Re: [squid-users] Squid 2.5: Problem with ident acls

Looks like the reply_body_max_size directive does not yet support the use of
ident ACLs.

The debug output you have quoted is from two different ACL matches. The call
chain is aclMatchAclList -> aclMatchAcl -> aclMatchUser [IFF the ident is
known]

Please register a bugzilla entry.

Regards
Henrik

Rost, Werner wrote:
> We want to restrict downloads: normal users may download files not greater
> then 2 MB, some "powerusers" may download files without restriction.
>
> Using Squid Cache (version 2.5.PRE11-20020828) we inserted in squid.conf:
>
> acl poweruser ident rost pojeti ramisch
> reply_body_max_size 0 allow poweruser
> reply_body_max_size 200000 allow all
>
>
> Testing user "rost": Download of a large file is denied though user rost is
> a poweruser!
>
> Output of debugging:
>
> 2002/09/04 09:36:32| aclMatchUser: user is rost, case_insensitive is 0
> <snip>
> 2002/09/04 09:36:32| aclMatchAclList: checking poweruser
> 2002/09/04 09:36:32| aclMatchAcl: checking 'acl poweruser ident rost pojeti
> rami
> sch'
> 2002/09/04 09:36:32| aclMatchAclList: returning 0
> 2002/09/04 09:36:32| aclCheckFast: no matches, returning: 0
> 2002/09/04 09:36:32| aclCheckFast: list: 1408eacd8
>
>
> After setting "reply_body_max_size 0 allow all" download is possible.
>
> What is wrong with the above configuration of powerusers?
>
> > Mit freundlichen Grüßen / regards
> > Werner Rost
> >
> > ---------------------------------------------------------------------
> > ZF Boge GmbH
> > Werner Rost
> > IT
> > Friesdorfer Str. 175
> > D-53175 Bonn
> >
> >
> > phone: +49/228/3825 420
> > fax: +49/228/3825 398
> > werner.rost@zfboge.com
> >
> > www.boge-vibrationcontrol.com
> > ---------------------------------------------------------------------
>
> ---------------------------------------------------------
> This Mail has been checked for Viruses
> Attention: Encrypted mails can NOT be checked!
>
> **
>
> Diese Mail wurde auf Viren geprueft
> Hinweis: Verschluesselte mails koennen NICHT auf Viren geprueft werden!
> ---------------------------------------------------------
Received on Wed Sep 04 2002 - 05:12:40 MDT