Re: [squid-users] Re: Authentication problem

From: Warren Baker <warren_at_decoy.co.za>
Date: Fri, 23 Nov 2012 12:57:03 +0200

On Fri, Nov 23, 2012 at 12:05 PM, Amos Jeffries <squid3_at_treenet.co.nz> wrote:
> You are guessing right. As it documented in the wiki ... (seems to be down
> right now).

Thanks Amos - that was my first point of reference, however it was
down at the time so thought i might ping the list.

>
> The way around it is to combine userA and userB into one ACL, or to check
> auth and use the "all"-hack to prevent auth challenges on username mismatch.
>
> 1)
> acl users proxy_auth userA userB
> http_access allow users
> http_access deny all
>
>
> 2)
> acl login proxy_auth REQUIRED
> acl userA proxy_auth userA
> acl userB proxy_auth userB
>
> http_access deny !login
> http_access allow userA all
> http_access allow userB all
> http_access deny all

Ahh yeah this now makes sense - i found reference to the 'all' hack
but couldn't put a successful config together.

Thanks for the info!

-- 
.warren
Received on Fri Nov 23 2012 - 10:57:20 MST

This archive was generated by hypermail 2.2.0 : Fri Nov 23 2012 - 12:00:05 MST