Re: [squid-users] Restrict User-Access with NTLMSSP (ntlm_auth)

Restrict User-Access with NTLMSSP (ntlm_auth)first of thanx for prompt reply..
But I want to implement this to my existing squid proxy configuration. I'm not using NTLM using only NCSA auth module. and my setting in squid.conf file is as below :

acl all src 0.0.0.0/0.0.0.0

acl manager proto cache_object

acl password proxy_auth REQUIRED

acl allowed_hosts src 192.9.205.0/255.255.255.0

acl localhost src 127.0.0.1/255.255.255.255

http_access allow manager localhost

http_access deny manager

http_access allow password

http_access allow allowed_hosts

http_access deny all

Pls help me

  ----- Original Message -----
  From: Chemolli Francesco (USI)
  To: 'Freitag, Thoralf' ; 'squid-users@squid-cache.org'
  Sent: Thursday, December 13, 2001 01:55 PM
  Subject: RE: [squid-users] Restrict User-Access with NTLMSSP (ntlm_auth)

  acl allowed_user proxy_auth -i domain\user [ domain\user .... ]
  acl allowed_domain dstdomain .some.domain.com
  acl HTTP url_regex ^http://
  acl REQUIRED proxy_auth REQUIRED
  acl all src 0.0.0.0/0.0.0.0
  http_access allow http allowed_domain allowed_user
  http_access deny REQUIRED
  http_access deny all

  Please in the future refrain from using HTML-formatted posts to
  mailing lists. It makes answering difficult. Thanks

  --
          /kinkie

    -----Original Message-----
    From: Freitag, Thoralf [mailto:freitag@berlinerglas.de]
    Sent: Thursday, December 13, 2001 8:16 AM
    To: 'squid-users@squid-cache.org'
    Subject: [squid-users] Restrict User-Access with NTLMSSP (ntlm_auth)

    Hello,

    I installed and configured Squid (squid-head-200112110000) successful. Because not all of our windows user should have Web-Access to the whole net. The older basic auth module MSNT is capable to handle this (files allowusers, denyusers). How to configure this with NTLMSSP ? To install an identd at all the maschines and make a combined acl is not workable.

    Thanks for your help.

    Mit freundlichen Gruessen

    Thoralf Freitag
    Berliner Glas KGaA
    Herbert Kubatz GmbH & Co.
    IT-Servicecenter

    Tel. +49-30-60905-555 (Hotline)
    Tel. +49-30-60905-152 (direkt)
    Fax +49-30-60905-100
    mail Thoralf.Freitag@berlinerglas.de
    web http://www.berlinerglas.de
Received on Thu Dec 13 2001 - 01:29:04 MST