Re: [SQU] Can squid using file for auth ?

Thomas, you are aware that squid support user authentication, which offers tighter security than per-ip security. What if the user
is coming from a multi-user machine. Adding the IP will add all the users of that machine to your proxy (of course you may want
that). The downside of user authentication is plain text passwords. There are workarounds to that as well though - including network
level encryption via ipsec and or using NTLM authentication (which is in beta in squid now).

Rob

----- Original Message -----
From: "Thomas Wahyudi" <thomas@home.unpar.ac.id>
To: <squid-users@ircache.net>
Sent: Monday, December 04, 2000 8:56 PM
Subject: Re: [SQU] Can squid using file for auth ?

> yes, i think squid -k reconfigure can be use but.. i don;t know how this
> will be affect to
> 1. all request at that time, from what i know squid will be finishing all
> request before reconfigure
> 2. squid performance if i do that at interval 15 seconds, becouse like what
> i said before the iplist file will
> be dynamicly change.
> the idea is when user telnet to server, a program will write his/her ip to
> iplist file so squid will allow the request from hir/her computer direcly
>
> Best regards,
>
> Thomas Wahyudi
> ======== UIN 535778
> ----- Original Message -----
> From: "Chemolli Francesco (USI)" <ChemolliF@GruppoCredit.it>
> To: "'Craig Fels'" <csfels@swbell.net>; "Thomas Wahyudi"
> <thomas@home.unpar.ac.id>; <squid-users@ircache.net>
> Sent: Monday, December 04, 2000 3:45 PM
> Subject: RE: [SQU] Can squid using file for auth ?
>
>
> > > Thomas,
> > >
> > > You can easily create a file with IP addresses and create an
> > > ACL of SRC type
> > > that uses this file. However...if this file changes, Squid
> > > needs to be
> > > restarted for those changes to take effect.
> >
> > How so?
> > squid -k reconfigure does not restart squid afaik.
> > I'm using this technique to auto-update some ACLs.
> >
> > --
> > /kinkie
>
> --
> To unsubscribe, see http://www.squid-cache.org/mailing-lists.html
>
>

--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html