On Thursday 08 May 2003 10.03, Fernando Ruza wrote:
> Hi,
>
> I'm having a small problem with Squid authentication. My conf
> regarding this is the following:
>
> auth_param basic program /usr/local/bin/smb_auth -W HGUV
> auth_param basic children 5
> auth_param basic realm Squid proxy-caching web server
> auth_param basic credentialsttl 2 hours
> acl domainusers proxy_auth REQUIRED
> acl our_networks src 10.36.192.0/22
> http_access allow our_networks
> http_access allow localhost
> http_access allow domainusers
> http_access deny all
> However, when I use a browser (mozilla or IE) it doesn't popup the
> authentication screen for the user and I'm able to visit any web
> site. Is this normal ?? Any reply will be apreciate.
This is because your http_access rules are only requesting
authentication on requests NOT from your network.
I think you actually want something like:
http_access allow our_network domainusers
http_access allow localhost
http_access deny all
This will: (direct translation to english)
1. Allow requests from your network providing correct authentication
2. Allow requests from localhost without the need of authentication
3. Deny all other uses
Regards
Henrik
-- Donations welcome if you consider my Free Squid support helpful. https://www.paypal.com/xclick/business=hno%40squid-cache.org If you need commercial Squid support or cost effective Squid or firewall appliances please refer to MARA Systems AB, Sweden http://www.marasystems.com/, info@marasystems.comReceived on Thu May 08 2003 - 13:43:01 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:16:24 MST