[squid-users] ntlm + login pop-up for users with no internet access

From: alvaro perera <alvaro.perera_at_gmail.com>
Date: Tue, 9 Mar 2010 23:58:12 +0100

Hello!

I have a Centos 5.4 with Squid version 3.0.STABLE24 and samba Version
3.0.33-3.14.el5.
I have connfigured squid authentication with ntlm and it works fine
when the user have access allowed by an squid acl.
But when the user have the access denied by an squid acl, the browser
(internet explorer and mozilla) shows a login pop-up window,
and I don't want the users trying other peoples accounts. Only when I
cancel the pop-up windows the browser show me the "access denied"
page.

I have installed and tested squid in a windows environment with the
same config and works fine, it doesnt show a login pop-up windows
when the user has no access, it just show the "access denied" page.

Here is my squid.conf:

auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 5
auth_param ntlm keep_alive on

acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32

acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
acl usuarios proxy_auth REQUIRED

http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports

http_access deny usuarios # I know, this line has no sense, no one has
access, it's a just a test environment

Are there any way to disable the login pop-up for users with no internet access?

Thanks!
Received on Tue Mar 09 2010 - 22:58:20 MST

This archive was generated by hypermail 2.2.0 : Wed Mar 10 2010 - 12:00:03 MST