[squid-users] Re: AW: important - ip_authenticate_ttl

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Wed, 21 Mar 2001 17:30:17 +0100

Sure, but as I said I don't think I have a separate patch.

Hmm.. didn't I have strict mode in the original patch by setting the
timeout to a negative value?

Wait a minute.. is seems I actually made a patch for this.

See http://squid.sourceforge.net/hno/patch-devel.html, or
http://squid.sourceforge.net/hno/patch/squid-2.3.STABLE1.strict_authenticate_ip_ttl.patch

/Henrik

mmo@internetworking.ch wrote:
>
> is it possible to patch it in 2.3?
> thankx
>
> max
>
> -----Ursprüngliche Nachricht-----
> Von: Henrik Nordstrom [mailto:hno@hem.passagen.se]
> Gesendet: Mittwoch, 21. März 2001 14:56
> An: Max Moser
> Cc: squid-users@ircache.net
> Betreff: Re: important - ip_authenticate_ttl
>
> You are looking for "ip_authenticate_ttl_is_strict on".
>
> Don't know if I have a separate patch for it, but it is available in
> Squid-2.4 and later.
>
> --
> Henrik Nordstrom
> Squid hacker
>
> mmo@internetworking.ch wrote:
> >
> > Hello Henrik
> >
> > Well i just did a large SMB_auth stuff some month ago, maybe you remember
> > me.
> > Now i have to do a large enviroment with radius_auth.
> > This works fine.
> > The prob is the ip_authenticate_ttl got a bad touch:
> > if you have two stations with internetexplorers 5.3 or higher
> > and you say "save this password" on the login dialog box
> > the ip_authenticate_ttl dosnt bring something, because the users
> > dont see anything popping up anymore.
> >
> > My question is: can you make a patch, so that during the
> ip_authenticate_ttl
> > it would not be possible to authenticate from another IP? the otehr ip
> > should receive an error message and not a logon box, or when it isnt
> > possible..he reveice a logon box but an denied message.
> >
> > The second station dont need a force login like now that you can simply
> > login twice and it works. it should not be possible to login during this
> > time.
> >
> > is this possible ? i guess it should be, but i dont know the structure of
> > squid.
> >
> > please gimme feedback
> >
> > thankx
> >
> > max
Received on Wed Mar 21 2001 - 09:34:35 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:58:46 MST