Re: [squid-users] outright deny

Covington, Chris wrote:

>Hi all,
>
>I've got an NTLM Group deny working:
>
>external_acl_type ntlm_group ttl=0 concurrency=5 %LOGIN
>/usr/lib/squid/wbinfo_group.pl
>acl NTLMNoAccess external ntlm_group Internet_Access_None
>http_access deny NTLMNoAccess
>http_reply_access deny NTLMNoAccess
>
>The issue is that when a user is a member of Internet_Access_None,
>they get prompted to login rather than just seeing the
>ERR_CACHE_ACCESS_DENIED (ERR_ACCESS_DENIED?) page. How can I setup an
>outright deny when a member is in Internet_Access_None?
>
>

If I remember correctly, if Squid denies access due to a proxy_auth ACL,
it will prompt for different credentials. Changing your http_access
line to...

http_access deny NTLMNoAccess all

...should clear this up. I think.

>thanks
>---
>Chris Covington
>IT
>Plus One Health Management
>75 Maiden Lane Suite 801
>NY, NY 10038
>646-312-6269
>http://www.plusoneactive.com
>
>
Chris
Received on Tue Mar 28 2006 - 11:55:53 MST