Hi,
I'm currently using the DB authentication (squid_db_auth).
This works flawlessly, however I have a need to enable authentication by a
list of IPs.
I tried using a simple ACL, but it's not dynamic so that doesn't answer my
need.
So I'm trying to create an external ACL.
For some reason the external ACL isn't working.
In order to check this, I commented out all the configs of squid_db_auth.
Please see the configurations below:
external_acl_type ip_checker children-max=20 %SRC
/usr/lib64/squid/ip_checker.sh
acl allowed_ips external ip_checker
http_access allow allowed_ips
cat /usr/lib64/squid/ip_checker.sh
#!/bin/bash
while read ip
do
if ! grep -w "$ip" /etc/squid/allowed_ips.txt ; then
echo "ERR"
else echo "OK"
fi
done
cat /etc/squid/allowed_ips.txt
192.168.1.1
The error message I'm getting:
2017/05/23 01:33:09.160 kid1| 82,2| external_acl.cc(786) aclMatchExternal:
ip_checker("192.168.1.1") = lookup needed
2017/05/23 01:33:09.160 kid1| WARNING: external ACL 'ip_checker' queue
overload. Request rejected '192.168.1.1'.
Thanks in advance,
Avi
--
View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/External-ACL-tp4682519.html
Sent from the Squid - Users mailing list archive at Nabble.com.
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users
