Re: What's the difference between ident & proxy_auth !?

Petr Procenko wrote:

> I have about 250 users and a not very big leased line and I'd like
> to create some group's of users, which should gain access to the
> Internet in different time period's

...

> I've tried with proxy_auth, but I can create only one group %(
> The second thing I couldn't understand,what meaning the acl ident
> have.

ident ACL check usednames based on the IDENT protocol. This ACL was
formerly (prior to 2.1) named user. The type user is still valid as a
alias for the ident ACL type.

proxy_auth ACL checks usernames based on username+password verified by
authenticate_program.

If you want to have time based access combined with proxy_auth then you
currently have to put the time limits in front of the proxy_auth limits.
The first proxy_auth tried that does not list the user stops the ACL
search with a "authentication required" message. Also deny using
proxy_auth is currently not very useful as it denies everyone (the ones
matching the acl are denied and therefore required to authenticate, the
ones not matching are required to authenticate since they are not
found...) I'll see if I can make something useful out of it.

---
Henrik Nordstrom
Spare time Squid hacker