If ident_lookup_access says ident should be done Squid will attempt to
do so, but unless you also make use of ident acls in http_access then
Squid won't neccesarily wait for the ident lookup to complete and
will only log the user ident if the ident lookup finished before the
HTTP reply is completed.
A trick to force ident lookup completetion without actually making use
of ident is to add a dummy http_access line that cannot be true
acl ident ident REQUIRED
http_access deny ident !all
Regards
Henrik
On Friday 23 August 2002 14.50, Ian Hall-Beyer wrote:
> I'm not so much using to allow/deny access - I just need to log the
> username. Will just creating the ACL without actually using it
> accomplish this?
>
> -----Original Message-----
> From: Peter Albrecht [mailto:pa@suse.de]
> Sent: Friday, August 23, 2002 3:17 AM
> To: Ian Hall-Beyer
> Cc: squid-users@squid-cache.org
> Subject: Re: [squid-users] ident_lookup?
>
>
> Hi Ian,
>
> use the ACL type ident, e.g.
>
> acl <name> ident <userlist>
> http_access allow <name>
> http_access deny all
>
> You only need an ident daemon (see RFC 1413) running on the client.
> For Linux
> you could use the pidentd (see
> http://sf.www.lysator.liu.se/~pen/pidentd/), for M$ systems try the
> Turtle Identd (ask your favourite search engine where to find it).
>
> Have a lot of fun,
>
> Peter
>
> On Thursday, 22. August 2002 19:36, you wrote:
> > The docs mention ident_lookup, but when I put it in my config
> > file, I get
> >
> > 2002/08/22 13:04:32| parseConfigFile: line 1276 unrecognized:
>
> 'ident_lookup
>
> > on'
> >
> > How do I work with ident for user tracking?
> >
> > --
> > Ian Hall-Beyer ianhb@baronauto.com
> > IT Administrator V: 913-671-1437
> > Baron Automotive Group F: 913-722-5191
Received on Fri Aug 23 2002 - 17:14:28 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:09:49 MST