[squid-users] Squid 2.5: Problem with ident acls

From: Rost, Werner <Werner.Rost@dont-contact.us>
Date: Wed, 4 Sep 2002 12:00:30 +0200

We want to restrict downloads: normal users may download files not greater
then 2 MB, some "powerusers" may download files without restriction.

Using Squid Cache (version 2.5.PRE11-20020828) we inserted in squid.conf:

acl poweruser ident rost pojeti ramisch
reply_body_max_size 0 allow poweruser
reply_body_max_size 200000 allow all

Testing user "rost": Download of a large file is denied though user rost is
a poweruser!

Output of debugging:

2002/09/04 09:36:32| aclMatchUser: user is rost, case_insensitive is 0
   <snip>
2002/09/04 09:36:32| aclMatchAclList: checking poweruser
2002/09/04 09:36:32| aclMatchAcl: checking 'acl poweruser ident rost pojeti
rami
sch'
2002/09/04 09:36:32| aclMatchAclList: returning 0
2002/09/04 09:36:32| aclCheckFast: no matches, returning: 0
2002/09/04 09:36:32| aclCheckFast: list: 1408eacd8

After setting "reply_body_max_size 0 allow all" download is possible.

What is wrong with the above configuration of powerusers?

> Mit freundlichen Grüßen / regards
> Werner Rost
>
> ---------------------------------------------------------------------
> ZF Boge GmbH
> Werner Rost
> IT
> Friesdorfer Str. 175
> D-53175 Bonn
>
>
> phone: +49/228/3825 420
> fax: +49/228/3825 398
> werner.rost@zfboge.com
>
> www.boge-vibrationcontrol.com
> ---------------------------------------------------------------------
>
>

---------------------------------------------------------
This Mail has been checked for Viruses
Attention: Encrypted mails can NOT be checked!

**

Diese Mail wurde auf Viren geprueft
Hinweis: Verschluesselte mails koennen NICHT auf Viren geprueft werden!
---------------------------------------------------------
Received on Wed Sep 04 2002 - 04:03:11 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:10:03 MST