Re: [squid-users] Multiple authentication schemes

On Mon, 14 Mar 2005, Graeme Bisset wrote:

> I was wondering if it was possible to have multiple proxy_auth acls at
> once? i.e. Can I use the NTLM authentication auth helper for one subnet
> and use another type of helper (not NTLM) for another subnet?

You can't use different authentication schemes or backends depending on
the subnet, but you can limit groups of users to certain subnets if
desired.

proxy_auth or other authentication related acls always uses all your
configured schemes for the login process. All the acls define is who of
the authenticated users is allowed access. How users authenticate is
solely defined by auth_param.

proxy_auth is a explicit login match to the authenticated username,
matching a list of valid usernames or the magic REQUIRED matching all
usernames. There is also several other acls requiring authentication. In
Squid-2.5 the complete list of authentication based acls are:

   proxy_auth
   proxy_auth_regex
   external with an external_acl_type referring to %LOGIN

Regards
Henrik
Received on Mon Mar 14 2005 - 15:37:23 MST