RE: [squid-users] Squid / ident / dansguardian

Hello

I removed the file msntauth.allowusers. Only the users present in the ACL UtilAutorises Ident are taken into account.

If I go on Internet, that functions but when I stopped the service Ident, I should not authenticate myself. It is always the same problem.

>So, you want those users which are not running an ident service on their
>machines to authenticate manually? Why not denying access at all (and
>therefore force them to run the ident service)?

Because in my company, There are fixed stations and stations as a TSE (terminal Server) which not support Ident.

In dansguardian.conf file :

Usernameidmethodproxyauth = off
Usernameidmethodident = on

-----Message d'origine-----
De : Peter Albrecht [mailto:peter.albrecht@novell.com]
Envoyé : mardi 16 mai 2006 11:52
À : squid-users@squid-cache.org
Objet : Re: [squid-users] Squid / ident / dansguardian

Hello,

I'm not sure if I got everything correctly ...

> In the file squid.conf, I specified the following ACL :
>
> ACL ServiceInfo ident listeUtilisateurs
> http_access allow ServiceInfo

You need to specify the absolute path of your file, e.g. something like:

ACL ServiceInfo ident /etc/squid/listeUtilisateurs

(or whereever the file is located).

> In the file of configuration of msnt (msntauth.allowusers), I specified
> the list of the authorized users.

What is this file msntauth.allowusers? The list of authorised users needs to
be in the file you specify in the ACL above.

> Thus normally, if the Ident service turns on my machine and that I am in
> the ACL ServiceInfo and the file msntauth.allowusers, I can reach
> Internet without me to authenticate. However it is not the case.

So, you want those users which are not running an ident service on their
machines to authenticate manually? Why not denying access at all (and
therefore force them to run the ident service)?

Regards,

Peter

-- 
Peter Albrecht, Novell Training Services, peter.albrecht@novell.com