Re: [squid-users] SQUID + FIREFOX + ACTIVE DIRECTORY

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Thu, 30 Oct 2008 12:46:43 +1300

Chris Robertson wrote:
> Chris Nighswonger wrote:
>> On Wed, Oct 29, 2008 at 5:16 PM, nairb rotsak <ipguru99_at_yahoo.com> wrote:
>>
>>> http_access allow all NTLMUsers
>>>
>>
>> Does the 'all' trump the 'NTLMUsers' acl here?
>>
>> Chris
>
> The "all" is redundant. The "all" ACL will always match, so the test
> next falls to checking the "NTLMUsers" ACL. See
> http://wiki.squid-cache.org/SquidFaq/SquidAcl#head-af2c190759b099a7986221cd12a4066eb146a1c4
> for more details.
>
> Chris

May have been trying the 'all' hack and got it backwards:

   http_access allow NTLMUsers all

Is to prevent squid requesting auth if the auth test fails.

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE5 or 3.0.STABLE10
   Current Beta Squid 3.1.0.1
Received on Wed Oct 29 2008 - 23:46:49 MDT

This archive was generated by hypermail 2.2.0 : Thu Oct 30 2008 - 12:00:04 MDT