Re: [squid-users] authenticate_ip_ttl over multiple servers?

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Wed, 16 Jan 2002 11:30:53 +0100

Not really.

Your best action is an administrative one. Make sure you have a clear
policy of use, and then go after the ones that misbehave.

Finding misbehaving users is a simple task of cross-checking the log
files for duplicate use of the same identity.

Regards
Henrik Nordström

On Tuesday 15 January 2002 13.03, FLORIAN.LEIBENZEDER@LHSYSTEMS.COM
wrote:
> Hi,
>
> we are using squid to allow our authenticated users to surf the
> web. Furthermore a proxy.pac file is used for the client browsers
> to implement some kind of "load balancing". Depending on the users
> IP adress, the connection is forwarded to one of the quid servers.
> Now, to prohibit different users to use the proxies from different
> IPs with the same user ID and password at the same time one could
> use squids authenticate_ip_ttl directive. The problem with our
> setup is, that this only works on a per server base. If two users
> are using different proxies (due to the proxy.pac assignment) they
> can still log on with the same uid & pass. Now is there some kind
> of possibillity to propagate the authenticate_ip_ttl cache
> information from one squid to others or does anybody know about a
> solution to implement that behavior.
>
> Thanks for every hint.
>
> Florian Leibenzeder

-- 
MARA Systems AB, Giving you basic free Squid support
Customized solutions, packaged solutions and priority support
available on request
Received on Wed Jan 16 2002 - 03:46:44 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:05:52 MST