RE: [squid-users] Squid + AUTH Question

> i have a question. Have a look below to understand what i mean :)
> How can i set it up so that if proxy auth is on, the privhosts won't be
> asked for a password?
>
> authenticate_program /opt/squid/bin/ncsa_auth
> /opt/admin/admin/etc/proxy.passwd
> acl users proxy_auth REQUIRED
>
> acl denydoms dstdomain "/opt/admin/admin/etc/proxy.doms"
> acl denynets dst "/opt/admin/admin/etc/proxy.ips"
> acl privhosts src "/opt/admin/admin/etc/proxy.priv"
> acl denyregex urlpath_regex -i "/opt/admin/admin/etc/proxy.regex"
> http_access allow privhosts users
> http_access deny denydoms users
> http_access deny denynets users
> http_access deny denyregex users

You should use:
acl denydoms dstdomain "/opt/admin/admin/etc/proxy.doms"
acl denynets dst "/opt/admin/admin/etc/proxy.ips"
acl privhosts src "/opt/admin/admin/etc/proxy.priv"
acl denyregex urlpath_regex -i "/opt/admin/admin/etc/proxy.regex"
http_access allow privhosts
http_access deny denydoms
http_access deny denynets
http_access deny denyregex

if the privhosts should not be allowed th fetch the deny doms and ips, you
should order your lines like this:+
http_access deny denydoms
http_access deny denynets
http_access deny denyregex
http_access allow privhosts

But who has to authenticate?
I think everyone else. So you put a line like
  http_access allow all users
and for last
  http_access deny all
in.

So at all, it should read like this:
http_access deny denydoms
http_access deny denynets
http_access deny denyregex
http_access allow privhosts
http_access allow all users
http_access deny all

Hermann
Received on Wed Mar 06 2002 - 06:35:40 MST