[squid-users] Identd authentication

2004-02-05 Thread David Rippel
My current setup: Squid (ACLs) -> DansGuardian (filtering) -> Squid (Caching) What happens is that Squid sends an ident query to the client, if the username in the response (using an external acl) appears in a file that contains a list of allowed users (polled from an ldap server every hour), i

RE: [squid-users] Identd authentication

2004-02-05 Thread Chris Wilcox
From: "David Rippel" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: [squid-users] Identd authentication Date: Thu, 05 Feb 2004 09:53:19 -0500 My current setup: Squid (ACLs) -> DansGuardian (filtering) -> Squid (Caching) What happens is that Squid sends an ident

RE: [squid-users] Identd authentication

2004-02-05 Thread David Rippel
I have identd running on all clients. Squid doesn't appear to be caching ident lookups... maybe I'm missing something in my config for this? If Squid could pass the ident username somehow to DG with cache_peer then DG wouldn't need to do any ident requests (this works if you're using basic auth)

Re: [squid-users] Identd authentication

2004-02-05 Thread Vladimir V. Ivanov
On Thu, 05 Feb 2004 15:28:57 + "Chris Wilcox" <[EMAIL PROTECTED]> wrote: > >The problem is that it generates two ident queries per request and > I thought Squid did cache ident lookups? No.. The code is present for this but contains some errors see second half of patch for bug#901 [http://ww

RE: [squid-users] Identd authentication

2004-02-05 Thread Chris Wilcox
I have identd running on all clients. Squid doesn't appear to be caching ident lookups... maybe I'm missing something in my config for this? If Squid could pass the ident username somehow to DG with cache_peer then DG wouldn't need to do any ident requests (this works if you're using basic auth

RE: [squid-users] Identd authentication

2004-02-05 Thread Henrik Nordstrom
On Thu, 5 Feb 2004, Chris Wilcox wrote: > I thought Squid did cache ident lookups? Nope. It can't as ident is per TCP connection, not for the whole station. The station may be a multi-user station such as a UNIX box, terminal server or similar. Regards Henrik