Hi,
I have a question about FTP and Squid
I use LDAP authentifications with http requests and it's ok but I have pbms with FTP requests ==> it doesn't matter if the user is in LDAP or not
Here is my test squid.conf
http_port 3128
cache_mem 20 MB
visible_hostname squid2 cache_dir ufs /u1/cache_squid 1000 16 256
auth_param basic children 5 auth_param basic realm Squid proxy-caching web server auth_param basic credentialsttl 2 hours # LDAP auth_param basic program /usr/lib/squid/pam_auth
# liste acces acl all src 0.0.0.0/0.0.0.0 acl manager proto cache_object acl localhost src 127.0.0.1/255.255.255.255 acl to_localhost dst 127.0.0.0/8 acl SSL_ports port 443 563 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 563 # https, snews acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl CONNECT method CONNECT
acl QUERY urlpath_regex cgi-bin \? acl LAN src 129.242.0.0/255.255.0.0 acl ADSL src 172.20.0.0/255.255.0.0 acl Safe_ports port 554 7070 # Streaming acl Safe_ports port 1755 5004 5005 # MediaPlayer
acl acl_users_password proxy_auth REQUIRED
# REGLES a tester acl http proto http http_access allow http acl_users_password
acl ftp-proto proto FTP http_access allow ftp-proto acl_users_password
# And finally deny all other access to this proxy http_access deny all
What is the problem with FTP and Squid ldap authentifications ? What is more, I can't deny FTP !
I tried with : acl ftp-proto proto FTP http_access deny ftp-proto
I always can use FTP with Internet Explorer through squid