RE: Can I have different classes of users?

>-----Original Message-----
>From: Robert Collins [mailto:robert.collins@itdomain.com.au]
>Sent: Friday, July 21, 2000 3:15 PM
>To: Ilker Gokhan; 'Luca Mirri'
>Cc: squid-users
>Subject: Re: Can I have different classes of users?
>
>
>RE: Can I have different classes of users?What about
>
>acl fullaccess proxy_auth john mary steve..
>acl selectedsites dstdomain .selectedsite.com
>acl selectedsites dstdomain .another.com
        ^^
it should be different acl name... you can't use the same acl name..
acl nofullaccess proxy_auth john mary steve..
acl selectedsites dstdomain .selectedsite.com .another.com

And with this configuration, you don't have NCSA authentication for all
users (just john,mary etc users).
From squid.conf:
/*
acl aclname proxy_auth username ...
# # list of valid usernames
# # use REQUIRED to accept any valid username.
*/
http_access allow nofullaccess

Best regards,
Ilker G.

>http_access allow selectedsites
>http_access allow fullaccess
>http_access deny all
>
>?
>
>----- Original Message -----
>From: Ilker Gokhan
>To: 'Luca Mirri'
>Cc: squid-users
>Sent: Friday, July 21, 2000 9:40 PM
>Subject: RE: Can I have different classes of users?
>
>
>If you want to take limitation SOME of your authenticated
>users, it seems
>that is very diffucult without source IP's workstation. Once try:
>acl restrictedusers ident user1 user2 .... /* these users
>should be into the
>NCSA users also of course you shouldn't compile squid
>with --disable-ident-lookups option*/
>/* I'm not sure can we use together with ident and the other
>authentication
>programs ? */
>acl allowedusers proxy_auth REQUIRED
>acl dest dstdomain .yahoo.com .whatever.com
>http_access deny !dest restrictedusers
>http_access allow allowedusers
>http_access deny all
>Best regards,
>Ilker G.
>>-----Original Message-----
>>From: Luca Mirri [mailto:l.mirri@tin.it]
>>Sent: Friday, July 21, 2000 2:05 AM
>>To: squid-users
>>Subject: Can I have different classes of users?
>>
>>
>>I'd like to know if it is possible to have some privileged
>>users with full
>>access to the Internet,
>>while others have access only to selected sites.
>>I'm using NCSA auth on my Squid server and I'd prefer not to
>>have acl based
>>upon source IP addresses of the users' workstations.
>>Thank you,
>>Luca Mirri
>>
>
Received on Fri Jul 21 2000 - 07:26:14 MDT