RE: [squid-users] NT Authentication

From: Jorge Cuellar Martinez <jorge.cuellar@dont-contact.us>
Date: Thu, 23 Aug 2001 17:09:55 -0500

Well i have put the -i acl and didn't work...
i have read -i is only intended for regex acls....
but i'm not sure...

acl users proxy_auth -i REQUIRED

seems like a bug?

what should i do now?

-----Original Message-----
From: Robert Collins [mailto:robert.collins@itdomain.com.au]
Sent: Wednesday, August 22, 2001 5:53 PM
To: Jorge Cuellar Martinez
Cc: squid-users@squid-cache.org
Subject: Re: [squid-users] NT Authentication

On 22 Aug 2001 17:44:00 -0500, Jorge Cuellar Martinez wrote:
> I'm having a problem using smb_auth ....
>
> As you may know, Microsoft Windows NT is not case sensitive for the
> usernames, so for windows User USER user and uSeR are the same user, but
not
> for squid....
>
> So i'm using strict ip ttl, and some users are bypassing it by using their
> usernames in combinations of lowercase and uppercase.
>
> I know that the best solution is to replace Windows authentication with
> other external authentication module, such as ldap or radius... and i
will,
> but in a few more months.... but i need to solve it now.... i don't like
my
> users to do that....
>
> Any ideas?

Add -i to the beginning of the proxy auth acl. That makes the acl case
insensitive. If you've already done that, you've encountered a bug.

Rob

> Thanks
>
> <mailto:jorge.cuellar@sat.gob.mx> Jorge Cuéllar.
> Servicio de <http://www.sat.gob.mx/> Administración Tributaria
> <http://intrasat/Dgti/Aco/default.htm> Seguridad Informática
> Tel: 5483-1105 Extensión 7167
> <http://www.esmas.com/skytel/mensajes/> Skytel PIN:
> <mailto:5583533@skytel.com.mx> 5583533
>
>
Received on Thu Aug 23 2001 - 16:08:17 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:01:54 MST