Re: [squid-users] Http_access deny and fallback from ntlm to basic

OK ... Thanks for the tip ..

We have some groups here that have access to a limited set of sites,
so our rules are like the following:

http_access allow group set_of_sites
http_access deny group

I guess we will have to turn them upside down :-)

The weirdest thing is that these rules used to work, until we applied
the security rollup for W2k SP4. After that, we had some problems
regarding squid rules with windows groups. Due to that, we removed the
security rollup. Then two things happened: the password prompts
related to deny rules, and our basic authentication, that was broken
before the installation of the security rollup, turned to work again
...

Regards,
Carlos.

2005/8/5, Henrik Nordstrom <hno@squid-cache.org>:
> On Tue, 2 Aug 2005, Carlos Zottmann wrote:
>
> > The problem we are facing is that when a user hits a rule that denies
> > access, squid falls back to basic authentication and prompts the user
> > for a new username and password.
>
> Make sure your deny lines end with a non-authentication related ACL, for
> example "all".
>
> Regards
> Henrik
>
Received on Fri Aug 05 2005 - 16:38:02 MDT