[squid-users] Squid - FTP - LDAP

From: Gé <gers_nord@dont-contact.us>
Date: Mon, 04 Apr 2005 18:28:36 +0200

Hi,

I have a question about FTP and Squid
I use LDAP authentifications with http requests and it's ok but I have
pbms with FTP requests ==> it doesn't matter if the user is in LDAP or not

Here is my test squid.conf

http_port 3128

cache_mem 20 MB

visible_hostname squid2
cache_dir ufs /u1/cache_squid 1000 16 256

auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
# LDAP
auth_param basic program /usr/lib/squid/pam_auth

# liste acces
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT

acl QUERY urlpath_regex cgi-bin \?
acl LAN src 129.242.0.0/255.255.0.0
acl ADSL src 172.20.0.0/255.255.0.0
acl Safe_ports port 554 7070 # Streaming
acl Safe_ports port 1755 5004 5005 # MediaPlayer

acl acl_users_password proxy_auth REQUIRED

# REGLES a tester
acl http proto http
http_access allow http acl_users_password

acl ftp-proto proto FTP
http_access allow ftp-proto acl_users_password

# And finally deny all other access to this proxy
http_access deny all

What is the problem with FTP and Squid ldap authentifications ?
What is more, I can't deny FTP !

I tried with :
acl ftp-proto proto FTP
http_access deny ftp-proto

I always can use FTP with Internet Explorer through squid
Received on Mon Apr 04 2005 - 10:28:33 MDT

This archive was generated by hypermail pre-2.1.9 : Sun May 01 2005 - 12:00:03 MDT