Search squid archive

proxy_auth question

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi list,

I have a question regarding proxy_auth, I hope you guys can point me
to where I am doing things wrong.

My issue is, if I use the following:

acl password proxy_auth /usr/local/squid/etc/limited
http_access deny password

and /usr/local/squid/etc/limited contains the value
"kenneth" (without the quotes"), I am still allowed http access if i type
kenneth as my user name.

but if i use:
acl password proxy_auth kenneth
http_access deny password

it works, user kenneth is denied http access.

So, is it possible for proxy_auth to get the username on a file?


Below is my complete squid.conf
- ---

cache_peer xx.xx.xx.xx parent 8080 0 no-query proxy-only default
http_port 3128

cache_effective_user squid
cache_effective_group squid

cache_mgr postmaster@xxxxxxx

cache_dir null /tmp

auth_param basic program /usr/local/squid/libexec/ncsa_auth
/usr/local/squid/etc/squidusers
auth_param basic children 5
auth_param basic realm DEVELOPMENT SERVER [ >:) ]
auth_param basic credentialsttl 2 hours

acl password proxy_auth /usr/local/squid/etc/limited
acl test src 10.87.4.2/255.255.255.255

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80        
acl Safe_ports port 21         
acl Safe_ports port 443 563   
acl Safe_ports port 70        
acl Safe_ports port 210        
acl Safe_ports port 1025-65535
acl Safe_ports port 280        
acl Safe_ports port 488        
acl Safe_ports port 591        
acl Safe_ports port 777        
acl CONNECT method CONNECT

never_direct allow all
http_access deny password
http_access allow all
- --


thanks and best regards,

- --

Kenneth P. Oncinian
Panasonic Communications Philippines Corporation
Information Systems Division - Network and Infrastructure Department
- --
PGP Public Key: http://m.1asphost.com/koncinian/koncinian.gnupg.key
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFECTbb9MTaiXoaMBgRAkI/AJ4sW0UYib4Hu1xmX/WnYTHjLtQuZACfalsm
UoZp8eZb+OreJJ6WiFhhgsM=
=/KN/
-----END PGP SIGNATURE-----


[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux