Re: Can I have different classes of users?

RE: Can I have different classes of users?What about

acl fullaccess proxy_auth john mary steve..
acl selectedsites dstdomain .selectedsite.com
acl selectedsites dstdomain .another.com

http_access allow selectedsites
http_access allow fullaccess
http_access deny all

?

----- Original Message -----
From: Ilker Gokhan
To: 'Luca Mirri'
Cc: squid-users
Sent: Friday, July 21, 2000 9:40 PM
Subject: RE: Can I have different classes of users?

If you want to take limitation SOME of your authenticated users, it seems
that is very diffucult without source IP's workstation. Once try:
acl restrictedusers ident user1 user2 .... /* these users should be into the
NCSA users also of course you shouldn't compile squid
with --disable-ident-lookups option*/
/* I'm not sure can we use together with ident and the other authentication
programs ? */
acl allowedusers proxy_auth REQUIRED
acl dest dstdomain .yahoo.com .whatever.com
http_access deny !dest restrictedusers
http_access allow allowedusers
http_access deny all
Best regards,
Ilker G.
>-----Original Message-----
>From: Luca Mirri [mailto:l.mirri@tin.it]
>Sent: Friday, July 21, 2000 2:05 AM
>To: squid-users
>Subject: Can I have different classes of users?
>
>
>I'd like to know if it is possible to have some privileged
>users with full
>access to the Internet,
>while others have access only to selected sites.
>I'm using NCSA auth on my Squid server and I'd prefer not to
>have acl based
>upon source IP addresses of the users' workstations.
>Thank you,
>Luca Mirri
>
Received on Fri Jul 21 2000 - 06:17:25 MDT