Search squid archive

Re: Remote access acls

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I would recommend you use digest instead of basic. That way the password
is not transmitted in plain text.

almost the same setup as basic, except for the auth_param settings.

auth_param digest program /usr/local/squid/libexec/digest_pw_auth /usr/local/squid/etc/registered.htdigest

and change the rest of the basic auth_param to digest instead..

the password file is most easily maintained using Apache htdigest, instead of Apache htpasswd..

Regards
Henrik

On fre, 2008-06-13 at 21:42 +0700, docdiz wrote:
> I use simple NCSA. Then add small password file to NCSA directory.
> This password file is changed EVERY day, at 08:00am and 17:00pm. User
> have to call in to get the username/password of that day before
> they're able to use this office's squid (another way to audit who's
> working or not :-D)
> 
> # heh! this line is extract from the very old 2.0 conf
> authenticate_program /usr/local/squid/bin/ncsa /usr/local/squid/etc/registered
> 
> # this two lines never change eventhough it's now 2.6
> acl MEMBER proxy_auth REQUIRED
> http_access deny !MEMBER

Attachment: signature.asc
Description: This is a digitally signed message part


[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux