Hello all.

Thank you (for developers) for such a great progam like squid.

I would apreciate your help in the following problem:

I have a squid with auth_ldap module.

I have certain denying rules (like to gator.com, doubleclick.net).

The problem is that when an already authenticated user is trying to access 
such a site he is asked another 3 times for his account (even if he retype 
his password) and only then he gets the specific error page saying that 
he tryied to access a restricted site.

I read FAQ, config guide, mailing-lists, switch http_access and so on.

It didn't work.

I give you below an exerpt of the config.


Please help ! And thank you very much.

-- 

Serban Teodorescu,
Romania


#################################################################

auth_param basic program /usr/lib/squid/squid_ldap_auth -b \
 ou=People,dc=acme,dc=com -h 127.0.0.1
auth_param basic children 10
auth_param basic realm ACME Proxy.
auth_param basic credentialsttl 2 hours
...
acl nimda urlpath_regex                 -i     root\.exe$ cmd\.exe$
http_access deny  nimda

acl                     bad_ips                 src "/etc/squid/bad_ips"
http_access     deny                            bad_ips
deny_info               err_bad_ipsi            bad_ips

acl admin               proxy_auth_regex        -i ^admin$ 
acl people              proxy_auth_regex        -i \.
acl bad_people  proxy_auth_regex        -i "/etc/squid/badpeople"
# not authenticated users
acl not_auth    proxy_auth              !*

acl adds    dstdom_regex     -i src "/etc/squid/checks_sites"
http_access deny adds
deny_info err_adds adds

http_access deny bad_people
deny_info err_weekly_quota_exceeded

http_access allow admin
http_access allow people


http_access allow localhost
http_access deny all

#############################################################################



Reply via email to