[squid-users] proxy_auth usernames tricks

From: Vladimir Yumashev <vlad@dont-contact.us>
Date: Wed, 30 May 2001 10:07:03 +0500

I use proxy authentication with smb_auth using NT domain.

I have the following lines in my squid.conf:
===
acl imi src 192.168.111.0/255.255.255.0
acl users_denied proxy_auth -i "/usr/local/squid/etc/users_denied"
http_access allow imi !users_denied
===

/usr/local/squid/etc/users_denied contains list of baaaad users.

When user "zoom" is in the list and he enters his name as "zoom" he is
denied by Squid. BUT when he enters his name with letters' case changed
("Zoom", "ZOOM", etc.) he IS NOT denied.

Usernames in NT/2000 domain are case-insensitive. And this is a great
problem.

How to avoid such behaviour? I can dig into the source if necessary.

WBR, Vladimir Yumashev
+7 8462 35-75-04, vlad@imimail.ssau.ru
Received on Tue May 29 2001 - 23:00:11 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:00:20 MST