bryan
____________________________________
IT Manager
OLMC Parramatta
http://www.olmc.nsw.edu.au
____________________________________
Received on Sun Jun 03 2001 - 00:30:07 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:00:27 MST