On Tue, 2008-03-18 at 17:51 +0000, paul cooper wrote: > a follow-on > > ive turned up debugging to > debug_options ALL,1 33,2 28,9 > > squid.conf has > hepworth andrew # cat -n /etc/squid/squid.conf |grep ip_user > 405 external_acl_type ip_user_helper %SRC %LOGIN > /usr/libexec/squid/ip_user_check -f /etc/squid/ip_user.conf > hepworth andrew # > hepworth andrew # cat -n /etc/squid/squid.conf |grep andr > 563 acl andrew ext_user andrew > 642 http_access allow andrew > hepworth andrew # You also need an external acl triggering the lookup. acl ip_user external ip_user_helper http_access deny !ip_user http_access allow andrew The ext_user acl only matches the returned username after the fact. It does not in it self trigger an external acl lookup. Regards Henrik
