Thanks for the patch but I am sorry to say this is a duplicated effort. Please see
http://devel.squid-cache.org/projects.html#external_acl_fuzzy and http://devel.squid-cache.org/external_acl/ This work includes - %SRCPORT and a few other similar external_acl_format tags needed for this kind of operations. - An ident based external acl helper - A special cache mode for caching the ident reply and reuse it for all requests from the same client IP (optional, indended for use in Windows and other single-user environments). The new external_acl_type format tags has already been merged into Squid-3. The special cache mode has not yet been merged as it needs to be generalized a little more to fulfill the final goal of this feature. Regards Henrik On Thu, 22 Jul 2004, Vincent Deffontaines wrote: > Greetings! > > In the scope of the NuFW (http://www.nufw.org) project, I am working on > building Single Sign On modules for open source projects. > > Right now, only an Apache module exists, but the Squid module is on the > way, and will be available very soon, thanks to the external acl features. > > There is though a small problem in this design : for proper SSO, the Nufw > "auth module" needs to know about the source port of the client which > performed the request. Right now external_acl_type does not allow for this > information to be passed. > > This is what this (minimal) patch is about : add usability of %SRCPORT to > the FORMAT string of the external_acl_type directive. > > Attached are also patches for cf.data.pre and squid.conf.default, so that > things in the package are all up to date. If you accept this patch, you'll > probably want to update > http://devel.squid-cache.org/external_acl/config.html as well. > > This patch is against 2.5.5. > > I will post another patch, for 3.0-PRE3, in the next few days. > And I will announce to this list the availability of the Nufw external acl > program, with the hope some people here will be interested in testing Nufw > and its SSO capabilities. > > Please Cc: any reply to me, as I am not a list subscriber. > Your comments, flames or questions will be welcome. > > > Regards, > > > Vincent > >