Hello, i?m using Squid Version 2.6.STABLE21 with squid_ldap_group auth helper for authenticating groups of users.
My problem is that some groups need to access certain sites only, but these sites contain links to other external content outside the whitelist causing squid popping up the annoying login box repeteadly. Is there a way to make squid follow (or deny) those links without annoying the user? I simply would like that auth is requested just once.. if the user is not allowed, just deny it without requesting authentication again? Here?s my configuration (squid.conf) snippet: ################################################################################################# auth_param basic program /usr/lib64/squid/squid_ldap_auth -b "dc=server,dc=local" -f "uid=%s" -h 127.0.0.1 auth_param basic children 10 auth_param basic realm "Server Proxy Server" auth_param basic credentialsttl 8 hours external_acl_type ldap_group %LOGIN /usr/lib64/squid/squid_ldap_group -b "ou=Groups,dc=server,dc=local" -f "(&(memberUid=%u)(cn=%g)(objectClass=posixGroup))" -h 127.0.0.1 -d acl utenti_tutti external ldap_group grp-proxy acl utenti_tg24 external ldap_group grp-tg24 acl retelocale src 192.0.0.0/255.255.255.0 acl whitelist dstdom_regex "/etc/squid/whitelist" http_access allow retelocale whitelist acl autenticati proxy_auth REQUIRED acl blacklist dstdom_regex "/etc/squid/blacklist" http_access deny utenti_tutti blacklist http_access allow utenti_tutti acl tg24 url_regex "/etc/squid/whitelist_tg24" http_access allow utenti_tg24 tg24 http_access deny utenti_tg24 ################################################################################################# Thank you very much
