Re: [squid-users] authenticate_ip_ttl

From: Henrik Nordstrom <henrik_at_henriknordstrom.net>
Date: Mon, 17 Aug 2009 23:30:32 +0200

mån 2009-08-17 klockan 00:23 +0100 skrev J Webster:
> If you use proxy authentication and the 'max_user_ip' ACL,
> this directive controls how long Squid remembers the IP
> addresses associated with each user. Use a small value
> (e.g., 60 seconds) if your users might change addresses
> quickly, as is the case with dialups. You might be safe
> using a larger value (e.g., 2 hours) in a corporate LAN
> environment with relatively static address assignments.
>
> Can this be any kind of proxy_authentication?

Yes.

> So the following must be changed for the IP rule to have effect:
> acl aclname max_user_ip [-s] number
> authenticate_ip_ttl

You generally do not need to change the ttl, unless you have users
frequently changing IP addresses / moving between shared computers.

You need to define an acl, and make use of that acl in http_access.

Regards
Henrik
Received on Mon Aug 17 2009 - 21:30:59 MDT

This archive was generated by hypermail 2.2.0 : Thu Aug 20 2009 - 12:00:03 MDT