[squid-users] auth_ldap password request loop if other acl is denied.

From: Serban Teodorescu <serban.teodorescu@dont-contact.us>
Date: Fri, 20 Feb 2004 00:55:07 +0200

Hello all.

Thank you (for developers) for such a great progam like squid.

I would apreciate your help in the following problem:

I have a squid with auth_ldap module.

I have certain denying rules (like to gator.com, doubleclick.net).

The problem is that when an already authenticated user is trying to access
such a site he is asked another 3 times for his account (even if he retype
his password) and only then he gets the specific error page saying that
he tryied to access a restricted site.

I read FAQ, config guide, mailing-lists, switch http_access and so on.

It didn't work.

I give you below an exerpt of the config.

Please help ! And thank you very much.

-- 
Serban Teodorescu,
Romania
#################################################################
auth_param basic program /usr/lib/squid/squid_ldap_auth -b \
 ou=People,dc=acme,dc=com -h 127.0.0.1
auth_param basic children 10
auth_param basic realm ACME Proxy.
auth_param basic credentialsttl 2 hours
...
acl nimda urlpath_regex                 -i     root\.exe$ cmd\.exe$
http_access deny  nimda
acl 			bad_ips			src "/etc/squid/bad_ips"
http_access 	deny        			bad_ips
deny_info 		err_bad_ipsi		bad_ips
acl admin		proxy_auth_regex	-i ^admin$ 
acl people 		proxy_auth_regex	-i \.
acl bad_people	proxy_auth_regex	-i "/etc/squid/badpeople"
# not authenticated users
acl not_auth	proxy_auth 		!*
acl adds    dstdom_regex     -i src "/etc/squid/checks_sites"
http_access deny adds
deny_info err_adds adds
http_access deny bad_people
deny_info err_weekly_quota_exceeded
http_access allow admin
http_access allow people
http_access allow localhost
http_access deny all
#############################################################################
Received on Thu Feb 19 2004 - 15:55:15 MST

This archive was generated by hypermail pre-2.1.9 : Mon Mar 01 2004 - 12:00:02 MST