Re: [squid-users] auth squid2.5

From: Marco Berizzi <pupilla@dont-contact.us>
Date: Tue, 18 Jun 2002 16:58:53 +0200

...mhh sorry. I found the mis-conf.

My squid.conf:

...
acl concurrent_browsing max_user_ip -s 1
acl allowsite linux.org bla bla bla ...
acl password proxy_auth_regex me you ...
...
http_access deny concurrent_browsing
http_access allow allowsite
http_access allow password
...

The problem is the entry:

http_access deny concurrent_browsing
(I haven't specified it in the previous mail, sorry)

Squid must verify this and so it asks for username/password
Very intelligent ;-)
So I have rewritten my squid.conf:

http_access allow allowsite
http_access deny concurrent_browsing
http_access allow password

authenticate_ip_ttl_is_strict vs acl max_user_ip -s 1
has a little different behaviour.

Am I correct?

>From: Henrik Nordström <hno@marasystems.com>
>To: "Marco Berizzi" <pupilla@hotmail.com>, squid-users@squid-cache.org
>Subject: Re: [squid-users] auth squid2.5
>Date: Mon, 17 Jun 2002 20:33:58 +0200
>
>Works fine here, as long as the http_access rules is ordered properly.
>
>Make sure "squid -k parse" has nothing to say about your config.
>
>Regards
>Henrik
>
>
>Marco Berizzi wrote:
>
> > http_access allow allowsite
> >
> > I think should allow browse the internet (if acl allowsite permit)
> > without any password.
> >
> > Could anybody explain this? Squid 2.4 with a similar squid.conf
> > hasn't this behaviour.

_________________________________________________________________
Join the world’s largest e-mail service with MSN Hotmail.
http://www.hotmail.com
Received on Tue Jun 18 2002 - 08:58:55 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:08:43 MST