RE: [squid-users] Password resuse

Hi Khiz

If using 2.4 squid:
Just set the time for "authenticate_ip_ttl" and make
"authenticate_ip_ttl_is_strict" on ( is default)
Ex:
authenticate_ip_ttl 2 hour
authenticate_ip_ttl_is_strict on

For 2.5 Squid

authenticate_ip_ttl_is_strict option is served by "acl aclname
max_user_ip [-s] number"

Use this acl to match and then deny the request. Also you can give a
custom error page as supported by 2.5

Reg.
Prasanta

-----Original Message-----
From: khiz code [mailto:khizcode@yahoo.com]
Sent: Tuesday, February 11, 2003 6:20 PM
To: squid-users@squid-cache.org
Subject: [squid-users] Password resuse

Hie gurus
  
i ve got a peculiar requirement
 
after a user authenticates himeslf to squid (using any of the available
mechanisms) i need to be able to restrict the user to that particular
machine as such time that he is browsing using that machine. SO during
such time , no other user should be able to use the same user name and
password on some other machine ..

however once he has logged off (??) , the user name and password can be
re used on some other machine

I know this is more of a policy issue, wherein passwods should not be
revealed, but wondering if Technology could do the rescue act :-0)

Thanks in advance
khiz

__________________________________________________
Do you Yahoo!?
Yahoo! Shopping - Send Flowers for Valentine's Day
http://shopping.yahoo.com