Thanks i will check with the deny thing it seems much more efficient
Eliezer
On 24/09/2011 17:41, Helmut Hullen wrote:
Hallo, Eliezer,
Du meintest am 24.09.11:
i have used the info on:
http://www.cyberciti.biz/tips/linux-unix-squid-proxy-server-authent
ication.html
there it is
FATAL: ERROR: Invalid ACL: acl ncsa_users proxy_auth REQUIRED
I use
# ----------------- auth.conf ---------------
auth_param basic program /usr/libexec/ncsa_auth /etc/squid/.htpasswd
auth_param basic children 20
auth_param basic realm Surf-Anmeldung
auth_param basic credentialsttl 60 minutes
acl Anmeldung proxy_auth REQUIRED
http_access deny !Anmeldung
# --------------------------------------------
Configuration:
Squid Cache: Version 3.2.0.10
configure options: '--prefix=/usr' '--libdir=/usr/lib' '--sysconfdir=/
etc/squid' '--localstatedir=/var/log/squid' '--datadir=/usr/share/squid'
'--with-pidfile=/var/run/squid' '--mandir=/usr/man' '--with-logdir=/var/
log/squid' '--enable-snmp' '--enable-basic-auth-helpers=NCSA,YP,MSNT-
multi-domain,MSNT,SMB,getpwnam,LDAP,POP3,RADIUS' '--enable-linux-
netfilter' '--enable-async-io' '--with-large-files' '--disable-option-
checking' '--with-filedescriptors=65536' '--enable-icmp' '--enable-
delay-pools' '--enable-digest-auth-helpers=LDAP,file' '--enable-ntlm-
auth-helpers=smb_lm' '--enable-negotiate-auth-helpers=kerberos' '--
enable-inline' '--disable-loadable-modules' '--disable-translation' '--
enable-storeio=aufs,ufs' '--enable-arp-acl' '--enable-wccp' '--enable-
external-acl-helpers=ip_user,ldap_group,unix_group,wbinfo_group' '--
enable-removal-policies=lru,heap' '--enable-esi' '--enable-ssl' '--
build=i486-slackware-linux' 'build_alias=i486-slackware-linux' 'CFLAGS=-
O2 -march=i486 -mtune=i686' 'CXXFLAGS=-O2 -march=i486 -mtune=i686'
Viele Gruesse!
Helmut
