Re: [squid-users] FW: create two groups

On 01/05/11 16:37, Carlos Manuel Trepeu Pupo wrote:
> Using something like NCSA auth and two files with the name of users,
> and two ACL for that files I can't do something like that?

Auth produces a OK/ERR answer. On ERR the user is known/authenticated.
On OK they are unknown/non-authenticated. There is no "maybe" in
authentication.

You have been looking at it all wrong anyways.

   Authorization and Authentication are two very different concepts in
Security AND treated as such in Squid.
   auth_param takes care of authentication.
   ACL and *_access takes care of authorization.

You only need need group. This group is either allowed or not allowed to
use the proxy.

Users who are not authenticated CANNOT be a member of any group (for
example which type of apple is a banana?). Users who are authenticated
can have their group checked by ACL which decide access.

Amos

>
> 2011/5/1 Amos Jeffries:
>> On 30/04/11 20:34, Hossam Al-Khalili wrote:
>>>
>>>
>>> hello,
>>>
>>> i installed squid on debian 6.0.0, and i need to create two users groups
>>> first one users that have authority to access internet, and the second one
>>> can't access it, can i do this two groups in squid.
>>> can you help me.
>>>
>>
>> Creating and managing user accounts and groups is outside of Squid. We
>> cannot help with any specifics there.
>>
>> See the Squid FAQ and authentication config examples for details on
>> checking group permissions once you have them setup.
>>
>> Amos
>> --
>> Please be using
>> Current Stable Squid 2.7.STABLE9 or 3.1.12
>> Beta testers wanted for 3.2.0.7 and 3.1.12.1
>>

-- 
Please be using
   Current Stable Squid 2.7.STABLE9 or 3.1.12
   Beta testers wanted for 3.2.0.7 and 3.1.12.1